Traffic Trace Info
DumpFile: -
Id: 200803190600
StartTime: Wed Mar 19 06:00:00 2008
EndTime: Wed Mar 19 06:15:00 2008
TotalTime: 899.85 seconds
TotalCapSize: 511.66MB CapLen: 96 bytes
# of packets: 9252397 (5095.67MB)
AvgRate: 47.51Mbps stddev:10.26M
IP flow (unique src/dst pair) Information
# of flows: 612190 (avg. 15.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 3.2% 2.1% 1.7% 1.2% 1.2% 1.1% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 343111
Top 10 bandwidth usage (bytes/total in %):
12.6% 11.9% 9.3% 7.4% 5.8% 5.3% 4.2% 4.2% 4.1% 3.3%
# of IPv6 addresses: 1629
Top 10 bandwidth usage (bytes/total in %):
57.3% 52.3% 6.4% 5.6% 3.5% 3.4% 3.3% 3.3% 2.4% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190600.pktlen.png)
detailed numbers
[ 32- 63]: 1953271
[ 64- 127]: 2803564
[ 128- 255]: 776326
[ 256- 511]: 417717
[ 512- 1023]: 133199
[ 1024- 2047]: 3168320
Protocol Breakdown
![[protocol breakdown chart]](200803190600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9252397 (100.00%) 5343198961 (100.00%) 577.49
ip 9223591 ( 99.69%) 5334448929 ( 99.84%) 578.35
tcp 7080862 ( 76.53%) 4820109971 ( 90.21%) 680.72
http(s) 2142158 ( 23.15%) 2872943862 ( 53.77%) 1341.14
http(c) 1190479 ( 12.87%) 116586275 ( 2.18%) 97.93
squid 742919 ( 8.03%) 409377162 ( 7.66%) 551.04
smtp 657423 ( 7.11%) 111799224 ( 2.09%) 170.06
ftp 61148 ( 0.66%) 5079925 ( 0.10%) 83.08
pop3 3636 ( 0.04%) 1903811 ( 0.04%) 523.60
imap 4232 ( 0.05%) 2773401 ( 0.05%) 655.34
telnet 2024 ( 0.02%) 129885 ( 0.00%) 64.17
ssh 519582 ( 5.62%) 409380917 ( 7.66%) 787.90
dns 2027 ( 0.02%) 167661 ( 0.00%) 82.71
bgp 212 ( 0.00%) 66334 ( 0.00%) 312.90
realaud 15 ( 0.00%) 1456 ( 0.00%) 97.07
rtsp 92 ( 0.00%) 21172 ( 0.00%) 230.13
icecast 210 ( 0.00%) 14895 ( 0.00%) 70.93
other 1754703 ( 18.96%) 889863871 ( 16.65%) 507.13
udp 1813124 ( 19.60%) 482202479 ( 9.02%) 265.95
dns 973757 ( 10.52%) 146711778 ( 2.75%) 150.67
realaud 8700 ( 0.09%) 5454740 ( 0.10%) 626.98
halflif 19 ( 0.00%) 1956 ( 0.00%) 102.95
starcra 23 ( 0.00%) 4207 ( 0.00%) 182.91
everque 30 ( 0.00%) 4029 ( 0.00%) 134.30
unreal 11 ( 0.00%) 1461 ( 0.00%) 132.82
quake 4 ( 0.00%) 362 ( 0.00%) 90.50
cuseeme 5 ( 0.00%) 701 ( 0.00%) 140.20
other 830525 ( 8.98%) 330014296 ( 6.18%) 397.36
icmp 320926 ( 3.47%) 30872991 ( 0.58%) 96.20
ipip 345 ( 0.00%) 44486 ( 0.00%) 128.94
ip6 1095 ( 0.01%) 152854 ( 0.00%) 139.59
other 7239 ( 0.08%) 1066148 ( 0.02%) 147.28
frag 1681 ( 0.02%) 1443838 ( 0.03%) 858.92
ip6 28806 ( 0.31%) 8750032 ( 0.16%) 303.76
tcp6 4598 ( 0.05%) 597973 ( 0.01%) 130.05
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1684 ( 0.02%) 170392 ( 0.00%) 101.18
smtp 491 ( 0.01%) 156340 ( 0.00%) 318.41
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 87 ( 0.00%) 11349 ( 0.00%) 130.45
other 2291 ( 0.02%) 255603 ( 0.00%) 111.57
udp6 15549 ( 0.17%) 2869379 ( 0.05%) 184.54
dns 14056 ( 0.15%) 2552701 ( 0.05%) 181.61
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1491 ( 0.02%) 316442 ( 0.01%) 212.23
icmp6 5133 ( 0.06%) 708624 ( 0.01%) 138.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3496 ( 0.04%) 4569976 ( 0.09%) 1307.20
tcpdump file: 200803190600.dump.gz (239.14 MB)