Traffic Trace Info
DumpFile: -
Id: 200803190630
StartTime: Wed Mar 19 06:30:00 2008
EndTime: Wed Mar 19 06:45:00 2008
TotalTime: 900.20 seconds
TotalCapSize: 530.97MB CapLen: 96 bytes
# of packets: 9529225 (5795.61MB)
AvgRate: 54.01Mbps stddev:9.67M
IP flow (unique src/dst pair) Information
# of flows: 856578 (avg. 11.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.4% 6.0% 3.1% 2.3% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 507695
Top 10 bandwidth usage (bytes/total in %):
24.0% 18.5% 9.7% 9.6% 7.3% 6.2% 4.4% 3.2% 3.1% 2.8%
# of IPv6 addresses: 1923
Top 10 bandwidth usage (bytes/total in %):
52.7% 48.2% 14.0% 10.7% 5.1% 4.3% 3.0% 1.6% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190630.pktlen.png)
detailed numbers
[ 32- 63]: 2096301
[ 64- 127]: 2595226
[ 128- 255]: 601806
[ 256- 511]: 356281
[ 512- 1023]: 135116
[ 1024- 2047]: 3744495
Protocol Breakdown
![[protocol breakdown chart]](200803190630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9529225 (100.00%) 6077139895 (100.00%) 637.74
ip 9497146 ( 99.66%) 6067626111 ( 99.84%) 638.89
tcp 7538839 ( 79.11%) 5539123013 ( 91.15%) 734.74
http(s) 1908953 ( 20.03%) 2531012594 ( 41.65%) 1325.86
http(c) 1037894 ( 10.89%) 95940277 ( 1.58%) 92.44
squid 575035 ( 6.03%) 392110760 ( 6.45%) 681.89
smtp 658127 ( 6.91%) 94540679 ( 1.56%) 143.65
ftp 67323 ( 0.71%) 5501803 ( 0.09%) 81.72
pop3 7639 ( 0.08%) 4586841 ( 0.08%) 600.45
imap 45638 ( 0.48%) 3970382 ( 0.07%) 87.00
telnet 2557 ( 0.03%) 164137 ( 0.00%) 64.19
ssh 468709 ( 4.92%) 388137001 ( 6.39%) 828.10
dns 3917 ( 0.04%) 1886780 ( 0.03%) 481.69
bgp 194 ( 0.00%) 48979 ( 0.00%) 252.47
realaud 4 ( 0.00%) 634 ( 0.00%) 158.50
rtsp 66 ( 0.00%) 17908 ( 0.00%) 271.33
icecast 4700 ( 0.05%) 4560095 ( 0.08%) 970.23
other 2758081 ( 28.94%) 2016644023 ( 33.18%) 731.18
udp 1629249 ( 17.10%) 496578968 ( 8.17%) 304.79
dns 853453 ( 8.96%) 125663609 ( 2.07%) 147.24
realaud 8699 ( 0.09%) 5454860 ( 0.09%) 627.07
halflif 24 ( 0.00%) 2457 ( 0.00%) 102.38
starcra 35 ( 0.00%) 7231 ( 0.00%) 206.60
everque 30 ( 0.00%) 6079 ( 0.00%) 202.63
unreal 13 ( 0.00%) 3523 ( 0.00%) 271.00
quake 8 ( 0.00%) 645 ( 0.00%) 80.62
cuseeme 3 ( 0.00%) 236 ( 0.00%) 78.67
other 766944 ( 8.05%) 365421678 ( 6.01%) 476.46
icmp 318986 ( 3.35%) 30450391 ( 0.50%) 95.46
ipip 347 ( 0.00%) 44181 ( 0.00%) 127.32
ip6 1082 ( 0.01%) 151074 ( 0.00%) 139.62
other 8643 ( 0.09%) 1278484 ( 0.02%) 147.92
frag 1281 ( 0.01%) 1131061 ( 0.02%) 882.95
ip6 32079 ( 0.34%) 9513784 ( 0.16%) 296.57
tcp6 4659 ( 0.05%) 826414 ( 0.01%) 177.38
http(s) 164 ( 0.00%) 204231 ( 0.00%) 1245.31
http(c) 1708 ( 0.02%) 166665 ( 0.00%) 97.58
smtp 536 ( 0.01%) 200373 ( 0.00%) 373.83
ftp 15 ( 0.00%) 1407 ( 0.00%) 93.80
pop3 57 ( 0.00%) 5206 ( 0.00%) 91.33
bgp 76 ( 0.00%) 8729 ( 0.00%) 114.86
other 2103 ( 0.02%) 239803 ( 0.00%) 114.03
udp6 18730 ( 0.20%) 3389457 ( 0.06%) 180.96
dns 16794 ( 0.18%) 2893194 ( 0.05%) 172.28
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1935 ( 0.02%) 496126 ( 0.01%) 256.40
icmp6 5139 ( 0.05%) 696233 ( 0.01%) 135.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3521 ( 0.04%) 4597600 ( 0.08%) 1305.77
tcpdump file: 200803190630.dump.gz (239.51 MB)