Traffic Trace Info
DumpFile: -
Id: 200803190645
StartTime: Wed Mar 19 06:45:00 2008
EndTime: Wed Mar 19 07:00:00 2008
TotalTime: 899.65 seconds
TotalCapSize: 493.75MB CapLen: 96 bytes
# of packets: 8827984 (5127.26MB)
AvgRate: 47.81Mbps stddev:12.14M
IP flow (unique src/dst pair) Information
# of flows: 699906 (avg. 12.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 7.1% 4.1% 2.9% 2.6% 1.2% 1.1% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 376365
Top 10 bandwidth usage (bytes/total in %):
17.9% 10.7% 10.6% 9.9% 8.5% 7.3% 4.2% 4.1% 3.8% 3.0%
# of IPv6 addresses: 1870
Top 10 bandwidth usage (bytes/total in %):
50.5% 46.3% 9.1% 7.6% 6.0% 5.7% 3.6% 3.0% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190645.pktlen.png)
detailed numbers
[ 32- 63]: 1858502
[ 64- 127]: 2529948
[ 128- 255]: 646959
[ 256- 511]: 438733
[ 512- 1023]: 157095
[ 1024- 2047]: 3196747
Protocol Breakdown
![[protocol breakdown chart]](200803190645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8827984 (100.00%) 5376320279 (100.00%) 609.01
ip 8794723 ( 99.62%) 5366597816 ( 99.82%) 610.21
tcp 6963967 ( 78.89%) 5047096906 ( 93.88%) 724.74
http(s) 2100065 ( 23.79%) 2787420729 ( 51.85%) 1327.30
http(c) 1066831 ( 12.08%) 98199742 ( 1.83%) 92.05
squid 495598 ( 5.61%) 300167499 ( 5.58%) 605.67
smtp 616723 ( 6.99%) 99482080 ( 1.85%) 161.31
ftp 65742 ( 0.74%) 5173660 ( 0.10%) 78.70
pop3 15728 ( 0.18%) 9195588 ( 0.17%) 584.66
imap 43032 ( 0.49%) 3748003 ( 0.07%) 87.10
telnet 2156 ( 0.02%) 158910 ( 0.00%) 73.71
ssh 436585 ( 4.95%) 399270268 ( 7.43%) 914.53
dns 2025 ( 0.02%) 150165 ( 0.00%) 74.16
bgp 210 ( 0.00%) 59760 ( 0.00%) 284.57
napster 11 ( 0.00%) 1155 ( 0.00%) 105.00
realaud 8 ( 0.00%) 1022 ( 0.00%) 127.75
rtsp 532 ( 0.01%) 256519 ( 0.00%) 482.18
icecast 718 ( 0.01%) 497305 ( 0.01%) 692.63
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2118000 ( 23.99%) 1343314321 ( 24.99%) 634.24
udp 1473227 ( 16.69%) 285174519 ( 5.30%) 193.57
dns 950513 ( 10.77%) 142910174 ( 2.66%) 150.35
realaud 13939 ( 0.16%) 10997532 ( 0.20%) 788.98
halflif 21 ( 0.00%) 2831 ( 0.00%) 134.81
starcra 36 ( 0.00%) 7341 ( 0.00%) 203.92
everque 43 ( 0.00%) 5456 ( 0.00%) 126.88
unreal 14 ( 0.00%) 4291 ( 0.00%) 306.50
quake 7 ( 0.00%) 521 ( 0.00%) 74.43
other 508628 ( 5.76%) 131229244 ( 2.44%) 258.01
icmp 345513 ( 3.91%) 32568727 ( 0.61%) 94.26
ipip 330 ( 0.00%) 38892 ( 0.00%) 117.85
ip6 1079 ( 0.01%) 148121 ( 0.00%) 137.28
other 10607 ( 0.12%) 1570651 ( 0.03%) 148.08
frag 1202 ( 0.01%) 1038083 ( 0.02%) 863.63
ip6 33261 ( 0.38%) 9722463 ( 0.18%) 292.31
tcp6 4882 ( 0.06%) 741852 ( 0.01%) 151.96
http(s) 7 ( 0.00%) 5102 ( 0.00%) 728.86
http(c) 1603 ( 0.02%) 154364 ( 0.00%) 96.30
smtp 1014 ( 0.01%) 330646 ( 0.01%) 326.08
pop3 45 ( 0.00%) 4102 ( 0.00%) 91.16
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2142 ( 0.02%) 240380 ( 0.00%) 112.22
udp6 19934 ( 0.23%) 3816320 ( 0.07%) 191.45
dns 17907 ( 0.20%) 3238569 ( 0.06%) 180.85
other 2027 ( 0.02%) 577751 ( 0.01%) 285.03
icmp6 4963 ( 0.06%) 658243 ( 0.01%) 132.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3452 ( 0.04%) 4501968 ( 0.08%) 1304.16
tcpdump file: 200803190645.dump.gz (225.33 MB)