Traffic Trace Info
DumpFile: -
Id: 200803190700
StartTime: Wed Mar 19 07:00:00 2008
EndTime: Wed Mar 19 07:15:01 2008
TotalTime: 900.80 seconds
TotalCapSize: 483.65MB CapLen: 96 bytes
# of packets: 8640148 (4905.45MB)
AvgRate: 45.69Mbps stddev:16.54M
IP flow (unique src/dst pair) Information
# of flows: 558206 (avg. 15.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.3% 3.2% 2.7% 2.6% 2.3% 1.6% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 284482
Top 10 bandwidth usage (bytes/total in %):
10.1% 9.9% 9.7% 7.5% 6.1% 6.0% 4.3% 3.7% 3.4% 3.3%
# of IPv6 addresses: 1705
Top 10 bandwidth usage (bytes/total in %):
51.4% 46.8% 8.3% 7.1% 4.3% 3.9% 3.1% 3.1% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190700.pktlen.png)
detailed numbers
[ 32- 63]: 1668544
[ 64- 127]: 2713123
[ 128- 255]: 688867
[ 256- 511]: 400692
[ 512- 1023]: 144586
[ 1024- 2047]: 3024336
Protocol Breakdown
![[protocol breakdown chart]](200803190700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8640148 (100.00%) 5143740551 (100.00%) 595.33
ip 8606431 ( 99.61%) 5134095785 ( 99.81%) 596.54
tcp 6717055 ( 77.74%) 4806194306 ( 93.44%) 715.52
http(s) 2285833 ( 26.46%) 3061178633 ( 59.51%) 1339.20
http(c) 1154830 ( 13.37%) 112992011 ( 2.20%) 97.84
squid 428699 ( 4.96%) 260324096 ( 5.06%) 607.24
smtp 678170 ( 7.85%) 101594894 ( 1.98%) 149.81
ftp 64188 ( 0.74%) 5124596 ( 0.10%) 79.84
pop3 7042 ( 0.08%) 3652286 ( 0.07%) 518.64
imap 46354 ( 0.54%) 4189945 ( 0.08%) 90.39
telnet 925 ( 0.01%) 60268 ( 0.00%) 65.15
ssh 418087 ( 4.84%) 389987575 ( 7.58%) 932.79
dns 2076 ( 0.02%) 199681 ( 0.00%) 96.19
bgp 204 ( 0.00%) 66944 ( 0.00%) 328.16
napster 7 ( 0.00%) 448 ( 0.00%) 64.00
realaud 23 ( 0.00%) 2976 ( 0.00%) 129.39
rtsp 72 ( 0.00%) 18708 ( 0.00%) 259.83
icecast 181 ( 0.00%) 12711 ( 0.00%) 70.23
other 1630361 ( 18.87%) 866788354 ( 16.85%) 531.65
udp 1569543 ( 18.17%) 296510827 ( 5.76%) 188.92
dns 1046681 ( 12.11%) 157121522 ( 3.05%) 150.11
realaud 8697 ( 0.10%) 5455367 ( 0.11%) 627.27
halflif 19 ( 0.00%) 1625 ( 0.00%) 85.53
starcra 19 ( 0.00%) 3909 ( 0.00%) 205.74
everque 26 ( 0.00%) 3522 ( 0.00%) 135.46
unreal 14 ( 0.00%) 2257 ( 0.00%) 161.21
quake 9 ( 0.00%) 673 ( 0.00%) 74.78
cuseeme 3 ( 0.00%) 467 ( 0.00%) 155.67
other 514032 ( 5.95%) 133905698 ( 2.60%) 260.50
icmp 307692 ( 3.56%) 29629538 ( 0.58%) 96.30
ipip 323 ( 0.00%) 39218 ( 0.00%) 121.42
ip6 1077 ( 0.01%) 149120 ( 0.00%) 138.46
other 10741 ( 0.12%) 1572776 ( 0.03%) 146.43
frag 1599 ( 0.02%) 1350723 ( 0.03%) 844.73
ip6 33715 ( 0.39%) 9644646 ( 0.19%) 286.06
tcp6 5130 ( 0.06%) 838621 ( 0.02%) 163.47
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1844 ( 0.02%) 178795 ( 0.00%) 96.96
smtp 906 ( 0.01%) 389219 ( 0.01%) 429.60
ftp 17 ( 0.00%) 1549 ( 0.00%) 91.12
pop3 60 ( 0.00%) 5446 ( 0.00%) 90.77
bgp 73 ( 0.00%) 8369 ( 0.00%) 114.64
other 2225 ( 0.03%) 254631 ( 0.00%) 114.44
udp6 19867 ( 0.23%) 3587338 ( 0.07%) 180.57
dns 18369 ( 0.21%) 3278435 ( 0.06%) 178.48
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1497 ( 0.02%) 308787 ( 0.01%) 206.27
icmp6 5230 ( 0.06%) 700571 ( 0.01%) 133.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3458 ( 0.04%) 4514036 ( 0.09%) 1305.39
tcpdump file: 200803190700.dump.gz (222.37 MB)