Traffic Trace Info
DumpFile: -
Id: 200803190715
StartTime: Wed Mar 19 07:15:01 2008
EndTime: Wed Mar 19 07:30:01 2008
TotalTime: 900.13 seconds
TotalCapSize: 498.80MB CapLen: 96 bytes
# of packets: 8980008 (5158.60MB)
AvgRate: 48.09Mbps stddev:10.02M
IP flow (unique src/dst pair) Information
# of flows: 628747 (avg. 14.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 3.0% 2.9% 2.7% 2.5% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 347444
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.3% 8.7% 7.0% 6.2% 3.5% 3.4% 3.3% 3.0% 3.0%
# of IPv6 addresses: 2095
Top 10 bandwidth usage (bytes/total in %):
48.8% 44.7% 10.0% 8.1% 6.6% 5.9% 3.5% 3.2% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190715.pktlen.png)
detailed numbers
[ 32- 63]: 1922958
[ 64- 127]: 2650781
[ 128- 255]: 687214
[ 256- 511]: 374733
[ 512- 1023]: 142658
[ 1024- 2047]: 3201664
Protocol Breakdown
![[protocol breakdown chart]](200803190715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8980008 (100.00%) 5409188203 (100.00%) 602.36
ip 8944575 ( 99.61%) 5398931499 ( 99.81%) 603.60
tcp 7075216 ( 78.79%) 5096156020 ( 94.21%) 720.28
http(s) 2150356 ( 23.95%) 2881165917 ( 53.26%) 1339.86
http(c) 1231143 ( 13.71%) 111078667 ( 2.05%) 90.22
squid 722651 ( 8.05%) 610933011 ( 11.29%) 845.41
smtp 654103 ( 7.28%) 99856751 ( 1.85%) 152.66
ftp 54873 ( 0.61%) 4320252 ( 0.08%) 78.73
pop3 5974 ( 0.07%) 3457660 ( 0.06%) 578.78
imap 48493 ( 0.54%) 4091131 ( 0.08%) 84.37
telnet 947 ( 0.01%) 61764 ( 0.00%) 65.22
ssh 462830 ( 5.15%) 392415059 ( 7.25%) 847.86
dns 1797 ( 0.02%) 130476 ( 0.00%) 72.61
bgp 196 ( 0.00%) 61923 ( 0.00%) 315.93
napster 23 ( 0.00%) 2987 ( 0.00%) 129.87
realaud 10 ( 0.00%) 1169 ( 0.00%) 116.90
rtsp 107 ( 0.00%) 22722 ( 0.00%) 212.36
icecast 157 ( 0.00%) 10744 ( 0.00%) 68.43
hotline 11 ( 0.00%) 688 ( 0.00%) 62.55
other 1741542 ( 19.39%) 988544919 ( 18.28%) 567.63
udp 1528052 ( 17.02%) 269617140 ( 4.98%) 176.45
dns 951688 ( 10.60%) 139235838 ( 2.57%) 146.30
realaud 8707 ( 0.10%) 5456376 ( 0.10%) 626.67
halflif 21 ( 0.00%) 2400 ( 0.00%) 114.29
starcra 51 ( 0.00%) 10439 ( 0.00%) 204.69
everque 24 ( 0.00%) 6290 ( 0.00%) 262.08
unreal 13 ( 0.00%) 1783 ( 0.00%) 137.15
quake 6 ( 0.00%) 477 ( 0.00%) 79.50
cuseeme 6 ( 0.00%) 918 ( 0.00%) 153.00
other 567500 ( 6.32%) 124882460 ( 2.31%) 220.06
icmp 328871 ( 3.66%) 31352954 ( 0.58%) 95.34
ipip 323 ( 0.00%) 39126 ( 0.00%) 121.13
ip6 999 ( 0.01%) 134337 ( 0.00%) 134.47
other 11114 ( 0.12%) 1631922 ( 0.03%) 146.83
frag 1255 ( 0.01%) 1080797 ( 0.02%) 861.19
ip6 35433 ( 0.39%) 10256704 ( 0.19%) 289.47
tcp6 4833 ( 0.05%) 843560 ( 0.02%) 174.54
http(c) 1565 ( 0.02%) 154672 ( 0.00%) 98.83
smtp 973 ( 0.01%) 426094 ( 0.01%) 437.92
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
bgp 68 ( 0.00%) 7319 ( 0.00%) 107.63
other 2193 ( 0.02%) 252347 ( 0.00%) 115.07
udp6 21855 ( 0.24%) 4115150 ( 0.08%) 188.29
dns 19537 ( 0.22%) 3527579 ( 0.07%) 180.56
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2317 ( 0.03%) 587434 ( 0.01%) 253.53
icmp6 5192 ( 0.06%) 696968 ( 0.01%) 134.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3522 ( 0.04%) 4596810 ( 0.08%) 1305.17
tcpdump file: 200803190715.dump.gz (229.05 MB)