Traffic Trace Info
DumpFile: -
Id: 200803190730
StartTime: Wed Mar 19 07:30:01 2008
EndTime: Wed Mar 19 07:45:01 2008
TotalTime: 899.93 seconds
TotalCapSize: 489.03MB CapLen: 96 bytes
# of packets: 8783030 (4776.04MB)
AvgRate: 44.51Mbps stddev:10.34M
IP flow (unique src/dst pair) Information
# of flows: 576884 (avg. 15.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 2.5% 2.4% 1.9% 1.7% 1.5% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 327091
Top 10 bandwidth usage (bytes/total in %):
13.5% 10.7% 9.3% 8.1% 7.5% 2.8% 2.6% 2.6% 2.5% 2.4%
# of IPv6 addresses: 1773
Top 10 bandwidth usage (bytes/total in %):
51.8% 47.2% 8.2% 6.6% 4.6% 3.9% 3.8% 2.7% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190730.pktlen.png)
detailed numbers
[ 32- 63]: 1791297
[ 64- 127]: 2769379
[ 128- 255]: 743070
[ 256- 511]: 406858
[ 512- 1023]: 167739
[ 1024- 2047]: 2904687
Protocol Breakdown
![[protocol breakdown chart]](200803190730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8783030 (100.00%) 5008043648 (100.00%) 570.20
ip 8751040 ( 99.64%) 4998702584 ( 99.81%) 571.21
tcp 6851925 ( 78.01%) 4681302432 ( 93.48%) 683.21
http(s) 2064949 ( 23.51%) 2691838188 ( 53.75%) 1303.59
http(c) 1276433 ( 14.53%) 115643502 ( 2.31%) 90.60
squid 588000 ( 6.69%) 433285341 ( 8.65%) 736.88
smtp 598252 ( 6.81%) 90912089 ( 1.82%) 151.96
ftp 54031 ( 0.62%) 4206847 ( 0.08%) 77.86
pop3 4569 ( 0.05%) 2078903 ( 0.04%) 455.00
imap 41257 ( 0.47%) 3401813 ( 0.07%) 82.45
telnet 720 ( 0.01%) 47258 ( 0.00%) 65.64
ssh 675672 ( 7.69%) 448671758 ( 8.96%) 664.04
dns 3597 ( 0.04%) 1868274 ( 0.04%) 519.40
bgp 204 ( 0.00%) 61382 ( 0.00%) 300.89
realaud 4 ( 0.00%) 634 ( 0.00%) 158.50
rtsp 92 ( 0.00%) 27841 ( 0.00%) 302.62
icecast 173 ( 0.00%) 12197 ( 0.00%) 70.50
other 1543970 ( 17.58%) 889246285 ( 17.76%) 575.95
udp 1519595 ( 17.30%) 281418482 ( 5.62%) 185.19
dns 893863 ( 10.18%) 134442212 ( 2.68%) 150.41
realaud 8688 ( 0.10%) 5451576 ( 0.11%) 627.48
halflif 17 ( 0.00%) 2872 ( 0.00%) 168.94
starcra 23 ( 0.00%) 4490 ( 0.00%) 195.22
everque 23 ( 0.00%) 4031 ( 0.00%) 175.26
unreal 14 ( 0.00%) 4108 ( 0.00%) 293.43
quake 12 ( 0.00%) 1644 ( 0.00%) 137.00
cuseeme 6 ( 0.00%) 1148 ( 0.00%) 191.33
other 616916 ( 7.02%) 141492168 ( 2.83%) 229.35
icmp 367208 ( 4.18%) 34142728 ( 0.68%) 92.98
ipip 352 ( 0.00%) 41077 ( 0.00%) 116.70
ip6 1164 ( 0.01%) 165889 ( 0.00%) 142.52
other 10796 ( 0.12%) 1631976 ( 0.03%) 151.16
frag 1315 ( 0.01%) 1145975 ( 0.02%) 871.46
ip6 31990 ( 0.36%) 9341064 ( 0.19%) 292.00
tcp6 4890 ( 0.06%) 925212 ( 0.02%) 189.20
http(s) 186 ( 0.00%) 211321 ( 0.00%) 1136.13
http(c) 1733 ( 0.02%) 168028 ( 0.00%) 96.96
smtp 797 ( 0.01%) 297202 ( 0.01%) 372.90
pop3 35 ( 0.00%) 3214 ( 0.00%) 91.83
dns 23 ( 0.00%) 4205 ( 0.00%) 182.83
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2054 ( 0.02%) 234806 ( 0.00%) 114.32
udp6 18449 ( 0.21%) 3289812 ( 0.07%) 178.32
dns 16775 ( 0.19%) 2919163 ( 0.06%) 174.02
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1673 ( 0.02%) 370510 ( 0.01%) 221.46
icmp6 5250 ( 0.06%) 731873 ( 0.01%) 139.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3371 ( 0.04%) 4390087 ( 0.09%) 1302.31
tcpdump file: 200803190730.dump.gz (227.21 MB)