Traffic Trace Info
DumpFile: -
Id: 200803190745
StartTime: Wed Mar 19 07:45:01 2008
EndTime: Wed Mar 19 08:00:01 2008
TotalTime: 899.96 seconds
TotalCapSize: 519.97MB CapLen: 96 bytes
# of packets: 9219960 (5272.33MB)
AvgRate: 49.15Mbps stddev:12.08M
IP flow (unique src/dst pair) Information
# of flows: 534415 (avg. 17.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 7.2% 2.2% 1.7% 1.7% 1.5% 1.4% 1.4% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 288812
Top 10 bandwidth usage (bytes/total in %):
19.3% 9.7% 8.7% 8.2% 7.4% 3.5% 3.0% 2.5% 2.3% 2.2%
# of IPv6 addresses: 1697
Top 10 bandwidth usage (bytes/total in %):
57.1% 52.4% 6.5% 5.5% 3.6% 3.5% 3.2% 3.0% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190745.pktlen.png)
detailed numbers
[ 32- 63]: 1762087
[ 64- 127]: 2957195
[ 128- 255]: 720932
[ 256- 511]: 344505
[ 512- 1023]: 167864
[ 1024- 2047]: 3267377
Protocol Breakdown
![[protocol breakdown chart]](200803190745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9219960 (100.00%) 5528433759 (100.00%) 599.62
ip 9191487 ( 99.69%) 5519678640 ( 99.84%) 600.52
tcp 7370993 ( 79.95%) 5222657328 ( 94.47%) 708.54
http(s) 2508706 ( 27.21%) 3413419445 ( 61.74%) 1360.63
http(c) 1451880 ( 15.75%) 133045423 ( 2.41%) 91.64
squid 513304 ( 5.57%) 327645034 ( 5.93%) 638.31
smtp 636515 ( 6.90%) 95377714 ( 1.73%) 149.84
ftp 55860 ( 0.61%) 5169804 ( 0.09%) 92.55
pop3 4753 ( 0.05%) 2647832 ( 0.05%) 557.09
imap 32065 ( 0.35%) 3595810 ( 0.07%) 112.14
telnet 184 ( 0.00%) 12177 ( 0.00%) 66.18
ssh 742498 ( 8.05%) 463255797 ( 8.38%) 623.92
dns 1998 ( 0.02%) 157193 ( 0.00%) 78.68
bgp 212 ( 0.00%) 60816 ( 0.00%) 286.87
realaud 7 ( 0.00%) 492 ( 0.00%) 70.29
rtsp 85 ( 0.00%) 20536 ( 0.00%) 241.60
icecast 152 ( 0.00%) 10401 ( 0.00%) 68.43
hotline 5 ( 0.00%) 563 ( 0.00%) 112.60
other 1422769 ( 15.43%) 778238291 ( 14.08%) 546.99
udp 1478867 ( 16.04%) 263770149 ( 4.77%) 178.36
dns 944637 ( 10.25%) 138602489 ( 2.51%) 146.73
realaud 8693 ( 0.09%) 5448981 ( 0.10%) 626.82
halflif 21 ( 0.00%) 2087 ( 0.00%) 99.38
starcra 32 ( 0.00%) 7029 ( 0.00%) 219.66
everque 33 ( 0.00%) 4947 ( 0.00%) 149.91
unreal 13 ( 0.00%) 3877 ( 0.00%) 298.23
quake 6 ( 0.00%) 491 ( 0.00%) 81.83
cuseeme 5 ( 0.00%) 881 ( 0.00%) 176.20
other 525373 ( 5.70%) 119677238 ( 2.16%) 227.79
icmp 329236 ( 3.57%) 31474427 ( 0.57%) 95.60
ipip 326 ( 0.00%) 40378 ( 0.00%) 123.86
ip6 1066 ( 0.01%) 146762 ( 0.00%) 137.68
other 10999 ( 0.12%) 1589596 ( 0.03%) 144.52
frag 1302 ( 0.01%) 1107070 ( 0.02%) 850.28
ip6 28473 ( 0.31%) 8755119 ( 0.16%) 307.49
tcp6 4208 ( 0.05%) 526671 ( 0.01%) 125.16
http(c) 1689 ( 0.02%) 171883 ( 0.00%) 101.77
smtp 396 ( 0.00%) 113703 ( 0.00%) 287.13
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2028 ( 0.02%) 231607 ( 0.00%) 114.20
udp6 15763 ( 0.17%) 2976947 ( 0.05%) 188.86
dns 14304 ( 0.16%) 2679256 ( 0.05%) 187.31
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1458 ( 0.02%) 297554 ( 0.01%) 204.08
icmp6 4960 ( 0.05%) 660618 ( 0.01%) 133.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3512 ( 0.04%) 4586803 ( 0.08%) 1306.04
tcpdump file: 200803190745.dump.gz (237.29 MB)