Traffic Trace Info
DumpFile: -
Id: 200803190800
StartTime: Wed Mar 19 08:00:01 2008
EndTime: Wed Mar 19 08:15:00 2008
TotalTime: 899.84 seconds
TotalCapSize: 562.75MB CapLen: 96 bytes
# of packets: 9885640 (5709.27MB)
AvgRate: 53.22Mbps stddev:13.71M
IP flow (unique src/dst pair) Information
# of flows: 622898 (avg. 15.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 6.7% 3.0% 1.7% 1.6% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 349071
Top 10 bandwidth usage (bytes/total in %):
22.9% 12.0% 8.1% 7.7% 6.9% 3.1% 3.0% 3.0% 3.0% 2.5%
# of IPv6 addresses: 1664
Top 10 bandwidth usage (bytes/total in %):
51.3% 46.8% 9.5% 7.8% 6.6% 3.5% 3.2% 3.1% 2.7% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190800.pktlen.png)
detailed numbers
[ 32- 63]: 1720911
[ 64- 127]: 3272259
[ 128- 255]: 693456
[ 256- 511]: 505539
[ 512- 1023]: 197658
[ 1024- 2047]: 3495817
Protocol Breakdown
![[protocol breakdown chart]](200803190800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9885640 (100.00%) 5986601753 (100.00%) 605.59
ip 9851290 ( 99.65%) 5977100358 ( 99.84%) 606.73
tcp 7921602 ( 80.13%) 5626976439 ( 93.99%) 710.33
http(s) 2752845 ( 27.85%) 3716710471 ( 62.08%) 1350.13
http(c) 1591787 ( 16.10%) 151051698 ( 2.52%) 94.89
squid 632035 ( 6.39%) 412820185 ( 6.90%) 653.16
smtp 629330 ( 6.37%) 99516562 ( 1.66%) 158.13
ftp 57032 ( 0.58%) 4449080 ( 0.07%) 78.01
pop3 5593 ( 0.06%) 2743753 ( 0.05%) 490.57
imap 41261 ( 0.42%) 3433443 ( 0.06%) 83.21
telnet 27 ( 0.00%) 2004 ( 0.00%) 74.22
ssh 772914 ( 7.82%) 474568075 ( 7.93%) 614.00
dns 2302 ( 0.02%) 190537 ( 0.00%) 82.77
bgp 233 ( 0.00%) 87131 ( 0.00%) 373.95
realaud 17 ( 0.00%) 2730 ( 0.00%) 160.59
rtsp 1081 ( 0.01%) 755535 ( 0.01%) 698.92
icecast 147 ( 0.00%) 12617 ( 0.00%) 85.83
other 1434996 ( 14.52%) 760632498 ( 12.71%) 530.06
udp 1581409 ( 16.00%) 316339956 ( 5.28%) 200.04
dns 937613 ( 9.48%) 139173092 ( 2.32%) 148.43
realaud 8697 ( 0.09%) 5454829 ( 0.09%) 627.21
halflif 10 ( 0.00%) 1419 ( 0.00%) 141.90
starcra 15 ( 0.00%) 3260 ( 0.00%) 217.33
everque 19 ( 0.00%) 2796 ( 0.00%) 147.16
unreal 14 ( 0.00%) 2088 ( 0.00%) 149.14
quake 10 ( 0.00%) 2417 ( 0.00%) 241.70
cuseeme 3 ( 0.00%) 220 ( 0.00%) 73.33
other 635016 ( 6.42%) 171694228 ( 2.87%) 270.38
icmp 335608 ( 3.39%) 31986842 ( 0.53%) 95.31
ipip 346 ( 0.00%) 40873 ( 0.00%) 118.13
ip6 1108 ( 0.01%) 156939 ( 0.00%) 141.64
other 11217 ( 0.11%) 1599309 ( 0.03%) 142.58
frag 1330 ( 0.01%) 1116565 ( 0.02%) 839.52
ip6 34350 ( 0.35%) 9501395 ( 0.16%) 276.61
tcp6 4653 ( 0.05%) 679787 ( 0.01%) 146.10
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1676 ( 0.02%) 162264 ( 0.00%) 96.82
smtp 680 ( 0.01%) 259539 ( 0.00%) 381.68
pop3 46 ( 0.00%) 4188 ( 0.00%) 91.04
bgp 66 ( 0.00%) 7045 ( 0.00%) 106.74
other 2180 ( 0.02%) 246139 ( 0.00%) 112.91
udp6 20936 ( 0.21%) 3650647 ( 0.06%) 174.37
dns 19512 ( 0.20%) 3335604 ( 0.06%) 170.95
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1423 ( 0.01%) 314906 ( 0.01%) 221.30
icmp6 5316 ( 0.05%) 722678 ( 0.01%) 135.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3415 ( 0.03%) 4444203 ( 0.07%) 1301.38
tcpdump file: 200803190800.dump.gz (252.38 MB)