Traffic Trace Info
DumpFile: -
Id: 200803190830
StartTime: Wed Mar 19 08:30:01 2008
EndTime: Wed Mar 19 08:45:01 2008
TotalTime: 899.99 seconds
TotalCapSize: 561.18MB CapLen: 96 bytes
# of packets: 9904388 (5698.17MB)
AvgRate: 53.11Mbps stddev:9.91M
IP flow (unique src/dst pair) Information
# of flows: 631279 (avg. 15.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.4% 6.7% 1.8% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 356781
Top 10 bandwidth usage (bytes/total in %):
24.9% 16.8% 7.9% 7.6% 6.9% 3.1% 3.0% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1706
Top 10 bandwidth usage (bytes/total in %):
54.6% 50.4% 7.6% 6.3% 3.8% 3.5% 2.6% 2.4% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190830.pktlen.png)
detailed numbers
[ 32- 63]: 1763851
[ 64- 127]: 3228021
[ 128- 255]: 723258
[ 256- 511]: 451130
[ 512- 1023]: 242283
[ 1024- 2047]: 3495845
Protocol Breakdown
![[protocol breakdown chart]](200803190830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9904388 (100.00%) 5974967638 (100.00%) 603.26
ip 9877555 ( 99.73%) 5965726126 ( 99.85%) 603.97
tcp 7798434 ( 78.74%) 5521176218 ( 92.41%) 707.99
http(s) 2739214 ( 27.66%) 3676015046 ( 61.52%) 1342.00
http(c) 1718860 ( 17.35%) 171571902 ( 2.87%) 99.82
squid 608923 ( 6.15%) 395933376 ( 6.63%) 650.22
smtp 622979 ( 6.29%) 94474189 ( 1.58%) 151.65
ftp 69026 ( 0.70%) 5515577 ( 0.09%) 79.91
pop3 9196 ( 0.09%) 6509969 ( 0.11%) 707.91
imap 21597 ( 0.22%) 3116781 ( 0.05%) 144.32
telnet 2816 ( 0.03%) 339657 ( 0.01%) 120.62
ssh 583705 ( 5.89%) 426311341 ( 7.13%) 730.35
dns 4310 ( 0.04%) 1917702 ( 0.03%) 444.94
bgp 378 ( 0.00%) 195734 ( 0.00%) 517.81
napster 6 ( 0.00%) 502 ( 0.00%) 83.67
realaud 11 ( 0.00%) 1125 ( 0.00%) 102.27
rtsp 16597 ( 0.17%) 18096825 ( 0.30%) 1090.37
icecast 94 ( 0.00%) 33517 ( 0.00%) 356.56
hotline 10 ( 0.00%) 1061 ( 0.00%) 106.10
other 1400711 ( 14.14%) 721141854 ( 12.07%) 514.84
udp 1736353 ( 17.53%) 411563862 ( 6.89%) 237.03
dns 989749 ( 9.99%) 159096676 ( 2.66%) 160.74
realaud 10539 ( 0.11%) 5562963 ( 0.09%) 527.85
halflif 17 ( 0.00%) 2658 ( 0.00%) 156.35
starcra 26 ( 0.00%) 5765 ( 0.00%) 221.73
everque 33 ( 0.00%) 5341 ( 0.00%) 161.85
unreal 10 ( 0.00%) 875 ( 0.00%) 87.50
quake 6 ( 0.00%) 470 ( 0.00%) 78.33
other 735949 ( 7.43%) 246876569 ( 4.13%) 335.45
icmp 330084 ( 3.33%) 31183961 ( 0.52%) 94.47
ipip 350 ( 0.00%) 42096 ( 0.00%) 120.27
ip6 1092 ( 0.01%) 152449 ( 0.00%) 139.61
other 11242 ( 0.11%) 1607540 ( 0.03%) 142.99
frag 1029 ( 0.01%) 888859 ( 0.01%) 863.81
ip6 26833 ( 0.27%) 9241512 ( 0.15%) 344.41
tcp6 4701 ( 0.05%) 1350483 ( 0.02%) 287.28
http(s) 164 ( 0.00%) 204231 ( 0.00%) 1245.31
http(c) 1455 ( 0.01%) 139537 ( 0.00%) 95.90
smtp 432 ( 0.00%) 173588 ( 0.00%) 401.82
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 79 ( 0.00%) 9289 ( 0.00%) 117.58
other 2531 ( 0.03%) 820161 ( 0.01%) 324.05
udp6 13514 ( 0.14%) 2558495 ( 0.04%) 189.32
dns 12039 ( 0.12%) 2203318 ( 0.04%) 183.02
other 1475 ( 0.01%) 355177 ( 0.01%) 240.80
icmp6 5179 ( 0.05%) 874808 ( 0.01%) 168.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3409 ( 0.03%) 4453646 ( 0.07%) 1306.44
tcpdump file: 200803190830.dump.gz (249.87 MB)