Traffic Trace Info
DumpFile: -
Id: 200803190845
StartTime: Wed Mar 19 08:45:01 2008
EndTime: Wed Mar 19 09:00:01 2008
TotalTime: 900.10 seconds
TotalCapSize: 567.66MB CapLen: 96 bytes
# of packets: 10099600 (5971.20MB)
AvgRate: 55.65Mbps stddev:11.32M
IP flow (unique src/dst pair) Information
# of flows: 558559 (avg. 18.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.6% 6.2% 3.8% 3.1% 1.6% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 302481
Top 10 bandwidth usage (bytes/total in %):
24.8% 17.0% 6.8% 6.7% 6.4% 3.9% 3.9% 3.2% 3.1% 3.0%
# of IPv6 addresses: 1576
Top 10 bandwidth usage (bytes/total in %):
59.0% 54.3% 4.9% 4.4% 3.8% 3.1% 3.1% 2.9% 2.7% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190845.pktlen.png)
detailed numbers
[ 32- 63]: 1958036
[ 64- 127]: 3014900
[ 128- 255]: 785484
[ 256- 511]: 453342
[ 512- 1023]: 184828
[ 1024- 2047]: 3703010
Protocol Breakdown
![[protocol breakdown chart]](200803190845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10099600 (100.00%) 6261256905 (100.00%) 619.95
ip 10072945 ( 99.74%) 6252900308 ( 99.87%) 620.76
tcp 8071700 ( 79.92%) 5893940802 ( 94.13%) 730.20
http(s) 3050118 ( 30.20%) 4134910486 ( 66.04%) 1355.66
http(c) 1801521 ( 17.84%) 161890137 ( 2.59%) 89.86
squid 604117 ( 5.98%) 398551273 ( 6.37%) 659.73
smtp 629938 ( 6.24%) 101424275 ( 1.62%) 161.01
ftp 73084 ( 0.72%) 5859976 ( 0.09%) 80.18
pop3 4684 ( 0.05%) 2087637 ( 0.03%) 445.70
imap 17009 ( 0.17%) 2172763 ( 0.03%) 127.74
telnet 366 ( 0.00%) 37075 ( 0.00%) 101.30
ssh 453299 ( 4.49%) 409171069 ( 6.53%) 902.65
dns 1863 ( 0.02%) 135811 ( 0.00%) 72.90
bgp 208 ( 0.00%) 60417 ( 0.00%) 290.47
napster 49 ( 0.00%) 8667 ( 0.00%) 176.88
realaud 16 ( 0.00%) 2216 ( 0.00%) 138.50
rtsp 2844 ( 0.03%) 1888693 ( 0.03%) 664.10
icecast 81 ( 0.00%) 6576 ( 0.00%) 81.19
other 1432502 ( 14.18%) 675733671 ( 10.79%) 471.72
udp 1654026 ( 16.38%) 325385283 ( 5.20%) 196.72
dns 936058 ( 9.27%) 154311502 ( 2.46%) 164.85
realaud 10532 ( 0.10%) 5561012 ( 0.09%) 528.01
halflif 17 ( 0.00%) 2816 ( 0.00%) 165.65
starcra 36 ( 0.00%) 7098 ( 0.00%) 197.17
everque 50 ( 0.00%) 7967 ( 0.00%) 159.34
unreal 13 ( 0.00%) 2699 ( 0.00%) 207.62
quake 10 ( 0.00%) 2230 ( 0.00%) 223.00
cuseeme 4 ( 0.00%) 772 ( 0.00%) 193.00
other 707279 ( 7.00%) 165476060 ( 2.64%) 233.96
icmp 333738 ( 3.30%) 31536101 ( 0.50%) 94.49
ipip 307 ( 0.00%) 37530 ( 0.00%) 122.25
ip6 1090 ( 0.01%) 149324 ( 0.00%) 136.99
other 12084 ( 0.12%) 1851268 ( 0.03%) 153.20
frag 1110 ( 0.01%) 942553 ( 0.02%) 849.15
ip6 26655 ( 0.26%) 8356597 ( 0.13%) 313.51
tcp6 3965 ( 0.04%) 483351 ( 0.01%) 121.90
http(s) 16 ( 0.00%) 7438 ( 0.00%) 464.88
http(c) 1409 ( 0.01%) 135546 ( 0.00%) 96.20
smtp 268 ( 0.00%) 85661 ( 0.00%) 319.63
pop3 36 ( 0.00%) 3288 ( 0.00%) 91.33
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2173 ( 0.02%) 244908 ( 0.00%) 112.71
udp6 14447 ( 0.14%) 2704701 ( 0.04%) 187.22
dns 13141 ( 0.13%) 2447385 ( 0.04%) 186.24
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1305 ( 0.01%) 257174 ( 0.00%) 197.07
icmp6 4753 ( 0.05%) 649713 ( 0.01%) 136.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3460 ( 0.03%) 4514752 ( 0.07%) 1304.84
tcpdump file: 200803190845.dump.gz (253.47 MB)