Traffic Trace Info
DumpFile: -
Id: 200803190900
StartTime: Wed Mar 19 09:00:01 2008
EndTime: Wed Mar 19 09:15:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 617.73MB CapLen: 96 bytes
# of packets: 11098859 (6907.14MB)
AvgRate: 64.38Mbps stddev:10.67M
IP flow (unique src/dst pair) Information
# of flows: 620693 (avg. 17.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.0% 13.8% 5.5% 1.4% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 329587
Top 10 bandwidth usage (bytes/total in %):
21.8% 18.4% 18.4% 14.1% 5.7% 5.3% 3.9% 2.8% 2.6% 2.2%
# of IPv6 addresses: 1664
Top 10 bandwidth usage (bytes/total in %):
52.2% 47.2% 8.3% 6.9% 5.1% 3.0% 3.0% 2.8% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190900.pktlen.png)
detailed numbers
[ 32- 63]: 2312568
[ 64- 127]: 2979059
[ 128- 255]: 857526
[ 256- 511]: 445703
[ 512- 1023]: 175644
[ 1024- 2047]: 4328359
Protocol Breakdown
![[protocol breakdown chart]](200803190900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11098859 (100.00%) 7242665445 (100.00%) 652.56
ip 11068764 ( 99.73%) 7234322027 ( 99.88%) 653.58
tcp 9005517 ( 81.14%) 6877909104 ( 94.96%) 763.74
http(s) 3481997 ( 31.37%) 4810515663 ( 66.42%) 1381.54
http(c) 2064620 ( 18.60%) 179886161 ( 2.48%) 87.13
squid 630659 ( 5.68%) 498129549 ( 6.88%) 789.86
smtp 577386 ( 5.20%) 93982919 ( 1.30%) 162.77
ftp 63082 ( 0.57%) 5218359 ( 0.07%) 82.72
pop3 6645 ( 0.06%) 3339763 ( 0.05%) 502.60
imap 17139 ( 0.15%) 6164181 ( 0.09%) 359.66
telnet 471 ( 0.00%) 44549 ( 0.00%) 94.58
ssh 507566 ( 4.57%) 422970151 ( 5.84%) 833.33
dns 2399 ( 0.02%) 180591 ( 0.00%) 75.28
bgp 369 ( 0.00%) 188379 ( 0.00%) 510.51
napster 21 ( 0.00%) 6371 ( 0.00%) 303.38
realaud 4 ( 0.00%) 633 ( 0.00%) 158.25
rtsp 333 ( 0.00%) 75739 ( 0.00%) 227.44
icecast 80 ( 0.00%) 5324 ( 0.00%) 66.55
other 1652744 ( 14.89%) 857200652 ( 11.84%) 518.65
udp 1702818 ( 15.34%) 321781583 ( 4.44%) 188.97
dns 946878 ( 8.53%) 157760831 ( 2.18%) 166.61
realaud 12480 ( 0.11%) 7327500 ( 0.10%) 587.14
halflif 9 ( 0.00%) 1786 ( 0.00%) 198.44
starcra 17 ( 0.00%) 3630 ( 0.00%) 213.53
everque 21 ( 0.00%) 2268 ( 0.00%) 108.00
unreal 22 ( 0.00%) 5838 ( 0.00%) 265.36
quake 11 ( 0.00%) 1204 ( 0.00%) 109.45
cuseeme 33 ( 0.00%) 2805 ( 0.00%) 85.00
other 743276 ( 6.70%) 156653855 ( 2.16%) 210.76
icmp 347104 ( 3.13%) 32636493 ( 0.45%) 94.03
ipip 355 ( 0.00%) 42635 ( 0.00%) 120.10
ip6 1045 ( 0.01%) 144648 ( 0.00%) 138.42
other 11925 ( 0.11%) 1807564 ( 0.02%) 151.58
frag 1781 ( 0.02%) 1506382 ( 0.02%) 845.81
ip6 30095 ( 0.27%) 8343418 ( 0.12%) 277.24
tcp6 4678 ( 0.04%) 734198 ( 0.01%) 156.95
http(s) 47 ( 0.00%) 55960 ( 0.00%) 1190.64
http(c) 1571 ( 0.01%) 150884 ( 0.00%) 96.04
smtp 647 ( 0.01%) 258001 ( 0.00%) 398.77
pop3 61 ( 0.00%) 5584 ( 0.00%) 91.54
bgp 85 ( 0.00%) 10401 ( 0.00%) 122.36
other 2267 ( 0.02%) 253368 ( 0.00%) 111.76
udp6 17153 ( 0.15%) 2954088 ( 0.04%) 172.22
dns 15839 ( 0.14%) 2693153 ( 0.04%) 170.03
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1313 ( 0.01%) 260796 ( 0.00%) 198.63
icmp6 5357 ( 0.05%) 794311 ( 0.01%) 148.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2877 ( 0.03%) 3856741 ( 0.05%) 1340.54
tcpdump file: 200803190900.dump.gz (272.45 MB)