Traffic Trace Info
DumpFile: -
Id: 200803190915
StartTime: Wed Mar 19 09:15:01 2008
EndTime: Wed Mar 19 09:30:00 2008
TotalTime: 899.30 seconds
TotalCapSize: 616.42MB CapLen: 96 bytes
# of packets: 11076405 (7242.10MB)
AvgRate: 67.57Mbps stddev:17.22M
IP flow (unique src/dst pair) Information
# of flows: 524496 (avg. 21.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.2% 13.9% 5.1% 1.9% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 279910
Top 10 bandwidth usage (bytes/total in %):
21.4% 16.6% 16.6% 14.3% 5.2% 4.2% 4.2% 3.9% 3.8% 2.6%
# of IPv6 addresses: 1604
Top 10 bandwidth usage (bytes/total in %):
56.6% 52.1% 6.1% 5.6% 4.1% 2.8% 2.8% 2.3% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190915.pktlen.png)
detailed numbers
[ 32- 63]: 2227966
[ 64- 127]: 2901737
[ 128- 255]: 773836
[ 256- 511]: 420765
[ 512- 1023]: 173228
[ 1024- 2047]: 4578873
Protocol Breakdown
![[protocol breakdown chart]](200803190915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11076405 (100.00%) 7593889526 (100.00%) 685.59
ip 11047588 ( 99.74%) 7585005311 ( 99.88%) 686.58
tcp 9128187 ( 82.41%) 7265400551 ( 95.67%) 795.93
http(s) 3774569 ( 34.08%) 5231873590 ( 68.90%) 1386.09
http(c) 2248182 ( 20.30%) 222811423 ( 2.93%) 99.11
squid 501972 ( 4.53%) 373452428 ( 4.92%) 743.97
smtp 571258 ( 5.16%) 102430366 ( 1.35%) 179.31
nntp 31 ( 0.00%) 6243 ( 0.00%) 201.39
ftp 57101 ( 0.52%) 4655910 ( 0.06%) 81.54
pop3 6887 ( 0.06%) 3736510 ( 0.05%) 542.55
imap 4066 ( 0.04%) 1954563 ( 0.03%) 480.71
telnet 584 ( 0.01%) 50338 ( 0.00%) 86.20
ssh 485764 ( 4.39%) 408530844 ( 5.38%) 841.01
dns 1880 ( 0.02%) 146212 ( 0.00%) 77.77
bgp 209 ( 0.00%) 63154 ( 0.00%) 302.17
rtsp 140 ( 0.00%) 37629 ( 0.00%) 268.78
icecast 76 ( 0.00%) 5331 ( 0.00%) 70.14
other 1475466 ( 13.32%) 915645890 ( 12.06%) 620.58
udp 1582412 ( 14.29%) 286579138 ( 3.77%) 181.10
dns 955646 ( 8.63%) 155675954 ( 2.05%) 162.90
realaud 15808 ( 0.14%) 10935402 ( 0.14%) 691.76
halflif 83 ( 0.00%) 8988 ( 0.00%) 108.29
starcra 45 ( 0.00%) 8451 ( 0.00%) 187.80
everque 21 ( 0.00%) 3202 ( 0.00%) 152.48
unreal 14 ( 0.00%) 2169 ( 0.00%) 154.93
quake 12 ( 0.00%) 2818 ( 0.00%) 234.83
cuseeme 49 ( 0.00%) 3365 ( 0.00%) 68.67
other 610718 ( 5.51%) 119922076 ( 1.58%) 196.36
icmp 323941 ( 2.92%) 31059982 ( 0.41%) 95.88
ipip 296 ( 0.00%) 35676 ( 0.00%) 120.53
ip6 1069 ( 0.01%) 147928 ( 0.00%) 138.38
other 11683 ( 0.11%) 1782036 ( 0.02%) 152.53
frag 1133 ( 0.01%) 954369 ( 0.01%) 842.34
ip6 28817 ( 0.26%) 8884215 ( 0.12%) 308.30
tcp6 4402 ( 0.04%) 714190 ( 0.01%) 162.24
http(s) 39 ( 0.00%) 41637 ( 0.00%) 1067.62
http(c) 1460 ( 0.01%) 139884 ( 0.00%) 95.81
smtp 667 ( 0.01%) 279958 ( 0.00%) 419.73
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 69 ( 0.00%) 7432 ( 0.00%) 107.71
other 2127 ( 0.02%) 241602 ( 0.00%) 113.59
udp6 15829 ( 0.14%) 2810766 ( 0.04%) 177.57
dns 14520 ( 0.13%) 2551650 ( 0.03%) 175.73
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1308 ( 0.01%) 258979 ( 0.00%) 198.00
icmp6 5198 ( 0.05%) 972709 ( 0.01%) 187.13
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3357 ( 0.03%) 4382334 ( 0.06%) 1305.43
tcpdump file: 200803190915.dump.gz (268.76 MB)