Traffic Trace Info
DumpFile: -
Id: 200803190930
StartTime: Wed Mar 19 09:30:00 2008
EndTime: Wed Mar 19 09:45:00 2008
TotalTime: 899.91 seconds
TotalCapSize: 576.83MB CapLen: 96 bytes
# of packets: 10358808 (6379.16MB)
AvgRate: 59.46Mbps stddev:10.30M
IP flow (unique src/dst pair) Information
# of flows: 776678 (avg. 13.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.5% 9.9% 6.0% 2.4% 1.8% 1.4% 1.4% 1.3% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 502638
Top 10 bandwidth usage (bytes/total in %):
24.3% 15.8% 10.1% 10.1% 6.8% 6.2% 5.8% 5.4% 3.0% 2.7%
# of IPv6 addresses: 1853
Top 10 bandwidth usage (bytes/total in %):
45.3% 40.8% 10.1% 8.2% 4.6% 4.4% 3.5% 2.9% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190930.pktlen.png)
detailed numbers
[ 32- 63]: 2217441
[ 64- 127]: 2916379
[ 128- 255]: 704988
[ 256- 511]: 348142
[ 512- 1023]: 176065
[ 1024- 2047]: 3995793
Protocol Breakdown
![[protocol breakdown chart]](200803190930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10358808 (100.00%) 6689036934 (100.00%) 645.73
ip 10326854 ( 99.69%) 6679984070 ( 99.86%) 646.86
tcp 8558081 ( 82.62%) 6394708088 ( 95.60%) 747.21
http(s) 3354992 ( 32.39%) 4607054602 ( 68.87%) 1373.19
http(c) 2031071 ( 19.61%) 194619761 ( 2.91%) 95.82
squid 468341 ( 4.52%) 322128385 ( 4.82%) 687.81
smtp 551772 ( 5.33%) 102099478 ( 1.53%) 185.04
ftp 59853 ( 0.58%) 4885930 ( 0.07%) 81.63
pop3 6157 ( 0.06%) 2741856 ( 0.04%) 445.32
imap 3792 ( 0.04%) 1626524 ( 0.02%) 428.94
telnet 607 ( 0.01%) 53695 ( 0.00%) 88.46
ssh 490545 ( 4.74%) 424798436 ( 6.35%) 865.97
dns 3549 ( 0.03%) 1965324 ( 0.03%) 553.77
bgp 183 ( 0.00%) 52563 ( 0.00%) 287.23
napster 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 5 ( 0.00%) 693 ( 0.00%) 138.60
rtsp 1616 ( 0.02%) 1213256 ( 0.02%) 750.78
icecast 114 ( 0.00%) 14207 ( 0.00%) 124.62
other 1585480 ( 15.31%) 731453136 ( 10.94%) 461.34
udp 1442625 ( 13.93%) 253146687 ( 3.78%) 175.48
dns 853739 ( 8.24%) 132849802 ( 1.99%) 155.61
realaud 17377 ( 0.17%) 11026286 ( 0.16%) 634.53
halflif 11 ( 0.00%) 858 ( 0.00%) 78.00
starcra 13 ( 0.00%) 3039 ( 0.00%) 233.77
everque 31 ( 0.00%) 6457 ( 0.00%) 208.29
unreal 17 ( 0.00%) 3336 ( 0.00%) 196.24
quake 10 ( 0.00%) 2361 ( 0.00%) 236.10
cuseeme 45 ( 0.00%) 2800 ( 0.00%) 62.22
other 571350 ( 5.52%) 109234689 ( 1.63%) 191.19
icmp 311317 ( 3.01%) 29891094 ( 0.45%) 96.01
ipip 372 ( 0.00%) 45108 ( 0.00%) 121.26
ip6 1137 ( 0.01%) 158141 ( 0.00%) 139.09
other 13322 ( 0.13%) 2034952 ( 0.03%) 152.75
frag 1084 ( 0.01%) 926102 ( 0.01%) 854.34
ip6 31954 ( 0.31%) 9052864 ( 0.14%) 283.31
tcp6 5125 ( 0.05%) 1124407 ( 0.02%) 219.40
http(s) 389 ( 0.00%) 446388 ( 0.01%) 1147.53
http(c) 1549 ( 0.01%) 150541 ( 0.00%) 97.19
smtp 666 ( 0.01%) 246391 ( 0.00%) 369.96
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
bgp 69 ( 0.00%) 7446 ( 0.00%) 107.91
other 2418 ( 0.02%) 270513 ( 0.00%) 111.87
udp6 18725 ( 0.18%) 3499278 ( 0.05%) 186.88
dns 17157 ( 0.17%) 3097677 ( 0.05%) 180.55
other 1568 ( 0.02%) 401601 ( 0.01%) 256.12
icmp6 5335 ( 0.05%) 769206 ( 0.01%) 144.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2739 ( 0.03%) 3655893 ( 0.05%) 1334.75
tcpdump file: 200803190930.dump.gz (253.96 MB)