Traffic Trace Info
DumpFile: -
Id: 200803190945
StartTime: Wed Mar 19 09:45:00 2008
EndTime: Wed Mar 19 10:00:00 2008
TotalTime: 900.53 seconds
TotalCapSize: 625.51MB CapLen: 96 bytes
# of packets: 11210333 (7036.97MB)
AvgRate: 65.63Mbps stddev:14.65M
IP flow (unique src/dst pair) Information
# of flows: 721940 (avg. 15.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.5% 12.5% 5.6% 1.7% 1.6% 1.6% 1.5% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 389195
Top 10 bandwidth usage (bytes/total in %):
19.8% 12.8% 12.8% 12.8% 5.7% 5.7% 4.9% 4.6% 3.4% 3.2%
# of IPv6 addresses: 1886
Top 10 bandwidth usage (bytes/total in %):
50.3% 46.0% 6.3% 6.0% 5.4% 4.8% 4.1% 3.6% 3.0% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190945.pktlen.png)
detailed numbers
[ 32- 63]: 2315390
[ 64- 127]: 3244155
[ 128- 255]: 608433
[ 256- 511]: 429660
[ 512- 1023]: 198146
[ 1024- 2047]: 4414549
Protocol Breakdown
![[protocol breakdown chart]](200803190945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11210333 (100.00%) 7378802834 (100.00%) 658.21
ip 11175661 ( 99.69%) 7369187969 ( 99.87%) 659.40
tcp 9346784 ( 83.38%) 7053056706 ( 95.59%) 754.60
http(s) 3797131 ( 33.87%) 5217884777 ( 70.71%) 1374.17
http(c) 2415128 ( 21.54%) 221632330 ( 3.00%) 91.77
squid 418232 ( 3.73%) 277696899 ( 3.76%) 663.98
smtp 589750 ( 5.26%) 104118857 ( 1.41%) 176.55
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 68318 ( 0.61%) 5539134 ( 0.08%) 81.08
pop3 6464 ( 0.06%) 2909690 ( 0.04%) 450.14
imap 4230 ( 0.04%) 2216575 ( 0.03%) 524.01
telnet 978 ( 0.01%) 76382 ( 0.00%) 78.10
ssh 565346 ( 5.04%) 442667202 ( 6.00%) 783.00
dns 1703 ( 0.02%) 131749 ( 0.00%) 77.36
bgp 194 ( 0.00%) 57847 ( 0.00%) 298.18
napster 33 ( 0.00%) 5887 ( 0.00%) 178.39
realaud 23 ( 0.00%) 3022 ( 0.00%) 131.39
rtsp 7768 ( 0.07%) 6210683 ( 0.08%) 799.52
icecast 61 ( 0.00%) 4461 ( 0.00%) 73.13
other 1471420 ( 13.13%) 771900911 ( 10.46%) 524.60
udp 1421778 ( 12.68%) 277578300 ( 3.76%) 195.23
dns 844330 ( 7.53%) 127155288 ( 1.72%) 150.60
realaud 16823 ( 0.15%) 10651346 ( 0.14%) 633.14
halflif 18 ( 0.00%) 2885 ( 0.00%) 160.28
starcra 56 ( 0.00%) 9490 ( 0.00%) 169.46
everque 34 ( 0.00%) 5236 ( 0.00%) 154.00
unreal 15 ( 0.00%) 2638 ( 0.00%) 175.87
quake 6 ( 0.00%) 901 ( 0.00%) 150.17
cuseeme 41 ( 0.00%) 2740 ( 0.00%) 66.83
other 560438 ( 5.00%) 139736923 ( 1.89%) 249.34
icmp 387738 ( 3.46%) 35673771 ( 0.48%) 92.00
ipip 297 ( 0.00%) 35906 ( 0.00%) 120.90
ip6 1042 ( 0.01%) 141734 ( 0.00%) 136.02
other 18022 ( 0.16%) 2701552 ( 0.04%) 149.90
frag 1038 ( 0.01%) 875182 ( 0.01%) 843.14
ip6 34672 ( 0.31%) 9614865 ( 0.13%) 277.31
tcp6 5295 ( 0.05%) 748381 ( 0.01%) 141.34
http(c) 1670 ( 0.01%) 170399 ( 0.00%) 102.04
smtp 636 ( 0.01%) 257530 ( 0.00%) 404.92
pop3 537 ( 0.00%) 47894 ( 0.00%) 89.19
bgp 74 ( 0.00%) 8122 ( 0.00%) 109.76
other 2378 ( 0.02%) 264436 ( 0.00%) 111.20
udp6 20746 ( 0.19%) 3724622 ( 0.05%) 179.53
dns 18830 ( 0.17%) 3154271 ( 0.04%) 167.51
other 1916 ( 0.02%) 570351 ( 0.01%) 297.68
icmp6 5198 ( 0.05%) 710936 ( 0.01%) 136.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3403 ( 0.03%) 4426846 ( 0.06%) 1300.87
tcpdump file: 200803190945.dump.gz (274.99 MB)