Traffic Trace Info
DumpFile: -
Id: 200803191000
StartTime: Wed Mar 19 10:00:00 2008
EndTime: Wed Mar 19 10:15:01 2008
TotalTime: 900.09 seconds
TotalCapSize: 679.39MB CapLen: 96 bytes
# of packets: 12788919 (8567.57MB)
AvgRate: 79.85Mbps stddev:23.99M
IP flow (unique src/dst pair) Information
# of flows: 735561 (avg. 17.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 7.6% 5.3% 4.6% 4.3% 1.3% 1.3% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 403506
Top 10 bandwidth usage (bytes/total in %):
14.1% 14.1% 7.7% 7.7% 6.7% 5.6% 5.4% 5.3% 4.7% 4.6%
# of IPv6 addresses: 1640
Top 10 bandwidth usage (bytes/total in %):
52.3% 48.2% 6.9% 5.9% 5.1% 4.7% 3.8% 3.8% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191000.pktlen.png)
detailed numbers
[ 32- 63]: 3035561
[ 64- 127]: 3013718
[ 128- 255]: 678690
[ 256- 511]: 358699
[ 512- 1023]: 198189
[ 1024- 2047]: 5504062
Protocol Breakdown
![[protocol breakdown chart]](200803191000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12788919 (100.00%) 8983748724 (100.00%) 702.46
ip 12753779 ( 99.73%) 8974248866 ( 99.89%) 703.65
tcp 9438917 ( 73.81%) 7386665222 ( 82.22%) 782.58
http(s) 3576589 ( 27.97%) 4840957366 ( 53.89%) 1353.51
http(c) 2005005 ( 15.68%) 203494906 ( 2.27%) 101.49
squid 416060 ( 3.25%) 295769904 ( 3.29%) 710.88
smtp 525603 ( 4.11%) 96466037 ( 1.07%) 183.53
ftp 81939 ( 0.64%) 6592079 ( 0.07%) 80.45
pop3 5281 ( 0.04%) 2217351 ( 0.02%) 419.87
imap 3623 ( 0.03%) 1353063 ( 0.02%) 373.46
telnet 1485 ( 0.01%) 197855 ( 0.00%) 133.24
ssh 529787 ( 4.14%) 445887874 ( 4.96%) 841.64
dns 2231 ( 0.02%) 170253 ( 0.00%) 76.31
bgp 191 ( 0.00%) 59097 ( 0.00%) 309.41
realaud 548 ( 0.00%) 497312 ( 0.01%) 907.50
rtsp 39934 ( 0.31%) 35843681 ( 0.40%) 897.57
icecast 119 ( 0.00%) 7920 ( 0.00%) 66.55
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2250515 ( 17.60%) 1457150104 ( 16.22%) 647.47
udp 1652844 ( 12.92%) 275472796 ( 3.07%) 166.67
dns 916519 ( 7.17%) 136794777 ( 1.52%) 149.25
realaud 8733 ( 0.07%) 5476810 ( 0.06%) 627.14
halflif 24 ( 0.00%) 3074 ( 0.00%) 128.08
starcra 39 ( 0.00%) 5497 ( 0.00%) 140.95
everque 23 ( 0.00%) 2659 ( 0.00%) 115.61
unreal 13 ( 0.00%) 1446 ( 0.00%) 111.23
quake 9 ( 0.00%) 1188 ( 0.00%) 132.00
cuseeme 1 ( 0.00%) 412 ( 0.00%) 412.00
other 727442 ( 5.69%) 133174984 ( 1.48%) 183.07
icmp 419075 ( 3.28%) 40153763 ( 0.45%) 95.82
ipip 384 ( 0.00%) 46922 ( 0.00%) 122.19
ipsec 1213640 ( 9.49%) 1266558676 ( 14.10%) 1043.60
ip6 1080 ( 0.01%) 149293 ( 0.00%) 138.23
other 27839 ( 0.22%) 5202194 ( 0.06%) 186.87
frag 1280 ( 0.01%) 1042397 ( 0.01%) 814.37
ip6 35140 ( 0.27%) 9499858 ( 0.11%) 270.34
tcp6 5280 ( 0.04%) 730962 ( 0.01%) 138.44
http(s) 47 ( 0.00%) 55960 ( 0.00%) 1190.64
http(c) 2423 ( 0.02%) 244718 ( 0.00%) 101.00
squid 10 ( 0.00%) 2097 ( 0.00%) 209.70
smtp 449 ( 0.00%) 160263 ( 0.00%) 356.93
pop3 34 ( 0.00%) 3440 ( 0.00%) 101.18
bgp 85 ( 0.00%) 9907 ( 0.00%) 116.55
other 2232 ( 0.02%) 254577 ( 0.00%) 114.06
udp6 20898 ( 0.16%) 3456961 ( 0.04%) 165.42
dns 19681 ( 0.15%) 3211263 ( 0.04%) 163.17
other 1217 ( 0.01%) 245698 ( 0.00%) 201.89
icmp6 5435 ( 0.04%) 733375 ( 0.01%) 134.94
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3496 ( 0.03%) 4574344 ( 0.05%) 1308.45
tcpdump file: 200803191000.dump.gz (294.94 MB)