Traffic Trace Info
DumpFile: -
Id: 200803191015
StartTime: Wed Mar 19 10:15:01 2008
EndTime: Wed Mar 19 10:30:00 2008
TotalTime: 899.40 seconds
TotalCapSize: 647.23MB CapLen: 96 bytes
# of packets: 12215959 (7808.14MB)
AvgRate: 72.83Mbps stddev:20.77M
IP flow (unique src/dst pair) Information
# of flows: 652240 (avg. 18.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.6% 5.0% 3.9% 1.7% 1.6% 1.3% 1.3% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 360737
Top 10 bandwidth usage (bytes/total in %):
17.8% 16.4% 8.6% 6.7% 5.9% 5.1% 4.5% 3.9% 3.8% 2.1%
# of IPv6 addresses: 1469
Top 10 bandwidth usage (bytes/total in %):
51.2% 47.0% 5.7% 5.4% 5.4% 5.0% 4.5% 3.7% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191015.pktlen.png)
detailed numbers
[ 32- 63]: 2976797
[ 64- 127]: 3039149
[ 128- 255]: 670194
[ 256- 511]: 353160
[ 512- 1023]: 216024
[ 1024- 2047]: 4960635
Protocol Breakdown
![[protocol breakdown chart]](200803191015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12215959 (100.00%) 8187431401 (100.00%) 670.22
ip 12184626 ( 99.74%) 8178193276 ( 99.89%) 671.19
tcp 8827344 ( 72.26%) 6546603942 ( 79.96%) 741.63
http(s) 3020234 ( 24.72%) 3959044477 ( 48.36%) 1310.84
http(c) 2041816 ( 16.71%) 241400923 ( 2.95%) 118.23
squid 606394 ( 4.96%) 464717570 ( 5.68%) 766.36
smtp 493693 ( 4.04%) 81651051 ( 1.00%) 165.39
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 259611 ( 2.13%) 117177557 ( 1.43%) 451.36
pop3 9189 ( 0.08%) 5454014 ( 0.07%) 593.54
imap 4907 ( 0.04%) 2135615 ( 0.03%) 435.22
telnet 699 ( 0.01%) 56514 ( 0.00%) 80.85
ssh 470257 ( 3.85%) 429791255 ( 5.25%) 913.95
dns 8693 ( 0.07%) 10283938 ( 0.13%) 1183.01
bgp 200 ( 0.00%) 63004 ( 0.00%) 315.02
realaud 14 ( 0.00%) 1952 ( 0.00%) 139.43
rtsp 42280 ( 0.35%) 37758843 ( 0.46%) 893.07
icecast 3781 ( 0.03%) 4486356 ( 0.05%) 1186.55
other 1865572 ( 15.27%) 1192580633 ( 14.57%) 639.26
udp 1583224 ( 12.96%) 239870783 ( 2.93%) 151.51
dns 849710 ( 6.96%) 129723126 ( 1.58%) 152.67
realaud 8692 ( 0.07%) 5449426 ( 0.07%) 626.95
halflif 14 ( 0.00%) 2228 ( 0.00%) 159.14
starcra 23 ( 0.00%) 4865 ( 0.00%) 211.52
everque 35 ( 0.00%) 4850 ( 0.00%) 138.57
unreal 13 ( 0.00%) 2511 ( 0.00%) 193.15
quake 6 ( 0.00%) 747 ( 0.00%) 124.50
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 724704 ( 5.93%) 104664696 ( 1.28%) 144.42
icmp 435548 ( 3.57%) 40746650 ( 0.50%) 93.55
ipip 275 ( 0.00%) 33238 ( 0.00%) 120.87
ipsec 1287670 ( 10.54%) 1340752238 ( 16.38%) 1041.22
ip6 971 ( 0.01%) 128640 ( 0.00%) 132.48
other 49594 ( 0.41%) 10057785 ( 0.12%) 202.80
frag 965 ( 0.01%) 825235 ( 0.01%) 855.17
ip6 31333 ( 0.26%) 9238125 ( 0.11%) 294.84
tcp6 6495 ( 0.05%) 1256278 ( 0.02%) 193.42
http(s) 480 ( 0.00%) 590679 ( 0.01%) 1230.58
http(c) 3450 ( 0.03%) 318061 ( 0.00%) 92.19
squid 11 ( 0.00%) 1599 ( 0.00%) 145.36
smtp 272 ( 0.00%) 89136 ( 0.00%) 327.71
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 80 ( 0.00%) 9151 ( 0.00%) 114.39
other 2195 ( 0.02%) 247017 ( 0.00%) 112.54
udp6 16575 ( 0.14%) 2992115 ( 0.04%) 180.52
dns 15564 ( 0.13%) 2776423 ( 0.03%) 178.39
everque 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1009 ( 0.01%) 215439 ( 0.00%) 213.52
icmp6 4987 ( 0.04%) 771160 ( 0.01%) 154.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3246 ( 0.03%) 4214492 ( 0.05%) 1298.36
tcpdump file: 200803191015.dump.gz (284.71 MB)