Traffic Trace Info
DumpFile: -
Id: 200803191030
StartTime: Wed Mar 19 10:30:00 2008
EndTime: Wed Mar 19 10:45:00 2008
TotalTime: 900.39 seconds
TotalCapSize: 619.06MB CapLen: 96 bytes
# of packets: 11154229 (6858.08MB)
AvgRate: 63.92Mbps stddev:17.19M
IP flow (unique src/dst pair) Information
# of flows: 692716 (avg. 16.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.0% 2.0% 2.0% 1.6% 1.5% 1.5% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 373842
Top 10 bandwidth usage (bytes/total in %):
9.9% 6.9% 6.4% 6.1% 5.9% 4.6% 3.6% 3.0% 3.0% 2.4%
# of IPv6 addresses: 1631
Top 10 bandwidth usage (bytes/total in %):
51.3% 47.0% 11.2% 4.6% 4.3% 3.8% 3.2% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191030.pktlen.png)
detailed numbers
[ 32- 63]: 2416651
[ 64- 127]: 3170672
[ 128- 255]: 663517
[ 256- 511]: 404822
[ 512- 1023]: 202679
[ 1024- 2047]: 4295888
Protocol Breakdown
![[protocol breakdown chart]](200803191030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11154229 (100.00%) 7191213038 (100.00%) 644.71
ip 11122986 ( 99.72%) 7181693613 ( 99.87%) 645.66
tcp 9200150 ( 82.48%) 6875815563 ( 95.61%) 747.36
http(s) 3359458 ( 30.12%) 4488117784 ( 62.41%) 1335.96
http(c) 2135037 ( 19.14%) 263104059 ( 3.66%) 123.23
squid 425162 ( 3.81%) 294547262 ( 4.10%) 692.79
smtp 540878 ( 4.85%) 93315178 ( 1.30%) 172.53
ftp 120557 ( 1.08%) 13143616 ( 0.18%) 109.02
pop3 6416 ( 0.06%) 2863422 ( 0.04%) 446.29
imap 28615 ( 0.26%) 29061575 ( 0.40%) 1015.61
telnet 759 ( 0.01%) 58718 ( 0.00%) 77.36
ssh 457066 ( 4.10%) 437827526 ( 6.09%) 957.91
dns 3709 ( 0.03%) 1882177 ( 0.03%) 507.46
bgp 234 ( 0.00%) 88588 ( 0.00%) 378.58
napster 32 ( 0.00%) 5034 ( 0.00%) 157.31
realaud 5 ( 0.00%) 693 ( 0.00%) 138.60
rtsp 132605 ( 1.19%) 126873300 ( 1.76%) 956.78
icecast 148 ( 0.00%) 20019 ( 0.00%) 135.26
other 1989467 ( 17.84%) 1124906492 ( 15.64%) 565.43
udp 1422627 ( 12.75%) 253068738 ( 3.52%) 177.89
dns 911174 ( 8.17%) 147085399 ( 2.05%) 161.42
realaud 8689 ( 0.08%) 5452737 ( 0.08%) 627.54
halflif 11 ( 0.00%) 1501 ( 0.00%) 136.45
starcra 11 ( 0.00%) 1990 ( 0.00%) 180.91
everque 15 ( 0.00%) 1226 ( 0.00%) 81.73
unreal 16 ( 0.00%) 3528 ( 0.00%) 220.50
quake 14 ( 0.00%) 1389 ( 0.00%) 99.21
cuseeme 7 ( 0.00%) 2350 ( 0.00%) 335.71
other 502669 ( 4.51%) 100506840 ( 1.40%) 199.95
icmp 406751 ( 3.65%) 36872122 ( 0.51%) 90.65
ipip 379 ( 0.00%) 46950 ( 0.00%) 123.88
ipsec 111 ( 0.00%) 6660 ( 0.00%) 60.00
ip6 1127 ( 0.01%) 158006 ( 0.00%) 140.20
other 91841 ( 0.82%) 15725574 ( 0.22%) 171.23
frag 1106 ( 0.01%) 932507 ( 0.01%) 843.13
ip6 31243 ( 0.28%) 9519425 ( 0.13%) 304.69
tcp6 4360 ( 0.04%) 710692 ( 0.01%) 163.00
http(s) 164 ( 0.00%) 204231 ( 0.00%) 1245.31
http(c) 1630 ( 0.01%) 156159 ( 0.00%) 95.80
smtp 254 ( 0.00%) 88282 ( 0.00%) 347.57
bgp 76 ( 0.00%) 8521 ( 0.00%) 112.12
other 2236 ( 0.02%) 253499 ( 0.00%) 113.37
udp6 18039 ( 0.16%) 3606973 ( 0.05%) 199.95
dns 16723 ( 0.15%) 3305777 ( 0.05%) 197.68
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1315 ( 0.01%) 301059 ( 0.00%) 228.94
icmp6 5451 ( 0.05%) 818162 ( 0.01%) 150.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3363 ( 0.03%) 4379518 ( 0.06%) 1302.27
tcpdump file: 200803191030.dump.gz (275.73 MB)