Traffic Trace Info
DumpFile: -
Id: 200803191100
StartTime: Wed Mar 19 11:00:00 2008
EndTime: Wed Mar 19 11:15:01 2008
TotalTime: 900.89 seconds
TotalCapSize: 670.32MB CapLen: 96 bytes
# of packets: 12124404 (7472.11MB)
AvgRate: 69.58Mbps stddev:12.34M
IP flow (unique src/dst pair) Information
# of flows: 687107 (avg. 17.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.2% 2.7% 2.3% 2.2% 2.0% 1.9% 1.8% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 374011
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.1% 6.8% 6.2% 5.4% 4.4% 4.2% 4.0% 2.9% 2.9%
# of IPv6 addresses: 1623
Top 10 bandwidth usage (bytes/total in %):
52.5% 48.1% 6.3% 5.3% 5.0% 4.3% 2.6% 2.5% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191100.pktlen.png)
detailed numbers
[ 32- 63]: 2679651
[ 64- 127]: 3295101
[ 128- 255]: 721429
[ 256- 511]: 494805
[ 512- 1023]: 251143
[ 1024- 2047]: 4682275
Protocol Breakdown
![[protocol breakdown chart]](200803191100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12124404 (100.00%) 7835075434 (100.00%) 646.22
ip 12093200 ( 99.74%) 7825674102 ( 99.88%) 647.11
tcp 9781491 ( 80.68%) 7464394763 ( 95.27%) 763.11
http(s) 3683908 ( 30.38%) 4809151810 ( 61.38%) 1305.45
http(c) 2365967 ( 19.51%) 450309434 ( 5.75%) 190.33
squid 362800 ( 2.99%) 211903696 ( 2.70%) 584.08
smtp 616821 ( 5.09%) 173246379 ( 2.21%) 280.87
nntp 65 ( 0.00%) 51043 ( 0.00%) 785.28
ftp 81901 ( 0.68%) 6363679 ( 0.08%) 77.70
pop3 14076 ( 0.12%) 5333064 ( 0.07%) 378.88
imap 3818 ( 0.03%) 1736328 ( 0.02%) 454.77
telnet 1542 ( 0.01%) 108691 ( 0.00%) 70.49
ssh 568242 ( 4.69%) 531667726 ( 6.79%) 935.64
dns 1738 ( 0.01%) 145805 ( 0.00%) 83.89
bgp 222 ( 0.00%) 70456 ( 0.00%) 317.37
napster 7 ( 0.00%) 490 ( 0.00%) 70.00
realaud 13 ( 0.00%) 1456 ( 0.00%) 112.00
rtsp 143999 ( 1.19%) 133978612 ( 1.71%) 930.41
icecast 173 ( 0.00%) 24296 ( 0.00%) 140.44
other 1936196 ( 15.97%) 1140301618 ( 14.55%) 588.94
udp 1651963 ( 13.63%) 297011460 ( 3.79%) 179.79
dns 892282 ( 7.36%) 149965178 ( 1.91%) 168.07
realaud 8734 ( 0.07%) 5460480 ( 0.07%) 625.20
halflif 15 ( 0.00%) 2788 ( 0.00%) 185.87
starcra 19 ( 0.00%) 3699 ( 0.00%) 194.68
everque 32 ( 0.00%) 4088 ( 0.00%) 127.75
unreal 24 ( 0.00%) 5529 ( 0.00%) 230.38
quake 7 ( 0.00%) 859 ( 0.00%) 122.71
cuseeme 2 ( 0.00%) 502 ( 0.00%) 251.00
other 750786 ( 6.19%) 141534423 ( 1.81%) 188.52
icmp 583828 ( 4.82%) 49523739 ( 0.63%) 84.83
ipip 385 ( 0.00%) 48162 ( 0.00%) 125.10
ip6 1067 ( 0.01%) 147980 ( 0.00%) 138.69
other 74466 ( 0.61%) 14547998 ( 0.19%) 195.36
frag 1271 ( 0.01%) 1081110 ( 0.01%) 850.60
ip6 31202 ( 0.26%) 9401212 ( 0.12%) 301.30
tcp6 4922 ( 0.04%) 978500 ( 0.01%) 198.80
http(s) 331 ( 0.00%) 319234 ( 0.00%) 964.45
http(c) 1807 ( 0.01%) 222349 ( 0.00%) 123.05
smtp 584 ( 0.00%) 183102 ( 0.00%) 313.53
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 74 ( 0.00%) 8229 ( 0.00%) 111.20
other 2119 ( 0.02%) 244951 ( 0.00%) 115.60
udp6 17242 ( 0.14%) 3153061 ( 0.04%) 182.87
dns 15990 ( 0.13%) 2894395 ( 0.04%) 181.01
other 1252 ( 0.01%) 258666 ( 0.00%) 206.60
icmp6 5622 ( 0.05%) 858511 ( 0.01%) 152.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3386 ( 0.03%) 4407060 ( 0.06%) 1301.55
tcpdump file: 200803191100.dump.gz (300.23 MB)