Traffic Trace Info
DumpFile: -
Id: 200803191130
StartTime: Wed Mar 19 11:30:00 2008
EndTime: Wed Mar 19 11:45:00 2008
TotalTime: 899.67 seconds
TotalCapSize: 674.43MB CapLen: 96 bytes
# of packets: 12252934 (7836.80MB)
AvgRate: 73.08Mbps stddev:17.57M
IP flow (unique src/dst pair) Information
# of flows: 649323 (avg. 18.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.5% 2.9% 2.4% 2.1% 2.0% 1.7% 1.6% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 343943
Top 10 bandwidth usage (bytes/total in %):
7.8% 5.9% 5.1% 4.1% 4.0% 3.9% 3.7% 3.7% 3.6% 3.4%
# of IPv6 addresses: 1829
Top 10 bandwidth usage (bytes/total in %):
51.8% 47.6% 6.3% 6.0% 4.9% 4.8% 3.5% 2.2% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191130.pktlen.png)
detailed numbers
[ 32- 63]: 2649262
[ 64- 127]: 3253226
[ 128- 255]: 663085
[ 256- 511]: 545229
[ 512- 1023]: 226301
[ 1024- 2047]: 4915831
Protocol Breakdown
![[protocol breakdown chart]](200803191130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12252934 (100.00%) 8217482246 (100.00%) 670.65
ip 12222762 ( 99.75%) 8208211259 ( 99.89%) 671.55
tcp 10092723 ( 82.37%) 7819311275 ( 95.15%) 774.75
http(s) 3607474 ( 29.44%) 4641548806 ( 56.48%) 1286.65
http(c) 2430810 ( 19.84%) 522749576 ( 6.36%) 215.05
squid 438511 ( 3.58%) 275792304 ( 3.36%) 628.93
smtp 604907 ( 4.94%) 149706735 ( 1.82%) 247.49
nntp 15 ( 0.00%) 1660 ( 0.00%) 110.67
ftp 47802 ( 0.39%) 3992158 ( 0.05%) 83.51
pop3 8365 ( 0.07%) 4053905 ( 0.05%) 484.63
imap 4832 ( 0.04%) 1686293 ( 0.02%) 348.98
telnet 1064 ( 0.01%) 77903 ( 0.00%) 73.22
ssh 558988 ( 4.56%) 435701212 ( 5.30%) 779.45
dns 3855 ( 0.03%) 1888766 ( 0.02%) 489.95
bgp 183 ( 0.00%) 53210 ( 0.00%) 290.77
napster 7 ( 0.00%) 481 ( 0.00%) 68.71
realaud 10 ( 0.00%) 1358 ( 0.00%) 135.80
rtsp 273760 ( 2.23%) 287238582 ( 3.50%) 1049.24
icecast 78 ( 0.00%) 13946 ( 0.00%) 178.79
hotline 4 ( 0.00%) 296 ( 0.00%) 74.00
other 2111794 ( 17.24%) 1494788244 ( 18.19%) 707.83
udp 1663540 ( 13.58%) 337852604 ( 4.11%) 203.09
dns 867388 ( 7.08%) 133053747 ( 1.62%) 153.40
realaud 8695 ( 0.07%) 5453922 ( 0.07%) 627.25
halflif 9 ( 0.00%) 1456 ( 0.00%) 161.78
starcra 27 ( 0.00%) 5300 ( 0.00%) 196.30
everque 22 ( 0.00%) 4579 ( 0.00%) 208.14
unreal 16 ( 0.00%) 2477 ( 0.00%) 154.81
quake 9 ( 0.00%) 938 ( 0.00%) 104.22
cuseeme 1 ( 0.00%) 75 ( 0.00%) 75.00
other 787336 ( 6.43%) 199319275 ( 2.43%) 253.16
icmp 385498 ( 3.15%) 35275733 ( 0.43%) 91.51
ipip 368 ( 0.00%) 45200 ( 0.00%) 122.83
ip6 1116 ( 0.01%) 158887 ( 0.00%) 142.37
other 79517 ( 0.65%) 15567560 ( 0.19%) 195.78
frag 1593 ( 0.01%) 1319203 ( 0.02%) 828.12
ip6 30172 ( 0.25%) 9270987 ( 0.11%) 307.27
tcp6 4768 ( 0.04%) 827441 ( 0.01%) 173.54
http(s) 241 ( 0.00%) 297305 ( 0.00%) 1233.63
http(c) 1578 ( 0.01%) 154981 ( 0.00%) 98.21
smtp 351 ( 0.00%) 90008 ( 0.00%) 256.43
bgp 72 ( 0.00%) 9329 ( 0.00%) 129.57
other 2526 ( 0.02%) 275818 ( 0.00%) 109.19
udp6 16785 ( 0.14%) 3330208 ( 0.04%) 198.40
dns 15003 ( 0.12%) 2786721 ( 0.03%) 185.74
other 1782 ( 0.01%) 543487 ( 0.01%) 304.99
icmp6 5200 ( 0.04%) 694413 ( 0.01%) 133.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3389 ( 0.03%) 4414845 ( 0.05%) 1302.70
tcpdump file: 200803191130.dump.gz (301.87 MB)