Traffic Trace Info
DumpFile: -
Id: 200803191215
StartTime: Wed Mar 19 12:15:00 2008
EndTime: Wed Mar 19 12:30:01 2008
TotalTime: 900.82 seconds
TotalCapSize: 702.81MB CapLen: 96 bytes
# of packets: 12773640 (8023.41MB)
AvgRate: 74.72Mbps stddev:18.49M
IP flow (unique src/dst pair) Information
# of flows: 633426 (avg. 20.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.4% 2.9% 2.2% 2.0% 2.0% 1.5% 1.5% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 368804
Top 10 bandwidth usage (bytes/total in %):
9.9% 5.7% 5.0% 3.7% 3.5% 3.2% 3.2% 3.1% 2.9% 2.9%
# of IPv6 addresses: 1803
Top 10 bandwidth usage (bytes/total in %):
44.2% 36.2% 20.1% 20.1% 4.3% 3.9% 3.9% 3.9% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191215.pktlen.png)
detailed numbers
[ 32- 63]: 2580591
[ 64- 127]: 3634529
[ 128- 255]: 785677
[ 256- 511]: 469358
[ 512- 1023]: 267918
[ 1024- 2047]: 5035567
Protocol Breakdown
![[protocol breakdown chart]](200803191215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12773640 (100.00%) 8413158530 (100.00%) 658.63
ip 12710905 ( 99.51%) 8400345360 ( 99.85%) 660.88
tcp 10331178 ( 80.88%) 7926645565 ( 94.22%) 767.25
http(s) 3673827 ( 28.76%) 4598983515 ( 54.66%) 1251.82
http(c) 2503378 ( 19.60%) 576378279 ( 6.85%) 230.24
squid 595038 ( 4.66%) 446741058 ( 5.31%) 750.78
smtp 512824 ( 4.01%) 84463312 ( 1.00%) 164.70
ftp 57290 ( 0.45%) 4951109 ( 0.06%) 86.42
pop3 8035 ( 0.06%) 4288682 ( 0.05%) 533.75
imap 4963 ( 0.04%) 1504537 ( 0.02%) 303.15
telnet 1481 ( 0.01%) 115017 ( 0.00%) 77.66
ssh 455430 ( 3.57%) 425822790 ( 5.06%) 934.99
dns 8450 ( 0.07%) 10245004 ( 0.12%) 1212.43
bgp 205 ( 0.00%) 67117 ( 0.00%) 327.40
napster 76 ( 0.00%) 7124 ( 0.00%) 93.74
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 169679 ( 1.33%) 155742618 ( 1.85%) 917.87
icecast 138 ( 0.00%) 9494 ( 0.00%) 68.80
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2340332 ( 18.32%) 1617323989 ( 19.22%) 691.07
udp 1788975 ( 14.01%) 403723584 ( 4.80%) 225.67
dns 800325 ( 6.27%) 120502429 ( 1.43%) 150.57
realaud 8716 ( 0.07%) 5458361 ( 0.06%) 626.25
halflif 19 ( 0.00%) 4849 ( 0.00%) 255.21
starcra 42 ( 0.00%) 9030 ( 0.00%) 215.00
everque 30 ( 0.00%) 5047 ( 0.00%) 168.23
unreal 19 ( 0.00%) 5278 ( 0.00%) 277.79
quake 9 ( 0.00%) 1483 ( 0.00%) 164.78
cuseeme 2 ( 0.00%) 487 ( 0.00%) 243.50
other 979778 ( 7.67%) 277717618 ( 3.30%) 283.45
icmp 421170 ( 3.30%) 38154990 ( 0.45%) 90.59
ipip 310 ( 0.00%) 37484 ( 0.00%) 120.92
ip6 1075 ( 0.01%) 148889 ( 0.00%) 138.50
other 168197 ( 1.32%) 31634848 ( 0.38%) 188.08
frag 1177 ( 0.01%) 1009396 ( 0.01%) 857.60
ip6 62735 ( 0.49%) 12813170 ( 0.15%) 204.24
tcp6 36099 ( 0.28%) 4252403 ( 0.05%) 117.80
http(s) 823 ( 0.01%) 985061 ( 0.01%) 1196.91
http(c) 31501 ( 0.25%) 2727468 ( 0.03%) 86.58
squid 4 ( 0.00%) 336 ( 0.00%) 84.00
smtp 260 ( 0.00%) 84272 ( 0.00%) 324.12
nntp 59 ( 0.00%) 30510 ( 0.00%) 517.12
bgp 97 ( 0.00%) 20945 ( 0.00%) 215.93
icecast 2 ( 0.00%) 168 ( 0.00%) 84.00
other 3353 ( 0.03%) 403643 ( 0.00%) 120.38
udp6 17890 ( 0.14%) 3214510 ( 0.04%) 179.68
dns 16450 ( 0.13%) 2921521 ( 0.03%) 177.60
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1439 ( 0.01%) 292873 ( 0.00%) 203.53
icmp6 5160 ( 0.04%) 723743 ( 0.01%) 140.26
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3555 ( 0.03%) 4618298 ( 0.05%) 1299.10
tcpdump file: 200803191215.dump.gz (319.02 MB)