Traffic Trace Info
DumpFile: -
Id: 200803191230
StartTime: Wed Mar 19 12:30:01 2008
EndTime: Wed Mar 19 12:45:01 2008
TotalTime: 899.80 seconds
TotalCapSize: 721.31MB CapLen: 96 bytes
# of packets: 13199536 (8198.99MB)
AvgRate: 76.45Mbps stddev:20.48M
IP flow (unique src/dst pair) Information
# of flows: 586265 (avg. 22.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.7% 3.6% 2.9% 1.9% 1.4% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 323467
Top 10 bandwidth usage (bytes/total in %):
8.2% 6.2% 5.6% 5.6% 4.9% 4.9% 4.5% 3.6% 3.4% 3.3%
# of IPv6 addresses: 1669
Top 10 bandwidth usage (bytes/total in %):
43.6% 33.3% 21.5% 21.5% 5.5% 5.4% 4.8% 4.7% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191230.pktlen.png)
detailed numbers
[ 32- 63]: 2743037
[ 64- 127]: 3825270
[ 128- 255]: 691626
[ 256- 511]: 461842
[ 512- 1023]: 323124
[ 1024- 2047]: 5154637
Protocol Breakdown
![[protocol breakdown chart]](200803191230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13199536 (100.00%) 8597262149 (100.00%) 651.33
ip 13129915 ( 99.47%) 8583574174 ( 99.84%) 653.74
tcp 10460259 ( 79.25%) 7962722910 ( 92.62%) 761.24
http(s) 3903435 ( 29.57%) 4951245392 ( 57.59%) 1268.43
http(c) 2621502 ( 19.86%) 589479939 ( 6.86%) 224.86
squid 372309 ( 2.82%) 221538325 ( 2.58%) 595.04
smtp 519739 ( 3.94%) 93446084 ( 1.09%) 179.79
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 57049 ( 0.43%) 4762828 ( 0.06%) 83.49
pop3 13760 ( 0.10%) 9952633 ( 0.12%) 723.30
imap 5285 ( 0.04%) 1806197 ( 0.02%) 341.76
telnet 1343 ( 0.01%) 102694 ( 0.00%) 76.47
ssh 452309 ( 3.43%) 425692932 ( 4.95%) 941.16
dns 3777 ( 0.03%) 1887624 ( 0.02%) 499.77
bgp 187 ( 0.00%) 56435 ( 0.00%) 301.79
napster 65 ( 0.00%) 12036 ( 0.00%) 185.17
realaud 19 ( 0.00%) 1657 ( 0.00%) 87.21
rtsp 174529 ( 1.32%) 164579887 ( 1.91%) 942.99
icecast 461 ( 0.00%) 30101 ( 0.00%) 65.30
other 2334487 ( 17.69%) 1498127962 ( 17.43%) 641.74
udp 2119493 ( 16.06%) 565406270 ( 6.58%) 266.76
dns 877835 ( 6.65%) 142583233 ( 1.66%) 162.43
realaud 65009 ( 0.49%) 35630400 ( 0.41%) 548.08
halflif 7 ( 0.00%) 979 ( 0.00%) 139.86
starcra 22 ( 0.00%) 3261 ( 0.00%) 148.23
everque 28 ( 0.00%) 4448 ( 0.00%) 158.86
unreal 19 ( 0.00%) 3911 ( 0.00%) 205.84
quake 19 ( 0.00%) 2158 ( 0.00%) 113.58
cuseeme 8 ( 0.00%) 1164 ( 0.00%) 145.50
other 1176491 ( 8.91%) 387164258 ( 4.50%) 329.08
icmp 481025 ( 3.64%) 42276579 ( 0.49%) 87.89
ipip 353 ( 0.00%) 42754 ( 0.00%) 121.12
ip6 1097 ( 0.01%) 150481 ( 0.00%) 137.18
other 67688 ( 0.51%) 12975180 ( 0.15%) 191.69
frag 1426 ( 0.01%) 1216739 ( 0.01%) 853.25
ip6 69621 ( 0.53%) 13687975 ( 0.16%) 196.61
tcp6 39522 ( 0.30%) 4674570 ( 0.05%) 118.28
http(s) 1029 ( 0.01%) 1185455 ( 0.01%) 1152.05
http(c) 35635 ( 0.27%) 3080131 ( 0.04%) 86.44
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 366 ( 0.00%) 120190 ( 0.00%) 328.39
bgp 98 ( 0.00%) 20252 ( 0.00%) 206.65
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2391 ( 0.02%) 268320 ( 0.00%) 112.22
udp6 21137 ( 0.16%) 3706652 ( 0.04%) 175.36
dns 19791 ( 0.15%) 3385268 ( 0.04%) 171.05
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1344 ( 0.01%) 321110 ( 0.00%) 238.92
icmp6 5446 ( 0.04%) 743901 ( 0.01%) 136.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3486 ( 0.03%) 4558772 ( 0.05%) 1307.74
tcpdump file: 200803191230.dump.gz (326.45 MB)