Traffic Trace Info
DumpFile: -
Id: 200803191245
StartTime: Wed Mar 19 12:45:01 2008
EndTime: Wed Mar 19 13:00:00 2008
TotalTime: 899.55 seconds
TotalCapSize: 658.39MB CapLen: 96 bytes
# of packets: 11912486 (7158.79MB)
AvgRate: 66.76Mbps stddev:19.07M
IP flow (unique src/dst pair) Information
# of flows: 730788 (avg. 16.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.7% 2.3% 2.1% 1.8% 1.5% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 404441
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.2% 5.4% 3.9% 3.8% 3.8% 3.4% 2.9% 2.8% 2.3%
# of IPv6 addresses: 1640
Top 10 bandwidth usage (bytes/total in %):
45.1% 31.4% 16.2% 16.2% 8.4% 5.3% 4.5% 4.5% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191245.pktlen.png)
detailed numbers
[ 32- 63]: 2425935
[ 64- 127]: 3569692
[ 128- 255]: 691712
[ 256- 511]: 520669
[ 512- 1023]: 262226
[ 1024- 2047]: 4442252
Protocol Breakdown
![[protocol breakdown chart]](200803191245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11912486 (100.00%) 7506539060 (100.00%) 630.14
ip 11848922 ( 99.47%) 7492501624 ( 99.81%) 632.34
tcp 9563552 ( 80.28%) 7019225187 ( 93.51%) 733.96
http(s) 3316726 ( 27.84%) 4145540013 ( 55.23%) 1249.89
http(c) 2500649 ( 20.99%) 557777280 ( 7.43%) 223.05
squid 396294 ( 3.33%) 276926204 ( 3.69%) 698.79
smtp 548828 ( 4.61%) 97626252 ( 1.30%) 177.88
nntp 7 ( 0.00%) 430 ( 0.00%) 61.43
ftp 69113 ( 0.58%) 5572357 ( 0.07%) 80.63
pop3 6599 ( 0.06%) 3195558 ( 0.04%) 484.25
imap 16302 ( 0.14%) 12734495 ( 0.17%) 781.16
telnet 4861 ( 0.04%) 310700 ( 0.00%) 63.92
ssh 525319 ( 4.41%) 417424374 ( 5.56%) 794.61
dns 2546 ( 0.02%) 195929 ( 0.00%) 76.96
bgp 192 ( 0.00%) 52253 ( 0.00%) 272.15
napster 574 ( 0.00%) 716103 ( 0.01%) 1247.57
rtsp 137822 ( 1.16%) 121328158 ( 1.62%) 880.33
icecast 321 ( 0.00%) 23851 ( 0.00%) 74.30
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 2037395 ( 17.10%) 1379800988 ( 18.38%) 677.24
udp 1772311 ( 14.88%) 403316219 ( 5.37%) 227.57
dns 922581 ( 7.74%) 150442989 ( 2.00%) 163.07
realaud 65568 ( 0.55%) 36351934 ( 0.48%) 554.42
halflif 10 ( 0.00%) 1524 ( 0.00%) 152.40
starcra 88 ( 0.00%) 39518 ( 0.00%) 449.07
everque 25 ( 0.00%) 4259 ( 0.00%) 170.36
unreal 16 ( 0.00%) 3131 ( 0.00%) 195.69
quake 11 ( 0.00%) 1576 ( 0.00%) 143.27
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 783979 ( 6.58%) 216456900 ( 2.88%) 276.10
icmp 386397 ( 3.24%) 35938480 ( 0.48%) 93.01
ipip 317 ( 0.00%) 38578 ( 0.00%) 121.70
ip6 1042 ( 0.01%) 144970 ( 0.00%) 139.13
other 125303 ( 1.05%) 33838190 ( 0.45%) 270.05
frag 1100 ( 0.01%) 936487 ( 0.01%) 851.35
ip6 63564 ( 0.53%) 14037436 ( 0.19%) 220.84
tcp6 32993 ( 0.28%) 5095020 ( 0.07%) 154.43
http(s) 1749 ( 0.01%) 2123421 ( 0.03%) 1214.08
http(c) 28104 ( 0.24%) 2435350 ( 0.03%) 86.65
smtp 773 ( 0.01%) 258893 ( 0.00%) 334.92
ssh 8 ( 0.00%) 676 ( 0.00%) 84.50
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 152 ( 0.00%) 28933 ( 0.00%) 190.35
other 2200 ( 0.02%) 247112 ( 0.00%) 112.32
udp6 21468 ( 0.18%) 3720364 ( 0.05%) 173.30
dns 20019 ( 0.17%) 3424027 ( 0.05%) 171.04
unreal 2 ( 0.00%) 278 ( 0.00%) 139.00
other 1447 ( 0.01%) 296059 ( 0.00%) 204.60
icmp6 5698 ( 0.05%) 819290 ( 0.01%) 143.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3375 ( 0.03%) 4398682 ( 0.06%) 1303.31
tcpdump file: 200803191245.dump.gz (300.66 MB)