Traffic Trace Info
DumpFile: -
Id: 200803191300
StartTime: Wed Mar 19 13:00:00 2008
EndTime: Wed Mar 19 13:15:00 2008
TotalTime: 900.09 seconds
TotalCapSize: 683.69MB CapLen: 96 bytes
# of packets: 12531576 (7796.97MB)
AvgRate: 72.68Mbps stddev:16.26M
IP flow (unique src/dst pair) Information
# of flows: 595997 (avg. 21.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.5% 3.7% 3.1% 2.3% 2.2% 2.1% 2.1% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 310263
Top 10 bandwidth usage (bytes/total in %):
9.2% 6.3% 5.7% 5.5% 5.5% 4.6% 4.1% 3.8% 3.2% 3.1%
# of IPv6 addresses: 1953
Top 10 bandwidth usage (bytes/total in %):
47.5% 43.7% 9.5% 6.4% 5.1% 4.8% 3.9% 3.7% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191300.pktlen.png)
detailed numbers
[ 32- 63]: 2691336
[ 64- 127]: 3340238
[ 128- 255]: 777593
[ 256- 511]: 544669
[ 512- 1023]: 344377
[ 1024- 2047]: 4833363
Protocol Breakdown
![[protocol breakdown chart]](200803191300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12531576 (100.00%) 8175718731 (100.00%) 652.41
ip 12501914 ( 99.76%) 8165437572 ( 99.87%) 653.13
tcp 10091173 ( 80.53%) 7661110381 ( 93.71%) 759.19
http(s) 3599369 ( 28.72%) 4611972580 ( 56.41%) 1281.33
http(c) 2598671 ( 20.74%) 587515209 ( 7.19%) 226.08
squid 477813 ( 3.81%) 347562007 ( 4.25%) 727.40
smtp 550603 ( 4.39%) 112507612 ( 1.38%) 204.34
ftp 55671 ( 0.44%) 4591943 ( 0.06%) 82.48
pop3 25696 ( 0.21%) 17108781 ( 0.21%) 665.81
imap 9831 ( 0.08%) 4948834 ( 0.06%) 503.39
telnet 60677 ( 0.48%) 3658059 ( 0.04%) 60.29
ssh 359721 ( 2.87%) 321396720 ( 3.93%) 893.46
dns 1990 ( 0.02%) 170500 ( 0.00%) 85.68
bgp 207 ( 0.00%) 67077 ( 0.00%) 324.04
napster 25 ( 0.00%) 1712 ( 0.00%) 68.48
realaud 52 ( 0.00%) 6117 ( 0.00%) 117.63
rtsp 344448 ( 2.75%) 364224785 ( 4.45%) 1057.42
icecast 119 ( 0.00%) 9625 ( 0.00%) 80.88
other 2006279 ( 16.01%) 1285368760 ( 15.72%) 640.67
udp 1864413 ( 14.88%) 422271182 ( 5.16%) 226.49
dns 897350 ( 7.16%) 153344869 ( 1.88%) 170.89
realaud 8736 ( 0.07%) 5458392 ( 0.07%) 624.82
halflif 17 ( 0.00%) 2063 ( 0.00%) 121.35
starcra 27 ( 0.00%) 5695 ( 0.00%) 210.93
everque 32 ( 0.00%) 4325 ( 0.00%) 135.16
unreal 14 ( 0.00%) 4172 ( 0.00%) 298.00
quake 10 ( 0.00%) 1194 ( 0.00%) 119.40
cuseeme 7 ( 0.00%) 1231 ( 0.00%) 175.86
other 958188 ( 7.65%) 263429085 ( 3.22%) 274.92
icmp 432795 ( 3.45%) 39349409 ( 0.48%) 90.92
ipip 347 ( 0.00%) 42278 ( 0.00%) 121.84
ip6 1021 ( 0.01%) 137952 ( 0.00%) 135.11
other 112165 ( 0.90%) 42526370 ( 0.52%) 379.14
frag 1383 ( 0.01%) 1159125 ( 0.01%) 838.12
ip6 29662 ( 0.24%) 10281159 ( 0.13%) 346.61
tcp6 5329 ( 0.04%) 1837899 ( 0.02%) 344.89
http(s) 747 ( 0.01%) 993196 ( 0.01%) 1329.58
http(c) 1465 ( 0.01%) 146722 ( 0.00%) 100.15
smtp 530 ( 0.00%) 172672 ( 0.00%) 325.80
nntp 8 ( 0.00%) 1116 ( 0.00%) 139.50
ftp 281 ( 0.00%) 256258 ( 0.00%) 911.95
bgp 87 ( 0.00%) 13920 ( 0.00%) 160.00
other 2211 ( 0.02%) 254015 ( 0.00%) 114.89
udp6 15333 ( 0.12%) 3157842 ( 0.04%) 205.95
dns 13554 ( 0.11%) 2621656 ( 0.03%) 193.42
everque 1 ( 0.00%) 564 ( 0.00%) 564.00
other 1778 ( 0.01%) 535622 ( 0.01%) 301.25
icmp6 5533 ( 0.04%) 788079 ( 0.01%) 142.43
ip6 1 ( 0.00%) 168 ( 0.00%) 168.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3436 ( 0.03%) 4493091 ( 0.05%) 1307.65
tcpdump file: 200803191300.dump.gz (308.82 MB)