Traffic Trace Info
DumpFile: -
Id: 200803191345
StartTime: Wed Mar 19 13:45:00 2008
EndTime: Wed Mar 19 14:00:01 2008
TotalTime: 900.75 seconds
TotalCapSize: 678.95MB CapLen: 96 bytes
# of packets: 12419666 (8021.17MB)
AvgRate: 74.72Mbps stddev:24.11M
IP flow (unique src/dst pair) Information
# of flows: 539872 (avg. 23.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.0% 2.9% 2.4% 1.7% 1.6% 1.4% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 282875
Top 10 bandwidth usage (bytes/total in %):
6.3% 5.7% 4.9% 3.6% 3.6% 3.2% 3.1% 3.1% 3.1% 3.0%
# of IPv6 addresses: 1520
Top 10 bandwidth usage (bytes/total in %):
46.5% 42.6% 11.3% 10.7% 6.9% 6.1% 6.1% 4.3% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191345.pktlen.png)
detailed numbers
[ 32- 63]: 2703934
[ 64- 127]: 3209529
[ 128- 255]: 677991
[ 256- 511]: 460293
[ 512- 1023]: 315319
[ 1024- 2047]: 5052600
Protocol Breakdown
![[protocol breakdown chart]](200803191345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12419666 (100.00%) 8410805807 (100.00%) 677.22
ip 12385887 ( 99.73%) 8400324641 ( 99.88%) 678.22
tcp 10242625 ( 82.47%) 7948033303 ( 94.50%) 775.98
http(s) 3837580 ( 30.90%) 5045923165 ( 59.99%) 1314.87
http(c) 2541228 ( 20.46%) 523942692 ( 6.23%) 206.18
squid 511328 ( 4.12%) 392299136 ( 4.66%) 767.22
smtp 565030 ( 4.55%) 101713993 ( 1.21%) 180.02
ftp 58840 ( 0.47%) 7556313 ( 0.09%) 128.42
pop3 20782 ( 0.17%) 12806509 ( 0.15%) 616.23
imap 4407 ( 0.04%) 1457771 ( 0.02%) 330.79
telnet 1636 ( 0.01%) 143147 ( 0.00%) 87.50
ssh 600181 ( 4.83%) 562518723 ( 6.69%) 937.25
dns 1914 ( 0.02%) 145770 ( 0.00%) 76.16
bgp 206 ( 0.00%) 60082 ( 0.00%) 291.66
realaud 8 ( 0.00%) 1114 ( 0.00%) 139.25
rtsp 288958 ( 2.33%) 289003254 ( 3.44%) 1000.16
icecast 130 ( 0.00%) 10229 ( 0.00%) 78.68
other 1810395 ( 14.58%) 1010451285 ( 12.01%) 558.14
udp 1698735 ( 13.68%) 382254916 ( 4.54%) 225.02
dns 779504 ( 6.28%) 119666033 ( 1.42%) 153.52
realaud 8716 ( 0.07%) 5458236 ( 0.06%) 626.23
halflif 10 ( 0.00%) 1246 ( 0.00%) 124.60
starcra 35 ( 0.00%) 7112 ( 0.00%) 203.20
everque 33 ( 0.00%) 4359 ( 0.00%) 132.09
unreal 15 ( 0.00%) 2500 ( 0.00%) 166.67
quake 11 ( 0.00%) 1218 ( 0.00%) 110.73
cuseeme 2 ( 0.00%) 229 ( 0.00%) 114.50
other 910398 ( 7.33%) 257110475 ( 3.06%) 282.42
icmp 342727 ( 2.76%) 33179645 ( 0.39%) 96.81
ipip 322 ( 0.00%) 38330 ( 0.00%) 119.04
ip6 1068 ( 0.01%) 145943 ( 0.00%) 136.65
other 100410 ( 0.81%) 36672504 ( 0.44%) 365.23
frag 1072 ( 0.01%) 901171 ( 0.01%) 840.64
ip6 33779 ( 0.27%) 10481166 ( 0.12%) 310.29
tcp6 5663 ( 0.05%) 1770108 ( 0.02%) 312.57
http(s) 802 ( 0.01%) 1086359 ( 0.01%) 1354.56
http(c) 1671 ( 0.01%) 162263 ( 0.00%) 97.11
smtp 477 ( 0.00%) 171108 ( 0.00%) 358.72
ssh 546 ( 0.00%) 103647 ( 0.00%) 189.83
bgp 80 ( 0.00%) 9091 ( 0.00%) 113.64
other 2087 ( 0.02%) 237640 ( 0.00%) 113.87
udp6 19632 ( 0.16%) 3558923 ( 0.04%) 181.28
dns 18406 ( 0.15%) 3300824 ( 0.04%) 179.33
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1225 ( 0.01%) 257962 ( 0.00%) 210.58
icmp6 5026 ( 0.04%) 680629 ( 0.01%) 135.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3428 ( 0.03%) 4467426 ( 0.05%) 1303.22
tcpdump file: 200803191345.dump.gz (305.59 MB)