Traffic Trace Info
DumpFile: -
Id: 200803191415
StartTime: Wed Mar 19 14:15:01 2008
EndTime: Wed Mar 19 14:30:00 2008
TotalTime: 899.64 seconds
TotalCapSize: 674.67MB CapLen: 96 bytes
# of packets: 12396305 (7773.27MB)
AvgRate: 72.50Mbps stddev:17.54M
IP flow (unique src/dst pair) Information
# of flows: 544965 (avg. 22.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 2.4% 2.1% 1.9% 1.5% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 290126
Top 10 bandwidth usage (bytes/total in %):
6.8% 5.9% 4.7% 4.2% 3.5% 2.8% 2.7% 2.6% 2.6% 2.5%
# of IPv6 addresses: 1551
Top 10 bandwidth usage (bytes/total in %):
47.7% 43.9% 6.6% 6.2% 6.1% 6.1% 5.7% 3.8% 3.7% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191415.pktlen.png)
detailed numbers
[ 32- 63]: 2851837
[ 64- 127]: 3175005
[ 128- 255]: 715223
[ 256- 511]: 473881
[ 512- 1023]: 322213
[ 1024- 2047]: 4858146
Protocol Breakdown
![[protocol breakdown chart]](200803191415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12396305 (100.00%) 8150869054 (100.00%) 657.52
ip 12362553 ( 99.73%) 8140468963 ( 99.87%) 658.48
tcp 10153030 ( 81.90%) 7694086639 ( 94.40%) 757.81
http(s) 4047095 ( 32.65%) 5332397268 ( 65.42%) 1317.59
http(c) 2602756 ( 21.00%) 523881213 ( 6.43%) 201.28
squid 336477 ( 2.71%) 196822831 ( 2.41%) 584.95
smtp 563910 ( 4.55%) 107496674 ( 1.32%) 190.63
ftp 50000 ( 0.40%) 4114054 ( 0.05%) 82.28
pop3 21306 ( 0.17%) 12571477 ( 0.15%) 590.04
imap 8991 ( 0.07%) 3535843 ( 0.04%) 393.26
telnet 1000 ( 0.01%) 81045 ( 0.00%) 81.05
ssh 260197 ( 2.10%) 245012209 ( 3.01%) 941.64
dns 8801 ( 0.07%) 10220119 ( 0.13%) 1161.25
bgp 197 ( 0.00%) 61225 ( 0.00%) 310.79
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 15 ( 0.00%) 2392 ( 0.00%) 159.47
rtsp 134823 ( 1.09%) 119774080 ( 1.47%) 888.38
icecast 117 ( 0.00%) 21951 ( 0.00%) 187.62
other 2117342 ( 17.08%) 1138094078 ( 13.96%) 537.51
udp 1739180 ( 14.03%) 375560386 ( 4.61%) 215.94
dns 842504 ( 6.80%) 125736311 ( 1.54%) 149.24
realaud 8745 ( 0.07%) 5454373 ( 0.07%) 623.71
halflif 9 ( 0.00%) 1260 ( 0.00%) 140.00
starcra 39 ( 0.00%) 8080 ( 0.00%) 207.18
everque 27 ( 0.00%) 4110 ( 0.00%) 152.22
unreal 18 ( 0.00%) 3570 ( 0.00%) 198.33
quake 15 ( 0.00%) 1713 ( 0.00%) 114.20
other 887793 ( 7.16%) 244335916 ( 3.00%) 275.22
icmp 343583 ( 2.77%) 32773524 ( 0.40%) 95.39
ipip 321 ( 0.00%) 38330 ( 0.00%) 119.41
ip6 996 ( 0.01%) 133787 ( 0.00%) 134.32
other 125443 ( 1.01%) 37876297 ( 0.46%) 301.94
frag 1382 ( 0.01%) 1168457 ( 0.01%) 845.48
ip6 33752 ( 0.27%) 10400091 ( 0.13%) 308.13
tcp6 7192 ( 0.06%) 1553224 ( 0.02%) 215.97
http(s) 431 ( 0.00%) 637720 ( 0.01%) 1479.63
http(c) 2542 ( 0.02%) 320405 ( 0.00%) 126.04
smtp 538 ( 0.00%) 202827 ( 0.00%) 377.00
ssh 1515 ( 0.01%) 139442 ( 0.00%) 92.04
dns 15 ( 0.00%) 2431 ( 0.00%) 162.07
bgp 95 ( 0.00%) 13622 ( 0.00%) 143.39
other 2056 ( 0.02%) 236777 ( 0.00%) 115.16
udp6 17960 ( 0.14%) 3575976 ( 0.04%) 199.11
dns 16778 ( 0.14%) 3325942 ( 0.04%) 198.23
unreal 2 ( 0.00%) 258 ( 0.00%) 129.00
other 1180 ( 0.01%) 249776 ( 0.00%) 211.67
icmp6 5076 ( 0.04%) 698009 ( 0.01%) 137.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3493 ( 0.03%) 4568666 ( 0.06%) 1307.95
tcpdump file: 200803191415.dump.gz (310.35 MB)