Traffic Trace Info
DumpFile: -
Id: 200803191430
StartTime: Wed Mar 19 14:30:00 2008
EndTime: Wed Mar 19 14:45:00 2008
TotalTime: 899.72 seconds
TotalCapSize: 715.66MB CapLen: 96 bytes
# of packets: 13070609 (8313.05MB)
AvgRate: 77.51Mbps stddev:17.37M
IP flow (unique src/dst pair) Information
# of flows: 557569 (avg. 23.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.6% 2.7% 2.6% 1.7% 1.6% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 304971
Top 10 bandwidth usage (bytes/total in %):
7.4% 5.1% 4.8% 4.8% 4.7% 4.4% 4.0% 3.4% 3.0% 2.8%
# of IPv6 addresses: 1657
Top 10 bandwidth usage (bytes/total in %):
50.7% 46.4% 6.1% 4.8% 4.4% 4.1% 3.4% 3.4% 3.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191430.pktlen.png)
detailed numbers
[ 32- 63]: 2931392
[ 64- 127]: 3480582
[ 128- 255]: 663488
[ 256- 511]: 454653
[ 512- 1023]: 318422
[ 1024- 2047]: 5222072
Protocol Breakdown
![[protocol breakdown chart]](200803191430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13070609 (100.00%) 8716863196 (100.00%) 666.91
ip 13040683 ( 99.77%) 8707352779 ( 99.89%) 667.71
tcp 10861170 ( 83.10%) 8263613435 ( 94.80%) 760.84
http(s) 3870657 ( 29.61%) 5049776414 ( 57.93%) 1304.63
http(c) 2625615 ( 20.09%) 547732730 ( 6.28%) 208.61
squid 509194 ( 3.90%) 371918192 ( 4.27%) 730.41
smtp 551072 ( 4.22%) 90410008 ( 1.04%) 164.06
ftp 55326 ( 0.42%) 4967134 ( 0.06%) 89.78
pop3 10117 ( 0.08%) 4612227 ( 0.05%) 455.89
imap 8025 ( 0.06%) 4085410 ( 0.05%) 509.09
telnet 637 ( 0.00%) 55891 ( 0.00%) 87.74
ssh 406325 ( 3.11%) 384463733 ( 4.41%) 946.20
dns 3744 ( 0.03%) 1881614 ( 0.02%) 502.57
bgp 187 ( 0.00%) 57024 ( 0.00%) 304.94
realaud 13 ( 0.00%) 1592 ( 0.00%) 122.46
rtsp 398003 ( 3.05%) 381878542 ( 4.38%) 959.49
icecast 218 ( 0.00%) 39095 ( 0.00%) 179.33
other 2421978 ( 18.53%) 1421730289 ( 16.31%) 587.01
udp 1646785 ( 12.60%) 364785246 ( 4.18%) 221.51
dns 822493 ( 6.29%) 123007527 ( 1.41%) 149.55
realaud 8710 ( 0.07%) 5453764 ( 0.06%) 626.15
halflif 15 ( 0.00%) 2146 ( 0.00%) 143.07
starcra 33 ( 0.00%) 6268 ( 0.00%) 189.94
everque 21 ( 0.00%) 4599 ( 0.00%) 219.00
unreal 21 ( 0.00%) 3546 ( 0.00%) 168.86
quake 16 ( 0.00%) 1784 ( 0.00%) 111.50
cuseeme 4 ( 0.00%) 537 ( 0.00%) 134.25
other 815404 ( 6.24%) 236289500 ( 2.71%) 289.78
icmp 364648 ( 2.79%) 34422599 ( 0.39%) 94.40
ipip 342 ( 0.00%) 40560 ( 0.00%) 118.60
ip6 1114 ( 0.01%) 156189 ( 0.00%) 140.21
other 166624 ( 1.27%) 44334750 ( 0.51%) 266.08
frag 1689 ( 0.01%) 1439208 ( 0.02%) 852.11
ip6 29926 ( 0.23%) 9510417 ( 0.11%) 317.80
tcp6 4697 ( 0.04%) 1219801 ( 0.01%) 259.70
http(s) 512 ( 0.00%) 613385 ( 0.01%) 1198.02
http(c) 1728 ( 0.01%) 169713 ( 0.00%) 98.21
smtp 403 ( 0.00%) 199454 ( 0.00%) 494.92
bgp 84 ( 0.00%) 11080 ( 0.00%) 131.90
other 1970 ( 0.02%) 226169 ( 0.00%) 114.81
udp6 16637 ( 0.13%) 3155789 ( 0.04%) 189.68
dns 15361 ( 0.12%) 2848859 ( 0.03%) 185.46
other 1276 ( 0.01%) 306930 ( 0.00%) 240.54
icmp6 5164 ( 0.04%) 707268 ( 0.01%) 136.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3398 ( 0.03%) 4423479 ( 0.05%) 1301.79
tcpdump file: 200803191430.dump.gz (324.54 MB)