Traffic Trace Info
DumpFile: -
Id: 200803191515
StartTime: Wed Mar 19 15:15:00 2008
EndTime: Wed Mar 19 15:30:00 2008
TotalTime: 900.13 seconds
TotalCapSize: 769.00MB CapLen: 96 bytes
# of packets: 14207838 (9360.83MB)
AvgRate: 87.23Mbps stddev:20.88M
IP flow (unique src/dst pair) Information
# of flows: 681369 (avg. 20.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.3% 2.1% 2.0% 2.0% 1.7% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 405242
Top 10 bandwidth usage (bytes/total in %):
5.8% 5.4% 5.2% 4.8% 4.0% 4.0% 3.5% 3.5% 3.0% 2.6%
# of IPv6 addresses: 1681
Top 10 bandwidth usage (bytes/total in %):
44.2% 40.6% 12.9% 12.9% 7.0% 5.8% 5.2% 2.8% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191515.pktlen.png)
detailed numbers
[ 32- 63]: 2885522
[ 64- 127]: 3739331
[ 128- 255]: 733420
[ 256- 511]: 611221
[ 512- 1023]: 375413
[ 1024- 2047]: 5862931
Protocol Breakdown
![[protocol breakdown chart]](200803191515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14207838 (100.00%) 9815536505 (100.00%) 690.85
ip 14161392 ( 99.67%) 9804269534 ( 99.89%) 692.32
tcp 11323128 ( 79.70%) 9015093307 ( 91.85%) 796.17
http(s) 4346811 ( 30.59%) 5803459130 ( 59.13%) 1335.11
http(c) 2768153 ( 19.48%) 500798255 ( 5.10%) 180.91
squid 500559 ( 3.52%) 370349314 ( 3.77%) 739.87
smtp 647514 ( 4.56%) 128081713 ( 1.30%) 197.81
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 49355 ( 0.35%) 20586106 ( 0.21%) 417.10
pop3 10937 ( 0.08%) 5404771 ( 0.06%) 494.17
imap 6180 ( 0.04%) 2223578 ( 0.02%) 359.80
telnet 448 ( 0.00%) 45782 ( 0.00%) 102.19
ssh 112896 ( 0.79%) 95537927 ( 0.97%) 846.25
dns 2056 ( 0.01%) 164191 ( 0.00%) 79.86
bgp 188 ( 0.00%) 56150 ( 0.00%) 298.67
rtsp 271829 ( 1.91%) 297421459 ( 3.03%) 1094.15
icecast 743 ( 0.01%) 207660 ( 0.00%) 279.49
hotline 6 ( 0.00%) 612 ( 0.00%) 102.00
other 2605451 ( 18.34%) 1790756539 ( 18.24%) 687.31
udp 2266037 ( 15.95%) 695790569 ( 7.09%) 307.05
dns 861042 ( 6.06%) 128207522 ( 1.31%) 148.90
realaud 8717 ( 0.06%) 5458103 ( 0.06%) 626.14
halflif 13 ( 0.00%) 2248 ( 0.00%) 172.92
starcra 40 ( 0.00%) 7260 ( 0.00%) 181.50
everque 29 ( 0.00%) 5754 ( 0.00%) 198.41
unreal 23 ( 0.00%) 6049 ( 0.00%) 263.00
quake 16 ( 0.00%) 1681 ( 0.00%) 105.06
cuseeme 1 ( 0.00%) 76 ( 0.00%) 76.00
other 1396130 ( 9.83%) 562089016 ( 5.73%) 402.61
icmp 367383 ( 2.59%) 36402783 ( 0.37%) 99.09
ipip 296 ( 0.00%) 36198 ( 0.00%) 122.29
ip6 996 ( 0.01%) 133186 ( 0.00%) 133.72
other 203552 ( 1.43%) 56813491 ( 0.58%) 279.11
frag 1115 ( 0.01%) 931792 ( 0.01%) 835.69
ip6 46446 ( 0.33%) 11266971 ( 0.11%) 242.58
tcp6 20266 ( 0.14%) 2567878 ( 0.03%) 126.71
http(s) 348 ( 0.00%) 421454 ( 0.00%) 1211.07
http(c) 1578 ( 0.01%) 151745 ( 0.00%) 96.16
smtp 334 ( 0.00%) 101652 ( 0.00%) 304.35
ssh 14215 ( 0.10%) 1453834 ( 0.01%) 102.27
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 83 ( 0.00%) 10289 ( 0.00%) 123.96
other 3701 ( 0.03%) 428269 ( 0.00%) 115.72
udp6 17607 ( 0.12%) 3421503 ( 0.03%) 194.33
dns 16344 ( 0.12%) 3104677 ( 0.03%) 189.96
other 1263 ( 0.01%) 316826 ( 0.00%) 250.85
icmp6 5046 ( 0.04%) 703513 ( 0.01%) 139.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3496 ( 0.02%) 4569861 ( 0.05%) 1307.17
tcpdump file: 200803191515.dump.gz (348.58 MB)