Traffic Trace Info
DumpFile: -
Id: 200803191530
StartTime: Wed Mar 19 15:30:00 2008
EndTime: Wed Mar 19 15:45:00 2008
TotalTime: 899.77 seconds
TotalCapSize: 731.45MB CapLen: 96 bytes
# of packets: 13386252 (8551.95MB)
AvgRate: 79.74Mbps stddev:19.55M
IP flow (unique src/dst pair) Information
# of flows: 563900 (avg. 23.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.2% 2.7% 2.2% 2.1% 1.9% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 294461
Top 10 bandwidth usage (bytes/total in %):
12.1% 6.3% 6.1% 5.7% 5.6% 5.2% 5.1% 4.3% 4.3% 2.8%
# of IPv6 addresses: 2054
Top 10 bandwidth usage (bytes/total in %):
30.2% 27.8% 24.2% 24.2% 14.8% 14.1% 3.8% 3.4% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191530.pktlen.png)
detailed numbers
[ 32- 63]: 2629789
[ 64- 127]: 3761831
[ 128- 255]: 747129
[ 256- 511]: 528404
[ 512- 1023]: 367590
[ 1024- 2047]: 5351509
Protocol Breakdown
![[protocol breakdown chart]](200803191530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13386252 (100.00%) 8967369766 (100.00%) 669.89
ip 13348528 ( 99.72%) 8951301939 ( 99.82%) 670.58
tcp 10442976 ( 78.01%) 8145412181 ( 90.83%) 779.99
http(s) 3881761 ( 29.00%) 5188838038 ( 57.86%) 1336.72
http(c) 2245358 ( 16.77%) 336003753 ( 3.75%) 149.64
squid 646911 ( 4.83%) 446709464 ( 4.98%) 690.53
smtp 608337 ( 4.54%) 110770538 ( 1.24%) 182.09
ftp 58120 ( 0.43%) 25739787 ( 0.29%) 442.87
pop3 10924 ( 0.08%) 5126595 ( 0.06%) 469.30
imap 7107 ( 0.05%) 3483498 ( 0.04%) 490.15
telnet 1046 ( 0.01%) 82339 ( 0.00%) 78.72
ssh 407843 ( 3.05%) 391324636 ( 4.36%) 959.50
dns 4056 ( 0.03%) 1903146 ( 0.02%) 469.22
bgp 214 ( 0.00%) 67667 ( 0.00%) 316.20
realaud 16 ( 0.00%) 1865 ( 0.00%) 116.56
rtsp 122465 ( 0.91%) 98530149 ( 1.10%) 804.56
icecast 897 ( 0.01%) 321869 ( 0.00%) 358.83
hotline 4 ( 0.00%) 1260 ( 0.00%) 315.00
other 2447916 ( 18.29%) 1536507517 ( 17.13%) 627.68
udp 2317463 ( 17.31%) 710646426 ( 7.92%) 306.65
dns 941962 ( 7.04%) 137315158 ( 1.53%) 145.78
rip 3 ( 0.00%) 198 ( 0.00%) 66.00
realaud 8692 ( 0.06%) 5453053 ( 0.06%) 627.36
halflif 15 ( 0.00%) 2045 ( 0.00%) 136.33
starcra 23 ( 0.00%) 4286 ( 0.00%) 186.35
everque 30 ( 0.00%) 4779 ( 0.00%) 159.30
unreal 11 ( 0.00%) 2386 ( 0.00%) 216.91
quake 9 ( 0.00%) 1133 ( 0.00%) 125.89
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 1366698 ( 10.21%) 567861975 ( 6.33%) 415.50
icmp 447336 ( 3.34%) 40268506 ( 0.45%) 90.02
ipip 373 ( 0.00%) 44938 ( 0.00%) 120.48
ipsec 3713 ( 0.03%) 2628722 ( 0.03%) 707.98
ip6 1151 ( 0.01%) 162954 ( 0.00%) 141.58
other 135516 ( 1.01%) 52138212 ( 0.58%) 384.74
frag 1392 ( 0.01%) 1140451 ( 0.01%) 819.29
ip6 37724 ( 0.28%) 16067827 ( 0.18%) 425.93
tcp6 11576 ( 0.09%) 7302844 ( 0.08%) 630.86
http(s) 2801 ( 0.02%) 4086264 ( 0.05%) 1458.86
http(c) 1526 ( 0.01%) 149941 ( 0.00%) 98.26
smtp 590 ( 0.00%) 319613 ( 0.00%) 541.72
ssh 584 ( 0.00%) 55980 ( 0.00%) 95.86
bgp 89 ( 0.00%) 11177 ( 0.00%) 125.58
other 5986 ( 0.04%) 2679869 ( 0.03%) 447.69
udp6 17205 ( 0.13%) 3518038 ( 0.04%) 204.48
dns 15338 ( 0.11%) 3008247 ( 0.03%) 196.13
unreal 2 ( 0.00%) 618 ( 0.00%) 309.00
other 1865 ( 0.01%) 509173 ( 0.01%) 273.02
icmp6 5489 ( 0.04%) 779805 ( 0.01%) 142.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3424 ( 0.03%) 4463060 ( 0.05%) 1303.46
tcpdump file: 200803191530.dump.gz (334.90 MB)