Traffic Trace Info
DumpFile: -
Id: 200803191545
StartTime: Wed Mar 19 15:45:00 2008
EndTime: Wed Mar 19 16:00:00 2008
TotalTime: 900.11 seconds
TotalCapSize: 787.97MB CapLen: 96 bytes
# of packets: 14516317 (8815.33MB)
AvgRate: 82.17Mbps stddev:13.41M
IP flow (unique src/dst pair) Information
# of flows: 655434 (avg. 22.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.6% 2.6% 2.0% 1.9% 1.8% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 359163
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.0% 6.8% 5.7% 5.6% 5.5% 3.8% 3.1% 3.0% 2.7%
# of IPv6 addresses: 1550
Top 10 bandwidth usage (bytes/total in %):
45.3% 45.2% 26.0% 23.9% 6.1% 5.5% 3.6% 3.3% 2.9% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191545.pktlen.png)
detailed numbers
[ 32- 63]: 3129006
[ 64- 127]: 4080020
[ 128- 255]: 816907
[ 256- 511]: 548380
[ 512- 1023]: 487148
[ 1024- 2047]: 5454856
Protocol Breakdown
![[protocol breakdown chart]](200803191545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14516317 (100.00%) 9243538229 (100.00%) 636.77
ip 14385879 ( 99.10%) 9224486283 ( 99.79%) 641.22
tcp 11319611 ( 77.98%) 8313543240 ( 89.94%) 734.44
http(s) 3696569 ( 25.46%) 4686848789 ( 50.70%) 1267.89
http(c) 2706744 ( 18.65%) 532732974 ( 5.76%) 196.82
squid 544585 ( 3.75%) 313109821 ( 3.39%) 574.95
smtp 662454 ( 4.56%) 133166105 ( 1.44%) 201.02
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 94523 ( 0.65%) 52672006 ( 0.57%) 557.24
pop3 9696 ( 0.07%) 4695469 ( 0.05%) 484.27
imap 4958 ( 0.03%) 1900032 ( 0.02%) 383.23
telnet 1279 ( 0.01%) 112681 ( 0.00%) 88.10
ssh 373898 ( 2.58%) 351998871 ( 3.81%) 941.43
dns 1586 ( 0.01%) 122349 ( 0.00%) 77.14
bgp 257 ( 0.00%) 107712 ( 0.00%) 419.11
napster 24 ( 0.00%) 5581 ( 0.00%) 232.54
rtsp 414877 ( 2.86%) 420326114 ( 4.55%) 1013.13
icecast 13933 ( 0.10%) 9778049 ( 0.11%) 701.79
hotline 22 ( 0.00%) 3233 ( 0.00%) 146.95
other 2794200 ( 19.25%) 1805963094 ( 19.54%) 646.33
udp 2540224 ( 17.50%) 824352414 ( 8.92%) 324.52
dns 937592 ( 6.46%) 140055132 ( 1.52%) 149.38
realaud 8575 ( 0.06%) 5322651 ( 0.06%) 620.72
halflif 24 ( 0.00%) 3899 ( 0.00%) 162.46
starcra 43 ( 0.00%) 8320 ( 0.00%) 193.49
everque 18 ( 0.00%) 2754 ( 0.00%) 153.00
unreal 38 ( 0.00%) 10959 ( 0.00%) 288.39
quake 13 ( 0.00%) 2361 ( 0.00%) 181.62
cuseeme 4 ( 0.00%) 305 ( 0.00%) 76.25
other 1593835 ( 10.98%) 678923906 ( 7.34%) 425.97
icmp 378501 ( 2.61%) 35603304 ( 0.39%) 94.06
ipip 290 ( 0.00%) 35680 ( 0.00%) 123.03
ipsec 69 ( 0.00%) 7750 ( 0.00%) 112.32
ip6 1068 ( 0.01%) 144860 ( 0.00%) 135.64
other 146116 ( 1.01%) 50799035 ( 0.55%) 347.66
frag 2381 ( 0.02%) 1899520 ( 0.02%) 797.78
ip6 130438 ( 0.90%) 19051946 ( 0.21%) 146.06
tcp6 104486 ( 0.72%) 10312554 ( 0.11%) 98.70
http(s) 62 ( 0.00%) 47550 ( 0.00%) 766.94
http(c) 1786 ( 0.01%) 174566 ( 0.00%) 97.74
smtp 419 ( 0.00%) 179032 ( 0.00%) 427.28
bgp 108 ( 0.00%) 19847 ( 0.00%) 183.77
other 102111 ( 0.70%) 9891559 ( 0.11%) 96.87
udp6 17401 ( 0.12%) 3491359 ( 0.04%) 200.64
dns 16260 ( 0.11%) 3245614 ( 0.04%) 199.61
everque 2 ( 0.00%) 253 ( 0.00%) 126.50
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1138 ( 0.01%) 245353 ( 0.00%) 215.60
icmp6 5044 ( 0.03%) 702772 ( 0.01%) 139.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3477 ( 0.02%) 4541181 ( 0.05%) 1306.06
tcpdump file: 200803191545.dump.gz (361.15 MB)