Traffic Trace Info
DumpFile: -
Id: 200803191600
StartTime: Wed Mar 19 16:00:00 2008
EndTime: Wed Mar 19 16:15:00 2008
TotalTime: 900.30 seconds
TotalCapSize: 811.63MB CapLen: 96 bytes
# of packets: 14982547 (9263.27MB)
AvgRate: 86.33Mbps stddev:18.02M
IP flow (unique src/dst pair) Information
# of flows: 663054 (avg. 22.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.6% 2.6% 2.2% 1.8% 1.7% 1.5% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 361783
Top 10 bandwidth usage (bytes/total in %):
10.3% 7.5% 6.4% 6.1% 4.7% 3.8% 2.7% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1716
Top 10 bandwidth usage (bytes/total in %):
53.5% 49.1% 7.2% 5.3% 4.9% 3.6% 2.8% 2.4% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191600.pktlen.png)
detailed numbers
[ 32- 63]: 3318026
[ 64- 127]: 4129676
[ 128- 255]: 808407
[ 256- 511]: 547208
[ 512- 1023]: 393264
[ 1024- 2047]: 5785966
Protocol Breakdown
![[protocol breakdown chart]](200803191600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14982547 (100.00%) 9713242496 (100.00%) 648.30
ip 14952016 ( 99.80%) 9703969686 ( 99.90%) 649.01
tcp 11777851 ( 78.61%) 8850787415 ( 91.12%) 751.48
http(s) 3958252 ( 26.42%) 5155358059 ( 53.08%) 1302.43
http(c) 2736899 ( 18.27%) 531768346 ( 5.47%) 194.30
squid 772316 ( 5.15%) 514912167 ( 5.30%) 666.71
smtp 660521 ( 4.41%) 128078744 ( 1.32%) 193.91
ftp 42125 ( 0.28%) 19163168 ( 0.20%) 454.91
pop3 7809 ( 0.05%) 3458715 ( 0.04%) 442.91
imap 4594 ( 0.03%) 1480245 ( 0.02%) 322.21
telnet 822 ( 0.01%) 80509 ( 0.00%) 97.94
ssh 198580 ( 1.33%) 183666860 ( 1.89%) 924.90
dns 2161 ( 0.01%) 182550 ( 0.00%) 84.47
bgp 240 ( 0.00%) 82783 ( 0.00%) 344.93
napster 780 ( 0.01%) 394395 ( 0.00%) 505.63
realaud 20 ( 0.00%) 4473 ( 0.00%) 223.65
rtsp 444564 ( 2.97%) 435828918 ( 4.49%) 980.35
icecast 22348 ( 0.15%) 15911092 ( 0.16%) 711.97
hotline 9 ( 0.00%) 856 ( 0.00%) 95.11
other 2925807 ( 19.53%) 1860415295 ( 19.15%) 635.86
udp 2480427 ( 16.56%) 756031001 ( 7.78%) 304.80
dns 1064716 ( 7.11%) 156827878 ( 1.61%) 147.30
realaud 8719 ( 0.06%) 5456235 ( 0.06%) 625.79
halflif 17 ( 0.00%) 2583 ( 0.00%) 151.94
starcra 16 ( 0.00%) 2701 ( 0.00%) 168.81
everque 19 ( 0.00%) 2306 ( 0.00%) 121.37
unreal 13 ( 0.00%) 1835 ( 0.00%) 141.15
quake 7 ( 0.00%) 572 ( 0.00%) 81.71
cuseeme 7 ( 0.00%) 1046 ( 0.00%) 149.43
other 1406888 ( 9.39%) 593732546 ( 6.11%) 422.02
icmp 533207 ( 3.56%) 46229842 ( 0.48%) 86.70
ipip 379 ( 0.00%) 46368 ( 0.00%) 122.34
ipsec 56 ( 0.00%) 5432 ( 0.00%) 97.00
ip6 1121 ( 0.01%) 157197 ( 0.00%) 140.23
other 158975 ( 1.06%) 50712431 ( 0.52%) 319.00
frag 2582 ( 0.02%) 2048943 ( 0.02%) 793.55
ip6 30531 ( 0.20%) 9272810 ( 0.10%) 303.72
tcp6 4477 ( 0.03%) 621436 ( 0.01%) 138.81
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1686 ( 0.01%) 160397 ( 0.00%) 95.13
smtp 533 ( 0.00%) 194828 ( 0.00%) 365.53
ssh 44 ( 0.00%) 7812 ( 0.00%) 177.55
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 78 ( 0.00%) 8928 ( 0.00%) 114.46
other 2124 ( 0.01%) 248224 ( 0.00%) 116.87
udp6 17143 ( 0.11%) 3327112 ( 0.03%) 194.08
dns 15905 ( 0.11%) 3063089 ( 0.03%) 192.59
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1236 ( 0.01%) 263768 ( 0.00%) 213.40
icmp6 5398 ( 0.04%) 765056 ( 0.01%) 141.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3483 ( 0.02%) 4555126 ( 0.05%) 1307.82
tcpdump file: 200803191600.dump.gz (371.63 MB)