Traffic Trace Info
DumpFile: -
Id: 200803191615
StartTime: Wed Mar 19 16:15:00 2008
EndTime: Wed Mar 19 16:30:01 2008
TotalTime: 900.26 seconds
TotalCapSize: 842.26MB CapLen: 96 bytes
# of packets: 15576070 (9736.91MB)
AvgRate: 90.73Mbps stddev:23.90M
IP flow (unique src/dst pair) Information
# of flows: 696562 (avg. 22.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.5% 2.4% 2.4% 2.4% 1.8% 1.6% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 369329
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.4% 6.3% 5.8% 4.8% 3.2% 2.6% 2.6% 2.6% 2.6%
# of IPv6 addresses: 1917
Top 10 bandwidth usage (bytes/total in %):
47.6% 43.7% 10.6% 8.9% 6.3% 5.0% 3.5% 3.5% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191615.pktlen.png)
detailed numbers
[ 32- 63]: 3409034
[ 64- 127]: 4128500
[ 128- 255]: 1019968
[ 256- 511]: 560907
[ 512- 1023]: 379229
[ 1024- 2047]: 6078432
Protocol Breakdown
![[protocol breakdown chart]](200803191615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15576070 (100.00%) 10209888677 (100.00%) 655.49
ip 15541122 ( 99.78%) 10199741636 ( 99.90%) 656.31
tcp 12276161 ( 78.81%) 9539248101 ( 93.43%) 777.05
http(s) 4462758 ( 28.65%) 5891350736 ( 57.70%) 1320.11
http(c) 3085058 ( 19.81%) 643992255 ( 6.31%) 208.75
squid 709299 ( 4.55%) 461762283 ( 4.52%) 651.01
smtp 749899 ( 4.81%) 176351575 ( 1.73%) 235.17
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 43422 ( 0.28%) 20530237 ( 0.20%) 472.81
pop3 9665 ( 0.06%) 5540354 ( 0.05%) 573.24
imap 3951 ( 0.03%) 1237024 ( 0.01%) 313.09
telnet 471 ( 0.00%) 49940 ( 0.00%) 106.03
ssh 340530 ( 2.19%) 326750364 ( 3.20%) 959.53
dns 8671 ( 0.06%) 10403892 ( 0.10%) 1199.85
bgp 213 ( 0.00%) 65092 ( 0.00%) 305.60
realaud 17 ( 0.00%) 2327 ( 0.00%) 136.88
rtsp 336209 ( 2.16%) 321530271 ( 3.15%) 956.34
icecast 22708 ( 0.15%) 15959862 ( 0.16%) 702.83
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 2503285 ( 16.07%) 1663721585 ( 16.30%) 664.62
udp 2408083 ( 15.46%) 516090238 ( 5.05%) 214.32
dns 1297005 ( 8.33%) 181707203 ( 1.78%) 140.10
realaud 8717 ( 0.06%) 5457592 ( 0.05%) 626.09
halflif 18 ( 0.00%) 2866 ( 0.00%) 159.22
starcra 49 ( 0.00%) 9267 ( 0.00%) 189.12
everque 38 ( 0.00%) 7348 ( 0.00%) 193.37
unreal 37 ( 0.00%) 6569 ( 0.00%) 177.54
quake 21 ( 0.00%) 2227 ( 0.00%) 106.05
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 1102144 ( 7.08%) 328877643 ( 3.22%) 298.40
icmp 455602 ( 2.93%) 41736453 ( 0.41%) 91.61
ipip 289 ( 0.00%) 34340 ( 0.00%) 118.82
ipsec 124625 ( 0.80%) 53873236 ( 0.53%) 432.28
ip6 1056 ( 0.01%) 144599 ( 0.00%) 136.93
other 275306 ( 1.77%) 48614669 ( 0.48%) 176.58
frag 2484 ( 0.02%) 1960669 ( 0.02%) 789.32
ip6 34948 ( 0.22%) 10147041 ( 0.10%) 290.35
tcp6 4528 ( 0.03%) 711367 ( 0.01%) 157.10
http(s) 12 ( 0.00%) 14203 ( 0.00%) 1183.58
http(c) 1620 ( 0.01%) 154476 ( 0.00%) 95.36
smtp 668 ( 0.00%) 281772 ( 0.00%) 421.81
bgp 86 ( 0.00%) 10327 ( 0.00%) 120.08
other 2142 ( 0.01%) 250589 ( 0.00%) 116.99
udp6 21745 ( 0.14%) 4262608 ( 0.04%) 196.03
dns 20121 ( 0.13%) 3777388 ( 0.04%) 187.73
everque 1 ( 0.00%) 504 ( 0.00%) 504.00
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1622 ( 0.01%) 484579 ( 0.00%) 298.75
icmp6 5245 ( 0.03%) 741706 ( 0.01%) 141.41
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3399 ( 0.02%) 4427144 ( 0.04%) 1302.48
tcpdump file: 200803191615.dump.gz (383.56 MB)