Traffic Trace Info
DumpFile: -
Id: 200803191730
StartTime: Wed Mar 19 17:30:00 2008
EndTime: Wed Mar 19 17:45:01 2008
TotalTime: 900.37 seconds
TotalCapSize: 865.35MB CapLen: 96 bytes
# of packets: 16018725 (9951.80MB)
AvgRate: 92.72Mbps stddev:24.36M
IP flow (unique src/dst pair) Information
# of flows: 712641 (avg. 22.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.5% 2.4% 2.4% 1.7% 1.6% 1.6% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 385916
Top 10 bandwidth usage (bytes/total in %):
8.4% 7.6% 6.9% 5.9% 5.6% 4.0% 3.5% 3.1% 2.6% 2.5%
# of IPv6 addresses: 1734
Top 10 bandwidth usage (bytes/total in %):
33.3% 30.4% 21.4% 21.4% 7.9% 7.8% 6.5% 5.3% 4.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191730.pktlen.png)
detailed numbers
[ 32- 63]: 3321577
[ 64- 127]: 4588789
[ 128- 255]: 888669
[ 256- 511]: 606038
[ 512- 1023]: 336930
[ 1024- 2047]: 6276722
Protocol Breakdown
![[protocol breakdown chart]](200803191730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16018725 (100.00%) 10435217434 (100.00%) 651.44
ip 15976808 ( 99.74%) 10420303309 ( 99.86%) 652.21
tcp 12154546 ( 75.88%) 9244560729 ( 88.59%) 760.58
http(s) 4371238 ( 27.29%) 5763556847 ( 55.23%) 1318.52
http(c) 2917813 ( 18.22%) 572985052 ( 5.49%) 196.37
squid 767686 ( 4.79%) 412575197 ( 3.95%) 537.43
smtp 698545 ( 4.36%) 116690957 ( 1.12%) 167.05
ftp 47120 ( 0.29%) 20127211 ( 0.19%) 427.15
pop3 14426 ( 0.09%) 7783235 ( 0.07%) 539.53
imap 6250 ( 0.04%) 1593323 ( 0.02%) 254.93
telnet 48 ( 0.00%) 3327 ( 0.00%) 69.31
ssh 439248 ( 2.74%) 424523194 ( 4.07%) 966.48
dns 3986 ( 0.02%) 1903086 ( 0.02%) 477.44
bgp 204 ( 0.00%) 55784 ( 0.00%) 273.45
napster 14 ( 0.00%) 3087 ( 0.00%) 220.50
rtsp 300366 ( 1.88%) 351021268 ( 3.36%) 1168.65
icecast 660 ( 0.00%) 74079 ( 0.00%) 112.24
hotline 6 ( 0.00%) 1386 ( 0.00%) 231.00
other 2586934 ( 16.15%) 1571663576 ( 15.06%) 607.54
udp 3045715 ( 19.01%) 1084274611 ( 10.39%) 356.00
dns 1146893 ( 7.16%) 167019227 ( 1.60%) 145.63
realaud 13484 ( 0.08%) 8067135 ( 0.08%) 598.27
halflif 17 ( 0.00%) 2213 ( 0.00%) 130.18
starcra 27 ( 0.00%) 5184 ( 0.00%) 192.00
everque 37 ( 0.00%) 5647 ( 0.00%) 152.62
unreal 22 ( 0.00%) 6581 ( 0.00%) 299.14
quake 5 ( 0.00%) 517 ( 0.00%) 103.40
cuseeme 2 ( 0.00%) 194 ( 0.00%) 97.00
other 1885206 ( 11.77%) 909157885 ( 8.71%) 482.26
icmp 591188 ( 3.69%) 50905329 ( 0.49%) 86.11
ipip 367 ( 0.00%) 44423 ( 0.00%) 121.04
ip6 1094 ( 0.01%) 151144 ( 0.00%) 138.16
other 183898 ( 1.15%) 40367073 ( 0.39%) 219.51
frag 2711 ( 0.02%) 2078917 ( 0.02%) 766.85
ip6 41917 ( 0.26%) 14914125 ( 0.14%) 355.80
tcp6 13715 ( 0.09%) 5769559 ( 0.06%) 420.68
http(s) 2994 ( 0.02%) 3801760 ( 0.04%) 1269.79
http(c) 1582 ( 0.01%) 153630 ( 0.00%) 97.11
smtp 853 ( 0.01%) 357142 ( 0.00%) 418.69
ssh 5648 ( 0.04%) 1161504 ( 0.01%) 205.65
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 76 ( 0.00%) 8771 ( 0.00%) 115.41
other 2558 ( 0.02%) 286295 ( 0.00%) 111.92
udp6 19532 ( 0.12%) 3900213 ( 0.04%) 199.68
dns 18236 ( 0.11%) 3582415 ( 0.03%) 196.45
other 1296 ( 0.01%) 317798 ( 0.00%) 245.21
icmp6 5168 ( 0.03%) 704609 ( 0.01%) 136.34
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3471 ( 0.02%) 4535528 ( 0.04%) 1306.69
tcpdump file: 200803191730.dump.gz (399.32 MB)