Traffic Trace Info
DumpFile: -
Id: 200803191815
StartTime: Wed Mar 19 18:15:01 2008
EndTime: Wed Mar 19 18:30:01 2008
TotalTime: 900.27 seconds
TotalCapSize: 882.69MB CapLen: 96 bytes
# of packets: 16270302 (10144.78MB)
AvgRate: 94.53Mbps stddev:15.85M
IP flow (unique src/dst pair) Information
# of flows: 704021 (avg. 23.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.5% 2.4% 2.3% 2.3% 1.8% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 362785
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.4% 8.9% 7.5% 4.4% 4.0% 4.0% 2.8% 2.6% 2.6%
# of IPv6 addresses: 1578
Top 10 bandwidth usage (bytes/total in %):
49.8% 45.8% 7.2% 6.3% 6.1% 2.9% 2.7% 2.7% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191815.pktlen.png)
detailed numbers
[ 32- 63]: 3219749
[ 64- 127]: 4917729
[ 128- 255]: 943218
[ 256- 511]: 446209
[ 512- 1023]: 288014
[ 1024- 2047]: 6455383
Protocol Breakdown
![[protocol breakdown chart]](200803191815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16270302 (100.00%) 10637572874 (100.00%) 653.80
ip 16237229 ( 99.80%) 10627592342 ( 99.91%) 654.52
tcp 12184784 ( 74.89%) 9512425149 ( 89.42%) 780.68
http(s) 4660291 ( 28.64%) 6247770705 ( 58.73%) 1340.64
http(c) 3220007 ( 19.79%) 571333640 ( 5.37%) 177.43
squid 715334 ( 4.40%) 473013302 ( 4.45%) 661.25
smtp 746411 ( 4.59%) 154759977 ( 1.45%) 207.34
ftp 30200 ( 0.19%) 3022048 ( 0.03%) 100.07
pop3 19130 ( 0.12%) 12613938 ( 0.12%) 659.38
imap 4978 ( 0.03%) 1522894 ( 0.01%) 305.92
telnet 1031 ( 0.01%) 65647 ( 0.00%) 63.67
ssh 472585 ( 2.90%) 431119053 ( 4.05%) 912.26
dns 9499 ( 0.06%) 10810292 ( 0.10%) 1138.05
bgp 208 ( 0.00%) 65780 ( 0.00%) 316.25
napster 5 ( 0.00%) 1320 ( 0.00%) 264.00
realaud 40 ( 0.00%) 4953 ( 0.00%) 123.83
rtsp 257732 ( 1.58%) 322785664 ( 3.03%) 1252.41
icecast 4051 ( 0.02%) 452990 ( 0.00%) 111.82
other 2043282 ( 12.56%) 1283082946 ( 12.06%) 627.95
udp 3007121 ( 18.48%) 1005644370 ( 9.45%) 334.42
dns 1246932 ( 7.66%) 181993319 ( 1.71%) 145.95
realaud 13499 ( 0.08%) 8067347 ( 0.08%) 597.63
halflif 22 ( 0.00%) 4981 ( 0.00%) 226.41
starcra 57 ( 0.00%) 10328 ( 0.00%) 181.19
everque 17 ( 0.00%) 2371 ( 0.00%) 139.47
unreal 26 ( 0.00%) 3155 ( 0.00%) 121.35
quake 8 ( 0.00%) 731 ( 0.00%) 91.38
cuseeme 4 ( 0.00%) 321 ( 0.00%) 80.25
other 1746524 ( 10.73%) 815545763 ( 7.67%) 466.95
icmp 829822 ( 5.10%) 67856807 ( 0.64%) 81.77
ipip 292 ( 0.00%) 34660 ( 0.00%) 118.70
ip6 1041 ( 0.01%) 141365 ( 0.00%) 135.80
other 214169 ( 1.32%) 41489991 ( 0.39%) 193.73
frag 2595 ( 0.02%) 2065001 ( 0.02%) 795.76
ip6 33073 ( 0.20%) 9980532 ( 0.09%) 301.77
tcp6 4533 ( 0.03%) 790390 ( 0.01%) 174.36
http(s) 202 ( 0.00%) 201298 ( 0.00%) 996.52
http(c) 1543 ( 0.01%) 152398 ( 0.00%) 98.77
smtp 513 ( 0.00%) 165032 ( 0.00%) 321.70
ssh 83 ( 0.00%) 25258 ( 0.00%) 304.31
bgp 101 ( 0.00%) 15296 ( 0.00%) 151.45
other 2091 ( 0.01%) 231108 ( 0.00%) 110.53
udp6 19962 ( 0.12%) 3935271 ( 0.04%) 197.14
dns 18698 ( 0.11%) 3657664 ( 0.03%) 195.62
other 1264 ( 0.01%) 277607 ( 0.00%) 219.63
icmp6 5053 ( 0.03%) 682211 ( 0.01%) 135.01
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3494 ( 0.02%) 4568444 ( 0.04%) 1307.51
tcpdump file: 200803191815.dump.gz (405.51 MB)