Traffic Trace Info
DumpFile: -
Id: 200803192015
StartTime: Wed Mar 19 20:15:00 2008
EndTime: Wed Mar 19 20:30:01 2008
TotalTime: 900.57 seconds
TotalCapSize: 716.22MB CapLen: 96 bytes
# of packets: 13153232 (7785.96MB)
AvgRate: 72.53Mbps stddev:14.43M
IP flow (unique src/dst pair) Information
# of flows: 914576 (avg. 14.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.9% 3.1% 1.8% 1.6% 1.5% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 558047
Top 10 bandwidth usage (bytes/total in %):
10.2% 8.4% 6.3% 5.1% 5.1% 4.1% 4.0% 3.2% 3.2% 2.6%
# of IPv6 addresses: 1532
Top 10 bandwidth usage (bytes/total in %):
50.7% 46.4% 5.2% 4.8% 4.5% 4.5% 4.3% 3.8% 3.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803192015.pktlen.png)
detailed numbers
[ 32- 63]: 3130180
[ 64- 127]: 3586805
[ 128- 255]: 788571
[ 256- 511]: 431271
[ 512- 1023]: 345403
[ 1024- 2047]: 4871002
Protocol Breakdown
![[protocol breakdown chart]](200803192015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13153232 (100.00%) 8164169810 (100.00%) 620.70
ip 13124129 ( 99.78%) 8154607478 ( 99.88%) 621.34
tcp 10353411 ( 78.71%) 7660451027 ( 93.83%) 739.90
http(s) 3453225 ( 26.25%) 4602401239 ( 56.37%) 1332.78
http(c) 2083438 ( 15.84%) 369008758 ( 4.52%) 177.12
squid 556491 ( 4.23%) 328931830 ( 4.03%) 591.08
smtp 848708 ( 6.45%) 196351624 ( 2.41%) 231.35
ftp 17747 ( 0.13%) 1825097 ( 0.02%) 102.84
pop3 7789 ( 0.06%) 3017396 ( 0.04%) 387.39
imap 9341 ( 0.07%) 2220712 ( 0.03%) 237.74
telnet 718 ( 0.01%) 45985 ( 0.00%) 64.05
ssh 763047 ( 5.80%) 497115245 ( 6.09%) 651.49
dns 9410 ( 0.07%) 10604848 ( 0.13%) 1126.98
bgp 196 ( 0.00%) 55917 ( 0.00%) 285.29
napster 7 ( 0.00%) 432 ( 0.00%) 61.71
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 352319 ( 2.68%) 407871569 ( 5.00%) 1157.68
icecast 6626 ( 0.05%) 4547149 ( 0.06%) 686.26
hotline 23 ( 0.00%) 7847 ( 0.00%) 341.17
other 2244321 ( 17.06%) 1236445079 ( 15.14%) 550.92
udp 1927624 ( 14.66%) 412491805 ( 5.05%) 213.99
dns 1131703 ( 8.60%) 163061732 ( 2.00%) 144.09
realaud 10083 ( 0.08%) 5542923 ( 0.07%) 549.73
halflif 14 ( 0.00%) 1981 ( 0.00%) 141.50
starcra 38 ( 0.00%) 6919 ( 0.00%) 182.08
everque 1891 ( 0.01%) 307561 ( 0.00%) 162.64
unreal 200 ( 0.00%) 14440 ( 0.00%) 72.20
quake 14 ( 0.00%) 2132 ( 0.00%) 152.29
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 783640 ( 5.96%) 243540864 ( 2.98%) 310.78
icmp 762200 ( 5.79%) 63565133 ( 0.78%) 83.40
ipip 314 ( 0.00%) 36758 ( 0.00%) 117.06
ipsec 74 ( 0.00%) 11028 ( 0.00%) 149.03
ip6 1095 ( 0.01%) 150892 ( 0.00%) 137.80
other 79411 ( 0.60%) 17900835 ( 0.22%) 225.42
frag 2809 ( 0.02%) 2208629 ( 0.03%) 786.27
ip6 29103 ( 0.22%) 9562332 ( 0.12%) 328.57
tcp6 4868 ( 0.04%) 1370614 ( 0.02%) 281.56
http(s) 755 ( 0.01%) 888950 ( 0.01%) 1177.42
http(c) 1569 ( 0.01%) 152360 ( 0.00%) 97.11
smtp 188 ( 0.00%) 60112 ( 0.00%) 319.74
ftp 142 ( 0.00%) 15962 ( 0.00%) 112.41
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2153 ( 0.02%) 246907 ( 0.00%) 114.68
udp6 15875 ( 0.12%) 3060010 ( 0.04%) 192.76
dns 14618 ( 0.11%) 2788792 ( 0.03%) 190.78
everque 2 ( 0.00%) 253 ( 0.00%) 126.50
unreal 3 ( 0.00%) 456 ( 0.00%) 152.00
other 1252 ( 0.01%) 270509 ( 0.00%) 216.06
icmp6 4918 ( 0.04%) 687543 ( 0.01%) 139.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3412 ( 0.03%) 4440085 ( 0.05%) 1301.31
tcpdump file: 200803192015.dump.gz (337.61 MB)