Traffic Trace Info
DumpFile: -
Id: 200803192030
StartTime: Wed Mar 19 20:30:01 2008
EndTime: Wed Mar 19 20:45:00 2008
TotalTime: 899.88 seconds
TotalCapSize: 772.50MB CapLen: 96 bytes
# of packets: 13994504 (7801.09MB)
AvgRate: 72.70Mbps stddev:16.12M
IP flow (unique src/dst pair) Information
# of flows: 891143 (avg. 15.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 5.0% 1.6% 1.5% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 528747
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.7% 8.6% 6.3% 5.7% 5.2% 4.6% 3.5% 2.0% 1.9%
# of IPv6 addresses: 1663
Top 10 bandwidth usage (bytes/total in %):
52.9% 48.7% 7.6% 6.4% 4.9% 3.2% 3.2% 3.0% 2.8% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803192030.pktlen.png)
detailed numbers
[ 32- 63]: 3030308
[ 64- 127]: 4579365
[ 128- 255]: 825185
[ 256- 511]: 407428
[ 512- 1023]: 309117
[ 1024- 2047]: 4843101
Protocol Breakdown
![[protocol breakdown chart]](200803192030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13994504 (100.00%) 8180033409 (100.00%) 584.52
ip 13963783 ( 99.78%) 8170637406 ( 99.89%) 585.13
tcp 11159145 ( 79.74%) 7598908980 ( 92.90%) 680.96
http(s) 3801718 ( 27.17%) 5114869651 ( 62.53%) 1345.41
http(c) 3031469 ( 21.66%) 348557799 ( 4.26%) 114.98
squid 579157 ( 4.14%) 349088717 ( 4.27%) 602.75
smtp 862778 ( 6.17%) 141993745 ( 1.74%) 164.58
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 24051 ( 0.17%) 2486703 ( 0.03%) 103.39
pop3 6874 ( 0.05%) 2852260 ( 0.03%) 414.93
imap 7275 ( 0.05%) 2298384 ( 0.03%) 315.93
telnet 840 ( 0.01%) 53727 ( 0.00%) 63.96
ssh 682448 ( 4.88%) 464423603 ( 5.68%) 680.53
dns 4236 ( 0.03%) 1907189 ( 0.02%) 450.23
bgp 203 ( 0.00%) 64453 ( 0.00%) 317.50
napster 912 ( 0.01%) 100784 ( 0.00%) 110.51
realaud 47 ( 0.00%) 6228 ( 0.00%) 132.51
rtsp 51851 ( 0.37%) 62318550 ( 0.76%) 1201.88
icecast 7663 ( 0.05%) 4718735 ( 0.06%) 615.78
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2097616 ( 14.99%) 1103167012 ( 13.49%) 525.91
udp 1992890 ( 14.24%) 491764623 ( 6.01%) 246.76
dns 1158335 ( 8.28%) 168611119 ( 2.06%) 145.56
realaud 10478 ( 0.07%) 5559752 ( 0.07%) 530.61
halflif 22 ( 0.00%) 3047 ( 0.00%) 138.50
starcra 24 ( 0.00%) 3997 ( 0.00%) 166.54
everque 43 ( 0.00%) 7444 ( 0.00%) 173.12
unreal 274 ( 0.00%) 18112 ( 0.00%) 66.10
quake 10 ( 0.00%) 1148 ( 0.00%) 114.80
cuseeme 6 ( 0.00%) 688 ( 0.00%) 114.67
other 823661 ( 5.89%) 317548401 ( 3.88%) 385.53
icmp 721569 ( 5.16%) 60851001 ( 0.74%) 84.33
ipip 351 ( 0.00%) 43624 ( 0.00%) 124.28
ipsec 1427 ( 0.01%) 1382282 ( 0.02%) 968.66
ip6 1032 ( 0.01%) 142775 ( 0.00%) 138.35
other 87369 ( 0.62%) 17544121 ( 0.21%) 200.80
frag 2830 ( 0.02%) 2184180 ( 0.03%) 771.80
ip6 30721 ( 0.22%) 9396003 ( 0.11%) 305.85
tcp6 4234 ( 0.03%) 735600 ( 0.01%) 173.74
http(s) 181 ( 0.00%) 211978 ( 0.00%) 1171.15
http(c) 1536 ( 0.01%) 151996 ( 0.00%) 98.96
smtp 376 ( 0.00%) 124521 ( 0.00%) 331.17
ftp 4 ( 0.00%) 296 ( 0.00%) 74.00
dns 13 ( 0.00%) 3228 ( 0.00%) 248.31
bgp 87 ( 0.00%) 10571 ( 0.00%) 121.51
other 2037 ( 0.01%) 233010 ( 0.00%) 114.39
udp6 17937 ( 0.13%) 3398646 ( 0.04%) 189.48
dns 16610 ( 0.12%) 3082492 ( 0.04%) 185.58
other 1327 ( 0.01%) 316154 ( 0.00%) 238.25
icmp6 5028 ( 0.04%) 693544 ( 0.01%) 137.94
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3491 ( 0.02%) 4563997 ( 0.06%) 1307.36
tcpdump file: 200803192030.dump.gz (355.68 MB)