Traffic Trace Info
DumpFile: -
Id: 200803192115
StartTime: Wed Mar 19 21:15:00 2008
EndTime: Wed Mar 19 21:30:01 2008
TotalTime: 900.71 seconds
TotalCapSize: 741.13MB CapLen: 96 bytes
# of packets: 13886337 (8368.58MB)
AvgRate: 77.94Mbps stddev:12.09M
IP flow (unique src/dst pair) Information
# of flows: 853117 (avg. 16.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.7% 2.4% 1.8% 1.6% 1.4% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 486337
Top 10 bandwidth usage (bytes/total in %):
9.7% 9.6% 8.8% 6.4% 6.0% 4.8% 4.7% 2.9% 2.8% 2.6%
# of IPv6 addresses: 1674
Top 10 bandwidth usage (bytes/total in %):
52.1% 47.9% 7.8% 6.7% 5.0% 4.9% 2.9% 2.9% 2.7% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803192115.pktlen.png)
detailed numbers
[ 32- 63]: 3016717
[ 64- 127]: 3877311
[ 128- 255]: 914844
[ 256- 511]: 532511
[ 512- 1023]: 300560
[ 1024- 2047]: 5244394
Protocol Breakdown
![[protocol breakdown chart]](200803192115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13886337 (100.00%) 8775087004 (100.00%) 631.92
ip 13855244 ( 99.78%) 8765510912 ( 99.89%) 632.65
tcp 10034807 ( 72.26%) 7580993329 ( 86.39%) 755.47
http(s) 3766057 ( 27.12%) 5120347310 ( 58.35%) 1359.60
http(c) 2193624 ( 15.80%) 252549229 ( 2.88%) 115.13
squid 539216 ( 3.88%) 343548523 ( 3.92%) 637.13
smtp 728436 ( 5.25%) 104138672 ( 1.19%) 142.96
ftp 31063 ( 0.22%) 7299746 ( 0.08%) 235.00
pop3 7969 ( 0.06%) 3838893 ( 0.04%) 481.73
imap 3088 ( 0.02%) 1558731 ( 0.02%) 504.77
telnet 594 ( 0.00%) 39383 ( 0.00%) 66.30
ssh 445699 ( 3.21%) 422141211 ( 4.81%) 947.14
dns 2116 ( 0.02%) 159389 ( 0.00%) 75.33
bgp 209 ( 0.00%) 60046 ( 0.00%) 287.30
napster 1894 ( 0.01%) 180135 ( 0.00%) 95.11
realaud 27 ( 0.00%) 2048 ( 0.00%) 75.85
rtsp 2326 ( 0.02%) 180444 ( 0.00%) 77.58
icecast 9582 ( 0.07%) 6820372 ( 0.08%) 711.79
other 2302906 ( 16.58%) 1318129137 ( 15.02%) 572.38
udp 2971160 ( 21.40%) 1105367883 ( 12.60%) 372.03
dns 1131591 ( 8.15%) 166214484 ( 1.89%) 146.89
realaud 8699 ( 0.06%) 5454909 ( 0.06%) 627.07
halflif 15 ( 0.00%) 2129 ( 0.00%) 141.93
starcra 48 ( 0.00%) 8229 ( 0.00%) 171.44
everque 56 ( 0.00%) 12181 ( 0.00%) 217.52
unreal 60 ( 0.00%) 4597 ( 0.00%) 76.62
quake 5 ( 0.00%) 683 ( 0.00%) 136.60
cuseeme 3 ( 0.00%) 295 ( 0.00%) 98.33
other 1830333 ( 13.18%) 933622176 ( 10.64%) 510.08
icmp 781399 ( 5.63%) 65286843 ( 0.74%) 83.55
ipip 320 ( 0.00%) 37806 ( 0.00%) 118.14
ipsec 191 ( 0.00%) 58050 ( 0.00%) 303.93
ip6 1092 ( 0.01%) 152363 ( 0.00%) 139.53
other 66275 ( 0.48%) 13614638 ( 0.16%) 205.43
frag 5817 ( 0.04%) 4526062 ( 0.05%) 778.07
ip6 31093 ( 0.22%) 9576092 ( 0.11%) 307.98
tcp6 4369 ( 0.03%) 682147 ( 0.01%) 156.13
http(c) 1451 ( 0.01%) 139793 ( 0.00%) 96.34
smtp 721 ( 0.01%) 295847 ( 0.00%) 410.33
dns 15 ( 0.00%) 2420 ( 0.00%) 161.33
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2120 ( 0.02%) 237651 ( 0.00%) 112.10
udp6 18233 ( 0.13%) 3616849 ( 0.04%) 198.37
dns 16634 ( 0.12%) 3148706 ( 0.04%) 189.29
other 1599 ( 0.01%) 468143 ( 0.01%) 292.77
icmp6 4962 ( 0.04%) 696374 ( 0.01%) 140.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3499 ( 0.03%) 4576642 ( 0.05%) 1307.99
tcpdump file: 200803192115.dump.gz (350.40 MB)