Traffic Trace Info
DumpFile: -
Id: 200803200000
StartTime: Thu Mar 20 00:00:01 2008
EndTime: Thu Mar 20 00:15:01 2008
TotalTime: 899.94 seconds
TotalCapSize: 717.94MB CapLen: 96 bytes
# of packets: 13277305 (7887.32MB)
AvgRate: 73.53Mbps stddev:12.17M
IP flow (unique src/dst pair) Information
# of flows: 750585 (avg. 17.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.7% 2.7% 2.7% 1.5% 1.4% 1.1% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 402641
Top 10 bandwidth usage (bytes/total in %):
13.1% 10.4% 7.3% 5.4% 5.3% 5.0% 3.7% 3.7% 3.0% 2.8%
# of IPv6 addresses: 1505
Top 10 bandwidth usage (bytes/total in %):
53.7% 49.8% 5.0% 4.9% 3.7% 3.6% 3.1% 2.6% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200000.pktlen.png)
detailed numbers
[ 32- 63]: 3150422
[ 64- 127]: 3467619
[ 128- 255]: 814154
[ 256- 511]: 532975
[ 512- 1023]: 400082
[ 1024- 2047]: 4912053
Protocol Breakdown
![[protocol breakdown chart]](200803200000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13277305 (100.00%) 8270454176 (100.00%) 622.90
ip 13247375 ( 99.77%) 8261246176 ( 99.89%) 623.61
tcp 10206678 ( 76.87%) 7558327487 ( 91.39%) 740.53
http(s) 3283131 ( 24.73%) 4478826259 ( 54.15%) 1364.19
http(c) 1908164 ( 14.37%) 174002050 ( 2.10%) 91.19
squid 827529 ( 6.23%) 620439779 ( 7.50%) 749.75
smtp 921174 ( 6.94%) 251697191 ( 3.04%) 273.24
ftp 46900 ( 0.35%) 4007697 ( 0.05%) 85.45
pop3 5627 ( 0.04%) 2890749 ( 0.03%) 513.73
imap 2961 ( 0.02%) 369547 ( 0.00%) 124.80
telnet 20 ( 0.00%) 1581 ( 0.00%) 79.05
ssh 723979 ( 5.45%) 647787458 ( 7.83%) 894.76
dns 1961 ( 0.01%) 159383 ( 0.00%) 81.28
bgp 195 ( 0.00%) 55506 ( 0.00%) 284.65
napster 27 ( 0.00%) 2273 ( 0.00%) 84.19
realaud 3 ( 0.00%) 573 ( 0.00%) 191.00
rtsp 158 ( 0.00%) 39362 ( 0.00%) 249.13
icecast 16498 ( 0.12%) 18085976 ( 0.22%) 1096.25
other 2468345 ( 18.59%) 1359961743 ( 16.44%) 550.96
udp 2421296 ( 18.24%) 649617755 ( 7.85%) 268.29
dns 1263871 ( 9.52%) 183715522 ( 2.22%) 145.36
realaud 8698 ( 0.07%) 5455017 ( 0.07%) 627.16
halflif 19 ( 0.00%) 2074 ( 0.00%) 109.16
starcra 24 ( 0.00%) 4621 ( 0.00%) 192.54
everque 57 ( 0.00%) 8366 ( 0.00%) 146.77
unreal 114 ( 0.00%) 11407 ( 0.00%) 100.06
quake 12 ( 0.00%) 3654 ( 0.00%) 304.50
cuseeme 4 ( 0.00%) 560 ( 0.00%) 140.00
other 1148484 ( 8.65%) 460411505 ( 5.57%) 400.89
icmp 612189 ( 4.61%) 52297343 ( 0.63%) 85.43
ipip 353 ( 0.00%) 41994 ( 0.00%) 118.96
ipsec 37 ( 0.00%) 3542 ( 0.00%) 95.73
ip6 1051 ( 0.01%) 145731 ( 0.00%) 138.66
other 5771 ( 0.04%) 812324 ( 0.01%) 140.76
frag 1599 ( 0.01%) 1307291 ( 0.02%) 817.57
ip6 29930 ( 0.23%) 9208000 ( 0.11%) 307.65
tcp6 4535 ( 0.03%) 727122 ( 0.01%) 160.34
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1096 ( 0.01%) 110371 ( 0.00%) 100.70
smtp 772 ( 0.01%) 322555 ( 0.00%) 417.82
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 83 ( 0.00%) 9419 ( 0.00%) 113.48
other 2572 ( 0.02%) 283530 ( 0.00%) 110.24
udp6 16677 ( 0.13%) 3187464 ( 0.04%) 191.13
dns 15517 ( 0.12%) 2951124 ( 0.04%) 190.19
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1159 ( 0.01%) 236224 ( 0.00%) 203.82
icmp6 5179 ( 0.04%) 705249 ( 0.01%) 136.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3509 ( 0.03%) 4584085 ( 0.06%) 1306.38
tcpdump file: 200803200000.dump.gz (333.45 MB)