Traffic Trace Info
DumpFile: -
Id: 200803200015
StartTime: Thu Mar 20 00:15:01 2008
EndTime: Thu Mar 20 00:30:00 2008
TotalTime: 899.63 seconds
TotalCapSize: 669.35MB CapLen: 96 bytes
# of packets: 12327149 (7313.57MB)
AvgRate: 68.22Mbps stddev:9.46M
IP flow (unique src/dst pair) Information
# of flows: 674644 (avg. 18.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.9% 1.8% 1.7% 1.7% 1.6% 1.5% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 356730
Top 10 bandwidth usage (bytes/total in %):
12.7% 11.2% 7.7% 5.7% 5.1% 4.0% 4.0% 3.8% 3.3% 2.1%
# of IPv6 addresses: 1705
Top 10 bandwidth usage (bytes/total in %):
51.8% 48.2% 8.4% 7.0% 3.9% 3.9% 3.1% 2.9% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200015.pktlen.png)
detailed numbers
[ 32- 63]: 2623426
[ 64- 127]: 3488010
[ 128- 255]: 838356
[ 256- 511]: 485634
[ 512- 1023]: 334321
[ 1024- 2047]: 4557402
Protocol Breakdown
![[protocol breakdown chart]](200803200015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12327149 (100.00%) 7668835852 (100.00%) 622.11
ip 12297768 ( 99.76%) 7659940075 ( 99.88%) 622.87
tcp 9381082 ( 76.10%) 6987026507 ( 91.11%) 744.80
http(s) 3345135 ( 27.14%) 4639368297 ( 60.50%) 1386.90
http(c) 1869324 ( 15.16%) 180851559 ( 2.36%) 96.75
squid 616354 ( 5.00%) 367921660 ( 4.80%) 596.93
smtp 769049 ( 6.24%) 161221405 ( 2.10%) 209.64
ftp 22658 ( 0.18%) 2419405 ( 0.03%) 106.78
pop3 6193 ( 0.05%) 3768474 ( 0.05%) 608.51
imap 31239 ( 0.25%) 8189912 ( 0.11%) 262.17
telnet 5951 ( 0.05%) 4210129 ( 0.05%) 707.47
ssh 801787 ( 6.50%) 705612499 ( 9.20%) 880.05
dns 8879 ( 0.07%) 10655583 ( 0.14%) 1200.09
bgp 209 ( 0.00%) 67911 ( 0.00%) 324.93
napster 20 ( 0.00%) 1698 ( 0.00%) 84.90
realaud 17 ( 0.00%) 2657 ( 0.00%) 156.29
rtsp 102 ( 0.00%) 28662 ( 0.00%) 281.00
icecast 17164 ( 0.14%) 18602815 ( 0.24%) 1083.83
other 1886999 ( 15.31%) 884103721 ( 11.53%) 468.52
udp 2342852 ( 19.01%) 623040729 ( 8.12%) 265.93
dns 1222860 ( 9.92%) 177316289 ( 2.31%) 145.00
realaud 8705 ( 0.07%) 5453766 ( 0.07%) 626.51
halflif 30 ( 0.00%) 3503 ( 0.00%) 116.77
starcra 63 ( 0.00%) 12100 ( 0.00%) 192.06
everque 48 ( 0.00%) 5908 ( 0.00%) 123.08
unreal 117 ( 0.00%) 8559 ( 0.00%) 73.15
quake 5 ( 0.00%) 795 ( 0.00%) 159.00
cuseeme 3 ( 0.00%) 226 ( 0.00%) 75.33
other 1110999 ( 9.01%) 440230905 ( 5.74%) 396.25
icmp 566378 ( 4.59%) 48806884 ( 0.64%) 86.17
ipip 279 ( 0.00%) 33522 ( 0.00%) 120.15
ipsec 15 ( 0.00%) 1450 ( 0.00%) 96.67
ip6 1056 ( 0.01%) 145189 ( 0.00%) 137.49
other 6106 ( 0.05%) 885794 ( 0.01%) 145.07
frag 1362 ( 0.01%) 1135448 ( 0.01%) 833.66
ip6 29381 ( 0.24%) 8895777 ( 0.12%) 302.77
tcp6 3703 ( 0.03%) 552273 ( 0.01%) 149.14
http(c) 705 ( 0.01%) 70761 ( 0.00%) 100.37
smtp 581 ( 0.00%) 211287 ( 0.00%) 363.66
bgp 72 ( 0.00%) 7836 ( 0.00%) 108.83
other 2345 ( 0.02%) 262389 ( 0.00%) 111.89
udp6 17349 ( 0.14%) 3343584 ( 0.04%) 192.72
dns 15956 ( 0.13%) 3005906 ( 0.04%) 188.39
other 1393 ( 0.01%) 337678 ( 0.00%) 242.41
icmp6 5054 ( 0.04%) 783418 ( 0.01%) 155.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3245 ( 0.03%) 4212422 ( 0.05%) 1298.13
tcpdump file: 200803200015.dump.gz (314.21 MB)