Traffic Trace Info
DumpFile: -
Id: 200803200030
StartTime: Thu Mar 20 00:30:00 2008
EndTime: Thu Mar 20 00:45:00 2008
TotalTime: 899.58 seconds
TotalCapSize: 703.18MB CapLen: 96 bytes
# of packets: 12768278 (7873.24MB)
AvgRate: 73.42Mbps stddev:11.07M
IP flow (unique src/dst pair) Information
# of flows: 733782 (avg. 17.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.0% 3.8% 2.9% 2.2% 1.5% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 392393
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.2% 6.7% 6.1% 6.1% 5.3% 5.3% 5.1% 3.8% 3.8%
# of IPv6 addresses: 1869
Top 10 bandwidth usage (bytes/total in %):
51.1% 51.1% 22.6% 20.8% 7.3% 3.9% 3.5% 2.8% 1.7% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200030.pktlen.png)
detailed numbers
[ 32- 63]: 2607200
[ 64- 127]: 3616061
[ 128- 255]: 772268
[ 256- 511]: 455536
[ 512- 1023]: 389109
[ 1024- 2047]: 4928104
Protocol Breakdown
![[protocol breakdown chart]](200803200030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12768278 (100.00%) 8255686926 (100.00%) 646.58
ip 12582241 ( 98.54%) 8233721106 ( 99.73%) 654.39
tcp 9758659 ( 76.43%) 7677812422 ( 93.00%) 786.77
http(s) 3414345 ( 26.74%) 4772595378 ( 57.81%) 1397.81
http(c) 1783753 ( 13.97%) 167071146 ( 2.02%) 93.66
squid 698966 ( 5.47%) 422908743 ( 5.12%) 605.05
smtp 812842 ( 6.37%) 129473784 ( 1.57%) 159.29
ftp 18299 ( 0.14%) 2032927 ( 0.02%) 111.09
pop3 9151 ( 0.07%) 2494859 ( 0.03%) 272.63
imap 14526 ( 0.11%) 3518081 ( 0.04%) 242.19
telnet 121 ( 0.00%) 8055 ( 0.00%) 66.57
ssh 500326 ( 3.92%) 475178271 ( 5.76%) 949.74
dns 3681 ( 0.03%) 1869577 ( 0.02%) 507.90
bgp 255 ( 0.00%) 94353 ( 0.00%) 370.01
napster 79 ( 0.00%) 13930 ( 0.00%) 176.33
realaud 20 ( 0.00%) 3654 ( 0.00%) 182.70
rtsp 121 ( 0.00%) 24807 ( 0.00%) 205.02
icecast 10794 ( 0.08%) 10998034 ( 0.13%) 1018.90
hotline 11 ( 0.00%) 1930 ( 0.00%) 175.45
other 2491369 ( 19.51%) 1689524893 ( 20.46%) 678.15
udp 2162892 ( 16.94%) 498647920 ( 6.04%) 230.55
dns 1227653 ( 9.61%) 176969435 ( 2.14%) 144.15
realaud 8705 ( 0.07%) 5450895 ( 0.07%) 626.18
halflif 18 ( 0.00%) 2097 ( 0.00%) 116.50
starcra 29 ( 0.00%) 6035 ( 0.00%) 208.10
everque 38 ( 0.00%) 4451 ( 0.00%) 117.13
unreal 87 ( 0.00%) 7038 ( 0.00%) 80.90
quake 10 ( 0.00%) 740 ( 0.00%) 74.00
cuseeme 3 ( 0.00%) 464 ( 0.00%) 154.67
other 926330 ( 7.25%) 316199100 ( 3.83%) 341.35
icmp 653653 ( 5.12%) 56281057 ( 0.68%) 86.10
ipip 387 ( 0.00%) 47320 ( 0.00%) 122.27
ip6 1078 ( 0.01%) 148148 ( 0.00%) 137.43
other 5572 ( 0.04%) 784239 ( 0.01%) 140.75
frag 1196 ( 0.01%) 990145 ( 0.01%) 827.88
ip6 186037 ( 1.46%) 21965820 ( 0.27%) 118.07
tcp6 156898 ( 1.23%) 12661050 ( 0.15%) 80.70
http(s) 97 ( 0.00%) 116634 ( 0.00%) 1202.41
http(c) 1430 ( 0.01%) 148368 ( 0.00%) 103.75
smtp 1019 ( 0.01%) 394351 ( 0.00%) 387.00
ftp 186 ( 0.00%) 16375 ( 0.00%) 88.04
bgp 90 ( 0.00%) 10679 ( 0.00%) 118.66
other 154076 ( 1.21%) 11974643 ( 0.15%) 77.72
udp6 19988 ( 0.16%) 3930416 ( 0.05%) 196.64
dns 18166 ( 0.14%) 3355608 ( 0.04%) 184.72
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 1821 ( 0.01%) 574232 ( 0.01%) 315.34
icmp6 5631 ( 0.04%) 807620 ( 0.01%) 143.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3490 ( 0.03%) 4562654 ( 0.06%) 1307.35
tcpdump file: 200803200030.dump.gz (322.13 MB)