Traffic Trace Info
DumpFile: -
Id: 200803200115
StartTime: Thu Mar 20 01:15:01 2008
EndTime: Thu Mar 20 01:30:00 2008
TotalTime: 899.62 seconds
TotalCapSize: 658.63MB CapLen: 96 bytes
# of packets: 12073633 (7383.29MB)
AvgRate: 68.86Mbps stddev:11.80M
IP flow (unique src/dst pair) Information
# of flows: 742574 (avg. 16.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.2% 2.1% 1.8% 1.5% 1.2% 1.2% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 413745
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.4% 6.5% 5.7% 5.3% 4.3% 4.3% 3.6% 2.9% 2.4%
# of IPv6 addresses: 1429
Top 10 bandwidth usage (bytes/total in %):
58.7% 58.4% 21.9% 20.4% 4.5% 3.6% 1.5% 1.3% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200115.pktlen.png)
detailed numbers
[ 32- 63]: 2635997
[ 64- 127]: 3254020
[ 128- 255]: 727906
[ 256- 511]: 501355
[ 512- 1023]: 334336
[ 1024- 2047]: 4620019
Protocol Breakdown
![[protocol breakdown chart]](200803200115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12073633 (100.00%) 7741943696 (100.00%) 641.23
ip 11865760 ( 98.28%) 7719488014 ( 99.71%) 650.57
tcp 9219443 ( 76.36%) 7161589122 ( 92.50%) 776.79
http(s) 3167353 ( 26.23%) 4381924226 ( 56.60%) 1383.47
http(c) 1604477 ( 13.29%) 150787349 ( 1.95%) 93.98
squid 959560 ( 7.95%) 708270862 ( 9.15%) 738.12
smtp 800367 ( 6.63%) 122684703 ( 1.58%) 153.29
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 13714 ( 0.11%) 1583738 ( 0.02%) 115.48
pop3 4023 ( 0.03%) 1658944 ( 0.02%) 412.36
imap 146217 ( 1.21%) 140134729 ( 1.81%) 958.40
telnet 1538 ( 0.01%) 99092 ( 0.00%) 64.43
ssh 479223 ( 3.97%) 453354477 ( 5.86%) 946.02
dns 1749 ( 0.01%) 134135 ( 0.00%) 76.69
bgp 204 ( 0.00%) 67780 ( 0.00%) 332.25
napster 33 ( 0.00%) 5244 ( 0.00%) 158.91
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 610 ( 0.01%) 556045 ( 0.01%) 911.55
icecast 14066 ( 0.12%) 9300380 ( 0.12%) 661.20
other 2026300 ( 16.78%) 1191026878 ( 15.38%) 587.78
udp 2068036 ( 17.13%) 505525097 ( 6.53%) 244.45
dns 1136695 ( 9.41%) 163191531 ( 2.11%) 143.57
realaud 8697 ( 0.07%) 5452450 ( 0.07%) 626.93
halflif 23 ( 0.00%) 3214 ( 0.00%) 139.74
starcra 56 ( 0.00%) 9906 ( 0.00%) 176.89
everque 47 ( 0.00%) 8441 ( 0.00%) 179.60
unreal 13 ( 0.00%) 1454 ( 0.00%) 111.85
quake 9 ( 0.00%) 727 ( 0.00%) 80.78
cuseeme 3 ( 0.00%) 579 ( 0.00%) 193.00
other 922442 ( 7.64%) 336839749 ( 4.35%) 365.16
icmp 569558 ( 4.72%) 48728115 ( 0.63%) 85.55
ipip 291 ( 0.00%) 32950 ( 0.00%) 113.23
ip6 998 ( 0.01%) 134614 ( 0.00%) 134.88
other 7434 ( 0.06%) 3478116 ( 0.04%) 467.87
frag 1431 ( 0.01%) 1130163 ( 0.01%) 789.77
ip6 207873 ( 1.72%) 22455682 ( 0.29%) 108.03
tcp6 181839 ( 1.51%) 13851557 ( 0.18%) 76.17
http(c) 960 ( 0.01%) 98611 ( 0.00%) 102.72
smtp 838 ( 0.01%) 315255 ( 0.00%) 376.20
ftp 538 ( 0.00%) 63555 ( 0.00%) 118.13
bgp 83 ( 0.00%) 9905 ( 0.00%) 119.34
other 179420 ( 1.49%) 13364231 ( 0.17%) 74.49
udp6 17457 ( 0.14%) 3298770 ( 0.04%) 188.97
dns 16360 ( 0.14%) 3058097 ( 0.04%) 186.93
other 1097 ( 0.01%) 240673 ( 0.00%) 219.39
icmp6 5045 ( 0.04%) 725825 ( 0.01%) 143.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3502 ( 0.03%) 4575450 ( 0.06%) 1306.52
tcpdump file: 200803200115.dump.gz (303.60 MB)