Traffic Trace Info
DumpFile: -
Id: 200803200130
StartTime: Thu Mar 20 01:30:00 2008
EndTime: Thu Mar 20 01:45:00 2008
TotalTime: 899.73 seconds
TotalCapSize: 627.33MB CapLen: 96 bytes
# of packets: 11481917 (6856.68MB)
AvgRate: 63.92Mbps stddev:11.41M
IP flow (unique src/dst pair) Information
# of flows: 744164 (avg. 15.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.6% 2.2% 1.9% 1.8% 1.4% 1.4% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 423947
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.8% 6.1% 4.2% 3.8% 3.7% 3.7% 3.5% 2.6% 2.6%
# of IPv6 addresses: 1553
Top 10 bandwidth usage (bytes/total in %):
60.3% 60.3% 20.0% 18.6% 3.8% 3.1% 1.3% 1.3% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200130.pktlen.png)
detailed numbers
[ 32- 63]: 2403188
[ 64- 127]: 3276618
[ 128- 255]: 720922
[ 256- 511]: 438133
[ 512- 1023]: 412118
[ 1024- 2047]: 4230938
Protocol Breakdown
![[protocol breakdown chart]](200803200130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11481917 (100.00%) 7189746908 (100.00%) 626.18
ip 11256978 ( 98.04%) 7165993791 ( 99.67%) 636.58
tcp 8656833 ( 75.40%) 6634877226 ( 92.28%) 766.43
http(s) 3089604 ( 26.91%) 4280980495 ( 59.54%) 1385.61
http(c) 1634600 ( 14.24%) 165257132 ( 2.30%) 101.10
squid 754312 ( 6.57%) 532906162 ( 7.41%) 706.48
smtp 751211 ( 6.54%) 112686211 ( 1.57%) 150.01
ftp 14729 ( 0.13%) 1611749 ( 0.02%) 109.43
pop3 3274 ( 0.03%) 1114789 ( 0.02%) 340.50
imap 69520 ( 0.61%) 63808468 ( 0.89%) 917.84
telnet 881 ( 0.01%) 56702 ( 0.00%) 64.36
ssh 196509 ( 1.71%) 168478299 ( 2.34%) 857.36
dns 4019 ( 0.04%) 1903938 ( 0.03%) 473.73
bgp 222 ( 0.00%) 81062 ( 0.00%) 365.14
napster 35 ( 0.00%) 5320 ( 0.00%) 152.00
realaud 12 ( 0.00%) 1949 ( 0.00%) 162.42
rtsp 2479 ( 0.02%) 2804330 ( 0.04%) 1131.23
icecast 12014 ( 0.10%) 7730713 ( 0.11%) 643.48
hotline 6 ( 0.00%) 573 ( 0.00%) 95.50
other 2123406 ( 18.49%) 1295449334 ( 18.02%) 610.08
udp 1940970 ( 16.90%) 472064400 ( 6.57%) 243.21
dns 1091199 ( 9.50%) 161672401 ( 2.25%) 148.16
realaud 8706 ( 0.08%) 5450597 ( 0.08%) 626.07
halflif 28 ( 0.00%) 2772 ( 0.00%) 99.00
starcra 36 ( 0.00%) 5309 ( 0.00%) 147.47
everque 33 ( 0.00%) 3940 ( 0.00%) 119.39
unreal 57 ( 0.00%) 5333 ( 0.00%) 93.56
quake 7 ( 0.00%) 655 ( 0.00%) 93.57
cuseeme 3 ( 0.00%) 248 ( 0.00%) 82.67
other 840873 ( 7.32%) 304907277 ( 4.24%) 362.61
icmp 649208 ( 5.65%) 54869358 ( 0.76%) 84.52
ipip 390 ( 0.00%) 49514 ( 0.00%) 126.96
ip6 1126 ( 0.01%) 157844 ( 0.00%) 140.18
other 8451 ( 0.07%) 3975449 ( 0.06%) 470.41
frag 1402 ( 0.01%) 1170425 ( 0.02%) 834.83
ip6 224939 ( 1.96%) 23753117 ( 0.33%) 105.60
tcp6 199024 ( 1.73%) 15292711 ( 0.21%) 76.84
http(s) 191 ( 0.00%) 218547 ( 0.00%) 1144.23
http(c) 803 ( 0.01%) 80796 ( 0.00%) 100.62
smtp 625 ( 0.01%) 269651 ( 0.00%) 431.44
pop3 1157 ( 0.01%) 104902 ( 0.00%) 90.67
bgp 85 ( 0.00%) 9958 ( 0.00%) 117.15
other 196163 ( 1.71%) 14608857 ( 0.20%) 74.47
udp6 17325 ( 0.15%) 3330629 ( 0.05%) 192.24
dns 16016 ( 0.14%) 3014816 ( 0.04%) 188.24
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1308 ( 0.01%) 315676 ( 0.00%) 241.34
icmp6 5195 ( 0.05%) 746273 ( 0.01%) 143.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3364 ( 0.03%) 4379288 ( 0.06%) 1301.81
tcpdump file: 200803200130.dump.gz (289.46 MB)