Traffic Trace Info
DumpFile: -
Id: 200803200145
StartTime: Thu Mar 20 01:45:00 2008
EndTime: Thu Mar 20 02:00:01 2008
TotalTime: 900.66 seconds
TotalCapSize: 641.35MB CapLen: 96 bytes
# of packets: 11811406 (6928.01MB)
AvgRate: 64.52Mbps stddev:10.73M
IP flow (unique src/dst pair) Information
# of flows: 731380 (avg. 16.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.6% 1.8% 1.6% 1.3% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 410440
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.7% 6.9% 6.2% 6.1% 5.1% 3.1% 2.7% 2.7% 1.9%
# of IPv6 addresses: 1447
Top 10 bandwidth usage (bytes/total in %):
63.6% 63.6% 15.6% 14.1% 5.3% 4.2% 1.7% 1.3% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200145.pktlen.png)
detailed numbers
[ 32- 63]: 2474389
[ 64- 127]: 3471285
[ 128- 255]: 780364
[ 256- 511]: 476714
[ 512- 1023]: 325229
[ 1024- 2047]: 4283425
Protocol Breakdown
![[protocol breakdown chart]](200803200145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11811406 (100.00%) 7264540682 (100.00%) 615.04
ip 11580201 ( 98.04%) 7241223455 ( 99.68%) 625.31
tcp 8710434 ( 73.75%) 6606504388 ( 90.94%) 758.46
http(s) 3325290 ( 28.15%) 4585501008 ( 63.12%) 1378.98
http(c) 1659061 ( 14.05%) 162750935 ( 2.24%) 98.10
squid 580988 ( 4.92%) 378131278 ( 5.21%) 650.84
smtp 907131 ( 7.68%) 137950374 ( 1.90%) 152.07
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 16639 ( 0.14%) 2470662 ( 0.03%) 148.49
pop3 4274 ( 0.04%) 2080131 ( 0.03%) 486.69
imap 3774 ( 0.03%) 883596 ( 0.01%) 234.13
telnet 523 ( 0.00%) 33897 ( 0.00%) 64.81
ssh 391244 ( 3.31%) 376132413 ( 5.18%) 961.38
dns 2073 ( 0.02%) 162240 ( 0.00%) 78.26
bgp 249 ( 0.00%) 91726 ( 0.00%) 368.38
napster 21 ( 0.00%) 1760 ( 0.00%) 83.81
realaud 129 ( 0.00%) 87454 ( 0.00%) 677.94
rtsp 101 ( 0.00%) 21951 ( 0.00%) 217.34
icecast 12171 ( 0.10%) 7774705 ( 0.11%) 638.79
hotline 27 ( 0.00%) 2272 ( 0.00%) 84.15
other 1806737 ( 15.30%) 952427866 ( 13.11%) 527.15
udp 2254028 ( 19.08%) 580417711 ( 7.99%) 257.50
dns 1110682 ( 9.40%) 164632301 ( 2.27%) 148.23
realaud 8722 ( 0.07%) 5456403 ( 0.08%) 625.59
halflif 25 ( 0.00%) 3935 ( 0.00%) 157.40
starcra 42 ( 0.00%) 8163 ( 0.00%) 194.36
everque 40 ( 0.00%) 5888 ( 0.00%) 147.20
unreal 13 ( 0.00%) 2661 ( 0.00%) 204.69
quake 7 ( 0.00%) 575 ( 0.00%) 82.14
cuseeme 5 ( 0.00%) 399 ( 0.00%) 79.80
other 1134452 ( 9.60%) 410272555 ( 5.65%) 361.65
icmp 606255 ( 5.13%) 51312269 ( 0.71%) 84.64
ipip 279 ( 0.00%) 31118 ( 0.00%) 111.53
ip6 1061 ( 0.01%) 143143 ( 0.00%) 134.91
other 8144 ( 0.07%) 2814826 ( 0.04%) 345.63
frag 1338 ( 0.01%) 1159311 ( 0.02%) 866.45
ip6 231205 ( 1.96%) 23317227 ( 0.32%) 100.85
tcp6 204742 ( 1.73%) 15756247 ( 0.22%) 76.96
http(s) 112 ( 0.00%) 144358 ( 0.00%) 1288.91
http(c) 843 ( 0.01%) 89313 ( 0.00%) 105.95
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 914 ( 0.01%) 415391 ( 0.01%) 454.48
pop3 17 ( 0.00%) 1927 ( 0.00%) 113.35
dns 11 ( 0.00%) 1386 ( 0.00%) 126.00
bgp 73 ( 0.00%) 8067 ( 0.00%) 110.51
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 202769 ( 1.72%) 15095583 ( 0.21%) 74.45
udp6 19083 ( 0.16%) 3616385 ( 0.05%) 189.51
dns 17774 ( 0.15%) 3323928 ( 0.05%) 187.01
other 1309 ( 0.01%) 292457 ( 0.00%) 223.42
icmp6 4804 ( 0.04%) 646423 ( 0.01%) 134.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2546 ( 0.02%) 3294092 ( 0.05%) 1293.83
tcpdump file: 200803200145.dump.gz (297.16 MB)