Traffic Trace Info
DumpFile: -
Id: 200803200200
StartTime: Thu Mar 20 02:00:01 2008
EndTime: Thu Mar 20 02:15:01 2008
TotalTime: 900.15 seconds
TotalCapSize: 706.30MB CapLen: 96 bytes
# of packets: 12912465 (7579.42MB)
AvgRate: 70.65Mbps stddev:11.15M
IP flow (unique src/dst pair) Information
# of flows: 1022023 (avg. 12.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.5% 2.8% 2.0% 1.9% 1.5% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 545845
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.5% 10.4% 5.5% 5.4% 5.0% 4.6% 2.8% 2.8% 2.7%
# of IPv6 addresses: 1725
Top 10 bandwidth usage (bytes/total in %):
61.7% 61.6% 19.8% 18.5% 2.6% 2.2% 2.1% 1.6% 1.5% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200200.pktlen.png)
detailed numbers
[ 32- 63]: 2778374
[ 64- 127]: 3862356
[ 128- 255]: 834861
[ 256- 511]: 388398
[ 512- 1023]: 295664
[ 1024- 2047]: 4752812
Protocol Breakdown
![[protocol breakdown chart]](200803200200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12912465 (100.00%) 7947601765 (100.00%) 615.50
ip 12683276 ( 98.23%) 7923596495 ( 99.70%) 624.73
tcp 9713522 ( 75.23%) 7344765065 ( 92.41%) 756.14
http(s) 3492100 ( 27.04%) 4867441757 ( 61.24%) 1393.84
http(c) 1807821 ( 14.00%) 158766458 ( 2.00%) 87.82
squid 595839 ( 4.61%) 392766865 ( 4.94%) 659.18
smtp 868725 ( 6.73%) 175239228 ( 2.20%) 201.72
ftp 14580 ( 0.11%) 1650716 ( 0.02%) 113.22
pop3 5242 ( 0.04%) 2714233 ( 0.03%) 517.79
imap 4704 ( 0.04%) 1299663 ( 0.02%) 276.29
telnet 716 ( 0.01%) 46284 ( 0.00%) 64.64
ssh 418314 ( 3.24%) 403250697 ( 5.07%) 963.99
dns 2290 ( 0.02%) 178689 ( 0.00%) 78.03
bgp 205 ( 0.00%) 56549 ( 0.00%) 275.85
napster 78 ( 0.00%) 8162 ( 0.00%) 104.64
realaud 9 ( 0.00%) 1177 ( 0.00%) 130.78
rtsp 133 ( 0.00%) 32509 ( 0.00%) 244.43
icecast 10265 ( 0.08%) 6367097 ( 0.08%) 620.27
other 2492498 ( 19.30%) 1334944801 ( 16.80%) 535.59
udp 2161882 ( 16.74%) 506122375 ( 6.37%) 234.11
dns 1181745 ( 9.15%) 172284407 ( 2.17%) 145.79
realaud 8715 ( 0.07%) 5457499 ( 0.07%) 626.22
halflif 26 ( 0.00%) 2901 ( 0.00%) 111.58
starcra 19 ( 0.00%) 4926 ( 0.00%) 259.26
everque 41 ( 0.00%) 4846 ( 0.00%) 118.20
unreal 22 ( 0.00%) 6021 ( 0.00%) 273.68
quake 4 ( 0.00%) 365 ( 0.00%) 91.25
cuseeme 4 ( 0.00%) 567 ( 0.00%) 141.75
other 971236 ( 7.52%) 328335551 ( 4.13%) 338.06
icmp 796284 ( 6.17%) 66109974 ( 0.83%) 83.02
ipip 361 ( 0.00%) 45940 ( 0.00%) 127.26
ip6 1081 ( 0.01%) 150605 ( 0.00%) 139.32
other 10146 ( 0.08%) 6402536 ( 0.08%) 631.04
frag 1819 ( 0.01%) 1540543 ( 0.02%) 846.92
ip6 229189 ( 1.77%) 24005270 ( 0.30%) 104.74
tcp6 204734 ( 1.59%) 15675231 ( 0.20%) 76.56
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 887 ( 0.01%) 103984 ( 0.00%) 117.23
smtp 1454 ( 0.01%) 502429 ( 0.01%) 345.55
pop3 65 ( 0.00%) 6629 ( 0.00%) 101.98
bgp 83 ( 0.00%) 9514 ( 0.00%) 114.63
other 202240 ( 1.57%) 15052063 ( 0.19%) 74.43
udp6 15865 ( 0.12%) 3173517 ( 0.04%) 200.03
dns 14192 ( 0.11%) 2701532 ( 0.03%) 190.36
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 1672 ( 0.01%) 471409 ( 0.01%) 281.94
icmp6 5149 ( 0.04%) 712028 ( 0.01%) 138.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3411 ( 0.03%) 4440414 ( 0.06%) 1301.79
tcpdump file: 200803200200.dump.gz (323.21 MB)