Traffic Trace Info
DumpFile: -
Id: 200803200215
StartTime: Thu Mar 20 02:15:01 2008
EndTime: Thu Mar 20 02:30:00 2008
TotalTime: 899.19 seconds
TotalCapSize: 629.71MB CapLen: 96 bytes
# of packets: 11577012 (6802.96MB)
AvgRate: 63.45Mbps stddev:9.63M
IP flow (unique src/dst pair) Information
# of flows: 821179 (avg. 14.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.4% 2.5% 1.8% 1.6% 1.3% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 494385
Top 10 bandwidth usage (bytes/total in %):
13.8% 13.7% 7.1% 6.1% 6.1% 5.6% 4.5% 4.4% 4.4% 3.2%
# of IPv6 addresses: 1508
Top 10 bandwidth usage (bytes/total in %):
61.2% 61.2% 20.6% 19.2% 3.7% 3.1% 1.3% 1.3% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200215.pktlen.png)
detailed numbers
[ 32- 63]: 2405352
[ 64- 127]: 3375361
[ 128- 255]: 846213
[ 256- 511]: 389349
[ 512- 1023]: 326479
[ 1024- 2047]: 4234258
Protocol Breakdown
![[protocol breakdown chart]](200803200215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11577012 (100.00%) 7133420710 (100.00%) 616.17
ip 11350583 ( 98.04%) 7109571626 ( 99.67%) 626.36
tcp 8558305 ( 73.92%) 6514127655 ( 91.32%) 761.15
http(s) 3058578 ( 26.42%) 4246963612 ( 59.54%) 1388.54
http(c) 1498642 ( 12.94%) 143178059 ( 2.01%) 95.54
squid 519397 ( 4.49%) 313400995 ( 4.39%) 603.39
smtp 782371 ( 6.76%) 121413715 ( 1.70%) 155.19
ftp 12847 ( 0.11%) 1445035 ( 0.02%) 112.48
pop3 4435 ( 0.04%) 2230047 ( 0.03%) 502.83
imap 4026 ( 0.03%) 1149082 ( 0.02%) 285.42
telnet 1467 ( 0.01%) 94610 ( 0.00%) 64.49
ssh 419335 ( 3.62%) 404855071 ( 5.68%) 965.47
dns 9286 ( 0.08%) 10668685 ( 0.15%) 1148.90
bgp 185 ( 0.00%) 49256 ( 0.00%) 266.25
napster 55 ( 0.00%) 14860 ( 0.00%) 270.18
realaud 17 ( 0.00%) 2697 ( 0.00%) 158.65
rtsp 95 ( 0.00%) 21912 ( 0.00%) 230.65
icecast 6287 ( 0.05%) 3066896 ( 0.04%) 487.82
hotline 53 ( 0.00%) 16612 ( 0.00%) 313.43
other 2241228 ( 19.36%) 1265556451 ( 17.74%) 564.67
udp 2151835 ( 18.59%) 540271933 ( 7.57%) 251.07
dns 1106245 ( 9.56%) 162980286 ( 2.28%) 147.33
realaud 8704 ( 0.08%) 5448404 ( 0.08%) 625.97
halflif 26 ( 0.00%) 3238 ( 0.00%) 124.54
starcra 47 ( 0.00%) 9835 ( 0.00%) 209.26
everque 54 ( 0.00%) 9094 ( 0.00%) 168.41
unreal 11 ( 0.00%) 3010 ( 0.00%) 273.64
quake 8 ( 0.00%) 697 ( 0.00%) 87.12
cuseeme 6 ( 0.00%) 806 ( 0.00%) 134.33
other 1036644 ( 8.95%) 371749012 ( 5.21%) 358.61
icmp 633154 ( 5.47%) 53523498 ( 0.75%) 84.53
ipip 300 ( 0.00%) 34462 ( 0.00%) 114.87
ip6 1003 ( 0.01%) 136923 ( 0.00%) 136.51
other 5986 ( 0.05%) 1477155 ( 0.02%) 246.77
frag 1717 ( 0.01%) 1550107 ( 0.02%) 902.80
ip6 226429 ( 1.96%) 23849084 ( 0.33%) 105.33
tcp6 201120 ( 1.74%) 15295955 ( 0.21%) 76.05
http(c) 693 ( 0.01%) 70200 ( 0.00%) 101.30
smtp 740 ( 0.01%) 356405 ( 0.00%) 481.63
pop3 23 ( 0.00%) 2482 ( 0.00%) 107.91
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 199602 ( 1.72%) 14860432 ( 0.21%) 74.45
udp6 17012 ( 0.15%) 3326191 ( 0.05%) 195.52
dns 15704 ( 0.14%) 3028407 ( 0.04%) 192.84
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1307 ( 0.01%) 297642 ( 0.00%) 227.73
icmp6 4771 ( 0.04%) 653529 ( 0.01%) 136.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3496 ( 0.03%) 4569329 ( 0.06%) 1307.02
tcpdump file: 200803200215.dump.gz (290.27 MB)