Traffic Trace Info
DumpFile: -
Id: 200803200230
StartTime: Thu Mar 20 02:30:00 2008
EndTime: Thu Mar 20 02:45:00 2008
TotalTime: 900.36 seconds
TotalCapSize: 628.17MB CapLen: 96 bytes
# of packets: 11451506 (6558.52MB)
AvgRate: 61.09Mbps stddev:7.82M
IP flow (unique src/dst pair) Information
# of flows: 668267 (avg. 17.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.5% 2.3% 2.0% 1.5% 1.4% 1.3% 1.2% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 359016
Top 10 bandwidth usage (bytes/total in %):
14.5% 12.5% 7.2% 6.8% 6.4% 6.0% 3.3% 3.0% 2.7% 2.6%
# of IPv6 addresses: 1489
Top 10 bandwidth usage (bytes/total in %):
65.1% 65.1% 19.7% 18.3% 1.5% 1.4% 1.4% 1.3% 1.3% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200230.pktlen.png)
detailed numbers
[ 32- 63]: 2308225
[ 64- 127]: 3665375
[ 128- 255]: 784775
[ 256- 511]: 359769
[ 512- 1023]: 244622
[ 1024- 2047]: 4088740
Protocol Breakdown
![[protocol breakdown chart]](200803200230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11451506 (100.00%) 6877101988 (100.00%) 600.54
ip 11205947 ( 97.86%) 6852142568 ( 99.64%) 611.47
tcp 8492485 ( 74.16%) 6309804638 ( 91.75%) 742.99
http(s) 2889527 ( 25.23%) 4017949846 ( 58.43%) 1390.52
http(c) 1762944 ( 15.39%) 154060800 ( 2.24%) 87.39
squid 781515 ( 6.82%) 570431647 ( 8.29%) 729.90
smtp 689963 ( 6.03%) 111338981 ( 1.62%) 161.37
ftp 10543 ( 0.09%) 1201148 ( 0.02%) 113.93
pop3 3643 ( 0.03%) 1878015 ( 0.03%) 515.51
imap 1585 ( 0.01%) 149795 ( 0.00%) 94.51
telnet 1760 ( 0.02%) 118277 ( 0.00%) 67.20
ssh 479541 ( 4.19%) 421574898 ( 6.13%) 879.12
dns 6199 ( 0.05%) 3631191 ( 0.05%) 585.77
bgp 192 ( 0.00%) 57813 ( 0.00%) 301.11
napster 19 ( 0.00%) 3284 ( 0.00%) 172.84
realaud 41 ( 0.00%) 5037 ( 0.00%) 122.85
rtsp 548 ( 0.00%) 164984 ( 0.00%) 301.07
icecast 6298 ( 0.05%) 3087142 ( 0.04%) 490.18
hotline 61 ( 0.00%) 6430 ( 0.00%) 105.41
other 1858103 ( 16.23%) 1024145170 ( 14.89%) 551.18
udp 2046473 ( 17.87%) 485776941 ( 7.06%) 237.37
dns 1127646 ( 9.85%) 163965028 ( 2.38%) 145.40
realaud 9228 ( 0.08%) 5487793 ( 0.08%) 594.69
halflif 23 ( 0.00%) 2316 ( 0.00%) 100.70
starcra 23 ( 0.00%) 2644 ( 0.00%) 114.96
everque 37 ( 0.00%) 5759 ( 0.00%) 155.65
unreal 16 ( 0.00%) 3924 ( 0.00%) 245.25
quake 9 ( 0.00%) 990 ( 0.00%) 110.00
cuseeme 2 ( 0.00%) 385 ( 0.00%) 192.50
other 909454 ( 7.94%) 316285472 ( 4.60%) 347.78
icmp 660431 ( 5.77%) 55637892 ( 0.81%) 84.24
ipip 331 ( 0.00%) 40574 ( 0.00%) 122.58
ip6 1085 ( 0.01%) 151562 ( 0.00%) 139.69
other 5142 ( 0.04%) 730961 ( 0.01%) 142.15
frag 1404 ( 0.01%) 1220974 ( 0.02%) 869.64
ip6 245559 ( 2.14%) 24959420 ( 0.36%) 101.64
tcp6 223212 ( 1.95%) 16896005 ( 0.25%) 75.69
http(s) 53 ( 0.00%) 60540 ( 0.00%) 1142.26
http(c) 883 ( 0.01%) 91563 ( 0.00%) 103.70
smtp 532 ( 0.00%) 247389 ( 0.00%) 465.02
ftp 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 221681 ( 1.94%) 16490003 ( 0.24%) 74.39
udp6 13665 ( 0.12%) 2794429 ( 0.04%) 204.50
dns 12401 ( 0.11%) 2475734 ( 0.04%) 199.64
other 1264 ( 0.01%) 318695 ( 0.00%) 252.13
icmp6 5159 ( 0.05%) 698684 ( 0.01%) 135.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3493 ( 0.03%) 4566222 ( 0.07%) 1307.25
tcpdump file: 200803200230.dump.gz (289.40 MB)