Traffic Trace Info
DumpFile: -
Id: 200803200315
StartTime: Thu Mar 20 03:15:01 2008
EndTime: Thu Mar 20 03:30:00 2008
TotalTime: 899.44 seconds
TotalCapSize: 638.54MB CapLen: 96 bytes
# of packets: 11862437 (6930.68MB)
AvgRate: 64.65Mbps stddev:9.54M
IP flow (unique src/dst pair) Information
# of flows: 748001 (avg. 15.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.3% 1.7% 1.6% 1.3% 1.3% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 414092
Top 10 bandwidth usage (bytes/total in %):
13.3% 11.4% 8.4% 7.1% 6.0% 5.6% 4.3% 4.3% 3.4% 2.3%
# of IPv6 addresses: 1454
Top 10 bandwidth usage (bytes/total in %):
52.1% 48.2% 12.0% 10.0% 4.2% 3.2% 3.1% 2.7% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200315.pktlen.png)
detailed numbers
[ 32- 63]: 2663530
[ 64- 127]: 3280809
[ 128- 255]: 865144
[ 256- 511]: 420370
[ 512- 1023]: 315918
[ 1024- 2047]: 4316666
Protocol Breakdown
![[protocol breakdown chart]](200803200315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11862437 (100.00%) 7267346219 (100.00%) 612.64
ip 11831488 ( 99.74%) 7258154445 ( 99.87%) 613.46
tcp 8924095 ( 75.23%) 6633711955 ( 91.28%) 743.35
http(s) 3105659 ( 26.18%) 4275869656 ( 58.84%) 1376.80
http(c) 1560916 ( 13.16%) 128011541 ( 1.76%) 82.01
squid 703814 ( 5.93%) 511102142 ( 7.03%) 726.19
smtp 782955 ( 6.60%) 129092486 ( 1.78%) 164.88
nntp 237312 ( 2.00%) 14463414 ( 0.20%) 60.95
ftp 11431 ( 0.10%) 1280420 ( 0.02%) 112.01
pop3 3311 ( 0.03%) 1552928 ( 0.02%) 469.02
imap 1026 ( 0.01%) 180375 ( 0.00%) 175.80
telnet 3239 ( 0.03%) 203626 ( 0.00%) 62.87
ssh 423214 ( 3.57%) 410169832 ( 5.64%) 969.18
dns 2181 ( 0.02%) 232387 ( 0.00%) 106.55
bgp 199 ( 0.00%) 56503 ( 0.00%) 283.93
napster 105 ( 0.00%) 6548 ( 0.00%) 62.36
realaud 5 ( 0.00%) 1088 ( 0.00%) 217.60
rtsp 90 ( 0.00%) 21224 ( 0.00%) 235.82
icecast 10678 ( 0.09%) 7139327 ( 0.10%) 668.60
other 2077957 ( 17.52%) 1154328278 ( 15.88%) 555.51
udp 2122822 ( 17.90%) 559568722 ( 7.70%) 263.60
dns 1144089 ( 9.64%) 169927952 ( 2.34%) 148.53
realaud 8719 ( 0.07%) 5451438 ( 0.08%) 625.24
halflif 19 ( 0.00%) 2042 ( 0.00%) 107.47
starcra 39 ( 0.00%) 6644 ( 0.00%) 170.36
everque 52 ( 0.00%) 8372 ( 0.00%) 161.00
unreal 10 ( 0.00%) 1558 ( 0.00%) 155.80
quake 20 ( 0.00%) 1975 ( 0.00%) 98.75
cuseeme 4 ( 0.00%) 581 ( 0.00%) 145.25
other 969671 ( 8.17%) 384092309 ( 5.29%) 396.11
icmp 778187 ( 6.56%) 63985589 ( 0.88%) 82.22
ipip 330 ( 0.00%) 39804 ( 0.00%) 120.62
ip6 998 ( 0.01%) 135884 ( 0.00%) 136.16
other 5056 ( 0.04%) 712491 ( 0.01%) 140.92
frag 1591 ( 0.01%) 1238263 ( 0.02%) 778.29
ip6 30949 ( 0.26%) 9191774 ( 0.13%) 297.00
tcp6 3756 ( 0.03%) 604446 ( 0.01%) 160.93
http(c) 815 ( 0.01%) 81838 ( 0.00%) 100.41
smtp 702 ( 0.01%) 266229 ( 0.00%) 379.24
pop3 37 ( 0.00%) 3486 ( 0.00%) 94.22
bgp 76 ( 0.00%) 8669 ( 0.00%) 114.07
other 2126 ( 0.02%) 244224 ( 0.00%) 114.87
udp6 18610 ( 0.16%) 3462552 ( 0.05%) 186.06
dns 17372 ( 0.15%) 3187435 ( 0.04%) 183.48
other 1238 ( 0.01%) 275117 ( 0.00%) 222.23
icmp6 5148 ( 0.04%) 688890 ( 0.01%) 133.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3405 ( 0.03%) 4431806 ( 0.06%) 1301.56
tcpdump file: 200803200315.dump.gz (298.15 MB)