Traffic Trace Info
DumpFile: -
Id: 200803200345
StartTime: Thu Mar 20 03:45:00 2008
EndTime: Thu Mar 20 04:00:00 2008
TotalTime: 899.99 seconds
TotalCapSize: 633.32MB CapLen: 96 bytes
# of packets: 11695428 (7132.61MB)
AvgRate: 66.49Mbps stddev:9.88M
IP flow (unique src/dst pair) Information
# of flows: 722333 (avg. 16.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.2% 3.2% 2.5% 1.6% 1.5% 1.4% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 400542
Top 10 bandwidth usage (bytes/total in %):
12.0% 11.6% 10.3% 6.7% 5.8% 5.5% 4.2% 4.2% 3.6% 3.6%
# of IPv6 addresses: 1633
Top 10 bandwidth usage (bytes/total in %):
53.7% 50.2% 9.1% 7.6% 5.6% 3.2% 2.8% 2.8% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200345.pktlen.png)
detailed numbers
[ 32- 63]: 2599932
[ 64- 127]: 3130091
[ 128- 255]: 775833
[ 256- 511]: 359862
[ 512- 1023]: 360407
[ 1024- 2047]: 4469303
Protocol Breakdown
![[protocol breakdown chart]](200803200345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11695428 (100.00%) 7479082975 (100.00%) 639.49
ip 11667668 ( 99.76%) 7470218016 ( 99.88%) 640.25
tcp 9045110 ( 77.34%) 6918558061 ( 92.51%) 764.89
http(s) 2919416 ( 24.96%) 4043059635 ( 54.06%) 1384.89
http(c) 1639650 ( 14.02%) 139632169 ( 1.87%) 85.16
squid 743196 ( 6.35%) 565462037 ( 7.56%) 760.85
smtp 712729 ( 6.09%) 108157126 ( 1.45%) 151.75
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 19453 ( 0.17%) 1942626 ( 0.03%) 99.86
pop3 6742 ( 0.06%) 1260831 ( 0.02%) 187.01
imap 1070 ( 0.01%) 224764 ( 0.00%) 210.06
telnet 3999 ( 0.03%) 255713 ( 0.00%) 63.94
ssh 432522 ( 3.70%) 417077682 ( 5.58%) 964.29
dns 81928 ( 0.70%) 120338543 ( 1.61%) 1468.83
bgp 185 ( 0.00%) 49981 ( 0.00%) 270.17
napster 266 ( 0.00%) 23167 ( 0.00%) 87.09
realaud 13 ( 0.00%) 1801 ( 0.00%) 138.54
rtsp 165 ( 0.00%) 50791 ( 0.00%) 307.82
icecast 6399 ( 0.05%) 3086784 ( 0.04%) 482.39
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2477372 ( 21.18%) 1517934109 ( 20.30%) 612.72
udp 1988856 ( 17.01%) 497664919 ( 6.65%) 250.23
dns 1102588 ( 9.43%) 167839196 ( 2.24%) 152.22
realaud 8821 ( 0.08%) 5459355 ( 0.07%) 618.90
halflif 26 ( 0.00%) 4414 ( 0.00%) 169.77
starcra 33 ( 0.00%) 6491 ( 0.00%) 196.70
everque 69 ( 0.00%) 12664 ( 0.00%) 183.54
unreal 6 ( 0.00%) 846 ( 0.00%) 141.00
quake 7 ( 0.00%) 697 ( 0.00%) 99.57
cuseeme 1582 ( 0.01%) 824653 ( 0.01%) 521.27
other 875669 ( 7.49%) 323474121 ( 4.33%) 369.40
icmp 627076 ( 5.36%) 53034499 ( 0.71%) 84.57
ipip 327 ( 0.00%) 39770 ( 0.00%) 121.62
ip6 1007 ( 0.01%) 135779 ( 0.00%) 134.84
other 5292 ( 0.05%) 784988 ( 0.01%) 148.33
frag 1522 ( 0.01%) 1348934 ( 0.02%) 886.29
ip6 27760 ( 0.24%) 8864959 ( 0.12%) 319.34
tcp6 3566 ( 0.03%) 684367 ( 0.01%) 191.91
http(s) 111 ( 0.00%) 143691 ( 0.00%) 1294.51
http(c) 697 ( 0.01%) 71570 ( 0.00%) 102.68
smtp 545 ( 0.00%) 213857 ( 0.00%) 392.40
pop3 44 ( 0.00%) 4016 ( 0.00%) 91.27
bgp 84 ( 0.00%) 10076 ( 0.00%) 119.95
other 2085 ( 0.02%) 241157 ( 0.00%) 115.66
udp6 15773 ( 0.13%) 3043025 ( 0.04%) 192.93
dns 14137 ( 0.12%) 2575562 ( 0.03%) 182.19
other 1636 ( 0.01%) 467463 ( 0.01%) 285.74
icmp6 4977 ( 0.04%) 691777 ( 0.01%) 138.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3413 ( 0.03%) 4441574 ( 0.06%) 1301.37
tcpdump file: 200803200345.dump.gz (293.73 MB)