Traffic Trace Info
DumpFile: -
Id: 200803200400
StartTime: Thu Mar 20 04:00:00 2008
EndTime: Thu Mar 20 04:15:01 2008
TotalTime: 900.51 seconds
TotalCapSize: 640.11MB CapLen: 96 bytes
# of packets: 11832763 (6946.58MB)
AvgRate: 64.71Mbps stddev:12.11M
IP flow (unique src/dst pair) Information
# of flows: 774828 (avg. 15.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.8% 3.9% 2.3% 1.7% 1.6% 1.6% 1.3% 1.2% 0.7%
IP address Information
# of IPv4 addresses: 433742
Top 10 bandwidth usage (bytes/total in %):
11.2% 11.0% 10.2% 6.7% 5.9% 5.6% 4.9% 4.7% 3.9% 3.9%
# of IPv6 addresses: 1512
Top 10 bandwidth usage (bytes/total in %):
51.1% 47.8% 7.1% 6.1% 6.0% 5.6% 5.2% 3.3% 3.1% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200400.pktlen.png)
detailed numbers
[ 32- 63]: 2493820
[ 64- 127]: 3403289
[ 128- 255]: 707942
[ 256- 511]: 566225
[ 512- 1023]: 368051
[ 1024- 2047]: 4293436
Protocol Breakdown
![[protocol breakdown chart]](200803200400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11832763 (100.00%) 7284013385 (100.00%) 615.58
ip 11799163 ( 99.72%) 7274421580 ( 99.87%) 616.52
tcp 9026101 ( 76.28%) 6577341784 ( 90.30%) 728.70
http(s) 2848261 ( 24.07%) 3933075174 ( 54.00%) 1380.87
http(c) 1604838 ( 13.56%) 134050131 ( 1.84%) 83.53
squid 628484 ( 5.31%) 408456166 ( 5.61%) 649.91
smtp 749236 ( 6.33%) 118246305 ( 1.62%) 157.82
ftp 16459 ( 0.14%) 1842631 ( 0.03%) 111.95
pop3 9058 ( 0.08%) 2393806 ( 0.03%) 264.28
imap 1287 ( 0.01%) 196278 ( 0.00%) 152.51
telnet 3430 ( 0.03%) 220407 ( 0.00%) 64.26
ssh 419680 ( 3.55%) 407336310 ( 5.59%) 970.59
dns 2103 ( 0.02%) 163829 ( 0.00%) 77.90
bgp 188 ( 0.00%) 54828 ( 0.00%) 291.64
napster 183 ( 0.00%) 12103 ( 0.00%) 66.14
realaud 40 ( 0.00%) 5206 ( 0.00%) 130.15
rtsp 189 ( 0.00%) 45320 ( 0.00%) 239.79
icecast 6350 ( 0.05%) 3099138 ( 0.04%) 488.05
other 2736311 ( 23.12%) 1568143912 ( 21.53%) 573.09
udp 2214786 ( 18.72%) 648399230 ( 8.90%) 292.76
dns 1057278 ( 8.94%) 157344917 ( 2.16%) 148.82
realaud 8742 ( 0.07%) 5464579 ( 0.08%) 625.09
halflif 15 ( 0.00%) 1932 ( 0.00%) 128.80
starcra 14 ( 0.00%) 2270 ( 0.00%) 162.14
everque 70 ( 0.00%) 8102 ( 0.00%) 115.74
unreal 10 ( 0.00%) 1329 ( 0.00%) 132.90
quake 14 ( 0.00%) 2739 ( 0.00%) 195.64
cuseeme 3 ( 0.00%) 524 ( 0.00%) 174.67
other 1148550 ( 9.71%) 485536458 ( 6.67%) 422.74
icmp 551321 ( 4.66%) 47720367 ( 0.66%) 86.56
ipip 321 ( 0.00%) 38459 ( 0.00%) 119.81
ip6 1060 ( 0.01%) 147970 ( 0.00%) 139.59
other 5574 ( 0.05%) 773770 ( 0.01%) 138.82
frag 1932 ( 0.02%) 1682757 ( 0.02%) 870.99
ip6 33600 ( 0.28%) 9591805 ( 0.13%) 285.47
tcp6 3740 ( 0.03%) 648218 ( 0.01%) 173.32
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 723 ( 0.01%) 73470 ( 0.00%) 101.62
smtp 808 ( 0.01%) 320234 ( 0.00%) 396.33
pop3 45 ( 0.00%) 4102 ( 0.00%) 91.16
bgp 82 ( 0.00%) 10396 ( 0.00%) 126.78
other 2077 ( 0.02%) 239404 ( 0.00%) 115.26
udp6 21111 ( 0.18%) 3652596 ( 0.05%) 173.02
dns 19768 ( 0.17%) 3361832 ( 0.05%) 170.06
other 1343 ( 0.01%) 290764 ( 0.00%) 216.50
icmp6 5216 ( 0.04%) 708661 ( 0.01%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3503 ( 0.03%) 4578250 ( 0.06%) 1306.95
tcpdump file: 200803200400.dump.gz (298.04 MB)