Traffic Trace Info
DumpFile: -
Id: 200803200415
StartTime: Thu Mar 20 04:15:01 2008
EndTime: Thu Mar 20 04:30:00 2008
TotalTime: 899.80 seconds
TotalCapSize: 648.52MB CapLen: 96 bytes
# of packets: 12016143 (7614.37MB)
AvgRate: 71.32Mbps stddev:10.97M
IP flow (unique src/dst pair) Information
# of flows: 662116 (avg. 18.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 4.9% 3.8% 2.4% 2.2% 1.5% 1.3% 1.3% 1.2% 0.8%
IP address Information
# of IPv4 addresses: 356598
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.9% 8.0% 8.0% 6.2% 6.2% 5.5% 5.0% 4.5% 3.8%
# of IPv6 addresses: 1443
Top 10 bandwidth usage (bytes/total in %):
51.7% 48.4% 10.1% 3.8% 3.5% 3.3% 3.1% 3.1% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200415.pktlen.png)
detailed numbers
[ 32- 63]: 2531206
[ 64- 127]: 3136113
[ 128- 255]: 736965
[ 256- 511]: 405091
[ 512- 1023]: 394279
[ 1024- 2047]: 4812489
Protocol Breakdown
![[protocol breakdown chart]](200803200415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12016143 (100.00%) 7984248222 (100.00%) 664.46
ip 11987071 ( 99.76%) 7974889097 ( 99.88%) 665.29
tcp 9485047 ( 78.94%) 7369424827 ( 92.30%) 776.95
http(s) 2975388 ( 24.76%) 4128939718 ( 51.71%) 1387.70
http(c) 1395953 ( 11.62%) 114842869 ( 1.44%) 82.27
squid 768370 ( 6.39%) 559636390 ( 7.01%) 728.34
smtp 762729 ( 6.35%) 111723659 ( 1.40%) 146.48
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 10959 ( 0.09%) 1216027 ( 0.02%) 110.96
pop3 7572 ( 0.06%) 1042147 ( 0.01%) 137.63
imap 1005 ( 0.01%) 198743 ( 0.00%) 197.75
telnet 3201 ( 0.03%) 205191 ( 0.00%) 64.10
ssh 1093475 ( 9.10%) 1040062208 ( 13.03%) 951.15
dns 8761 ( 0.07%) 10424803 ( 0.13%) 1189.91
bgp 175 ( 0.00%) 44869 ( 0.00%) 256.39
napster 41 ( 0.00%) 3660 ( 0.00%) 89.27
realaud 16 ( 0.00%) 2453 ( 0.00%) 153.31
rtsp 139 ( 0.00%) 27523 ( 0.00%) 198.01
icecast 6199 ( 0.05%) 3042494 ( 0.04%) 490.80
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2451058 ( 20.40%) 1398011705 ( 17.51%) 570.37
udp 2038162 ( 16.96%) 563864697 ( 7.06%) 276.65
dns 1033455 ( 8.60%) 154672237 ( 1.94%) 149.67
realaud 8621 ( 0.07%) 5395489 ( 0.07%) 625.85
halflif 18 ( 0.00%) 3602 ( 0.00%) 200.11
starcra 40 ( 0.00%) 7546 ( 0.00%) 188.65
everque 58 ( 0.00%) 8491 ( 0.00%) 146.40
unreal 24 ( 0.00%) 2891 ( 0.00%) 120.46
quake 9 ( 0.00%) 711 ( 0.00%) 79.00
cuseeme 3 ( 0.00%) 516 ( 0.00%) 172.00
other 995851 ( 8.29%) 403722812 ( 5.06%) 405.40
icmp 457473 ( 3.81%) 40714242 ( 0.51%) 89.00
ipip 336 ( 0.00%) 40542 ( 0.00%) 120.66
ip6 982 ( 0.01%) 132374 ( 0.00%) 134.80
other 5071 ( 0.04%) 712415 ( 0.01%) 140.49
frag 1560 ( 0.01%) 1401802 ( 0.02%) 898.59
ip6 29072 ( 0.24%) 9359125 ( 0.12%) 321.93
tcp6 3667 ( 0.03%) 594341 ( 0.01%) 162.08
http(c) 644 ( 0.01%) 66063 ( 0.00%) 102.58
smtp 854 ( 0.01%) 279787 ( 0.00%) 327.62
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
bgp 80 ( 0.00%) 9535 ( 0.00%) 119.19
other 2055 ( 0.02%) 235828 ( 0.00%) 114.76
udp6 16899 ( 0.14%) 3546373 ( 0.04%) 209.86
dns 15722 ( 0.13%) 3275392 ( 0.04%) 208.33
other 1177 ( 0.01%) 270981 ( 0.00%) 230.23
icmp6 5013 ( 0.04%) 686475 ( 0.01%) 136.94
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 3464 ( 0.03%) 4527992 ( 0.06%) 1307.16
tcpdump file: 200803200415.dump.gz (298.24 MB)