Traffic Trace Info
DumpFile: -
Id: 200803200445
StartTime: Thu Mar 20 04:45:01 2008
EndTime: Thu Mar 20 05:00:01 2008
TotalTime: 899.72 seconds
TotalCapSize: 673.92MB CapLen: 96 bytes
# of packets: 12339986 (7207.79MB)
AvgRate: 67.20Mbps stddev:10.25M
IP flow (unique src/dst pair) Information
# of flows: 696999 (avg. 17.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.4% 2.6% 1.8% 1.7% 1.7% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 394872
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.5% 7.7% 6.6% 6.6% 5.8% 5.5% 4.8% 3.3% 2.9%
# of IPv6 addresses: 1435
Top 10 bandwidth usage (bytes/total in %):
51.4% 47.6% 9.5% 7.4% 6.3% 4.0% 3.1% 3.1% 2.7% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200445.pktlen.png)
detailed numbers
[ 32- 63]: 2352525
[ 64- 127]: 3869936
[ 128- 255]: 867569
[ 256- 511]: 408821
[ 512- 1023]: 329104
[ 1024- 2047]: 4512031
Protocol Breakdown
![[protocol breakdown chart]](200803200445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12339986 (100.00%) 7557913359 (100.00%) 612.47
ip 12307885 ( 99.74%) 7548275299 ( 99.87%) 613.29
tcp 9534585 ( 77.27%) 6880800280 ( 91.04%) 721.67
http(s) 2868037 ( 23.24%) 3937157472 ( 52.09%) 1372.77
http(c) 1388247 ( 11.25%) 113406028 ( 1.50%) 81.69
squid 713935 ( 5.79%) 535685980 ( 7.09%) 750.33
smtp 691855 ( 5.61%) 100329668 ( 1.33%) 145.02
ftp 13044 ( 0.11%) 2646279 ( 0.04%) 202.87
pop3 2333 ( 0.02%) 993902 ( 0.01%) 426.02
imap 1046 ( 0.01%) 293563 ( 0.00%) 280.65
telnet 4095 ( 0.03%) 263076 ( 0.00%) 64.24
ssh 1783076 ( 14.45%) 1040301381 ( 13.76%) 583.43
dns 1795 ( 0.01%) 135012 ( 0.00%) 75.22
bgp 213 ( 0.00%) 65845 ( 0.00%) 309.13
napster 158 ( 0.00%) 83121 ( 0.00%) 526.08
realaud 21 ( 0.00%) 2512 ( 0.00%) 119.62
rtsp 63946 ( 0.52%) 57920279 ( 0.77%) 905.77
icecast 6492 ( 0.05%) 3086093 ( 0.04%) 475.37
other 1996291 ( 16.18%) 1088430009 ( 14.40%) 545.23
udp 2238484 ( 18.14%) 620584076 ( 8.21%) 277.23
dns 1079894 ( 8.75%) 163460836 ( 2.16%) 151.37
realaud 8726 ( 0.07%) 5452317 ( 0.07%) 624.84
halflif 18 ( 0.00%) 1733 ( 0.00%) 96.28
starcra 27 ( 0.00%) 5390 ( 0.00%) 199.63
everque 74 ( 0.00%) 11124 ( 0.00%) 150.32
unreal 12 ( 0.00%) 1616 ( 0.00%) 134.67
quake 2 ( 0.00%) 397 ( 0.00%) 198.50
other 1149698 ( 9.32%) 451621106 ( 5.98%) 392.82
icmp 528212 ( 4.28%) 45984407 ( 0.61%) 87.06
ipip 333 ( 0.00%) 39174 ( 0.00%) 117.64
ip6 960 ( 0.01%) 127188 ( 0.00%) 132.49
other 5311 ( 0.04%) 740174 ( 0.01%) 139.37
frag 1344 ( 0.01%) 1143086 ( 0.02%) 850.51
ip6 32101 ( 0.26%) 9638060 ( 0.13%) 300.24
tcp6 4018 ( 0.03%) 753332 ( 0.01%) 187.49
http(s) 111 ( 0.00%) 143691 ( 0.00%) 1294.51
http(c) 863 ( 0.01%) 91752 ( 0.00%) 106.32
smtp 834 ( 0.01%) 263694 ( 0.00%) 316.18
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 23 ( 0.00%) 3345 ( 0.00%) 145.43
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 2093 ( 0.02%) 241485 ( 0.00%) 115.38
udp6 19669 ( 0.16%) 3649196 ( 0.05%) 185.53
dns 18398 ( 0.15%) 3353435 ( 0.04%) 182.27
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1270 ( 0.01%) 295624 ( 0.00%) 232.77
icmp6 4872 ( 0.04%) 646373 ( 0.01%) 132.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3511 ( 0.03%) 4584943 ( 0.06%) 1305.88
tcpdump file: 200803200445.dump.gz (318.56 MB)