Traffic Trace Info
DumpFile: -
Id: 200803200500
StartTime: Thu Mar 20 05:00:01 2008
EndTime: Thu Mar 20 05:15:01 2008
TotalTime: 900.08 seconds
TotalCapSize: 643.44MB CapLen: 96 bytes
# of packets: 11744310 (6684.88MB)
AvgRate: 62.29Mbps stddev:8.84M
IP flow (unique src/dst pair) Information
# of flows: 629395 (avg. 18.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.3% 1.9% 1.9% 1.6% 1.5% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 349428
Top 10 bandwidth usage (bytes/total in %):
14.0% 13.0% 7.9% 6.2% 5.8% 5.0% 4.4% 3.6% 2.5% 2.4%
# of IPv6 addresses: 1656
Top 10 bandwidth usage (bytes/total in %):
49.3% 45.7% 7.1% 6.0% 5.8% 4.0% 3.9% 2.7% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200500.pktlen.png)
detailed numbers
[ 32- 63]: 2108918
[ 64- 127]: 3871515
[ 128- 255]: 884081
[ 256- 511]: 380283
[ 512- 1023]: 356462
[ 1024- 2047]: 4143051
Protocol Breakdown
![[protocol breakdown chart]](200803200500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11744310 (100.00%) 7009606183 (100.00%) 596.85
ip 11711909 ( 99.72%) 6999864822 ( 99.86%) 597.67
tcp 8890252 ( 75.70%) 6341752165 ( 90.47%) 713.34
http(s) 2886493 ( 24.58%) 3958374096 ( 56.47%) 1371.34
http(c) 1408325 ( 11.99%) 113813629 ( 1.62%) 80.81
squid 641208 ( 5.46%) 489949691 ( 6.99%) 764.10
smtp 663721 ( 5.65%) 106157654 ( 1.51%) 159.94
ftp 13701 ( 0.12%) 1813356 ( 0.03%) 132.35
pop3 2327 ( 0.02%) 1254149 ( 0.02%) 538.96
imap 1306 ( 0.01%) 382844 ( 0.01%) 293.14
telnet 2849 ( 0.02%) 183400 ( 0.00%) 64.37
ssh 1265788 ( 10.78%) 532431595 ( 7.60%) 420.63
dns 2265 ( 0.02%) 179440 ( 0.00%) 79.22
bgp 181 ( 0.00%) 51560 ( 0.00%) 284.86
napster 152 ( 0.00%) 11414 ( 0.00%) 75.09
rtsp 60089 ( 0.51%) 55420569 ( 0.79%) 922.31
icecast 6563 ( 0.06%) 3090121 ( 0.04%) 470.84
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1935278 ( 16.48%) 1078638285 ( 15.39%) 557.36
udp 2231336 ( 19.00%) 607627586 ( 8.67%) 272.32
dns 1117398 ( 9.51%) 173569847 ( 2.48%) 155.33
realaud 10495 ( 0.09%) 5976807 ( 0.09%) 569.49
halflif 20 ( 0.00%) 1777 ( 0.00%) 88.85
starcra 13 ( 0.00%) 3398 ( 0.00%) 261.38
everque 67 ( 0.00%) 10058 ( 0.00%) 150.12
unreal 22 ( 0.00%) 2865 ( 0.00%) 130.23
quake 10 ( 0.00%) 2201 ( 0.00%) 220.10
cuseeme 7 ( 0.00%) 1493 ( 0.00%) 213.29
other 1103262 ( 9.39%) 428019854 ( 6.11%) 387.96
icmp 583922 ( 4.97%) 49578670 ( 0.71%) 84.91
ipip 339 ( 0.00%) 40890 ( 0.00%) 120.62
ip6 1106 ( 0.01%) 156829 ( 0.00%) 141.80
other 4954 ( 0.04%) 708682 ( 0.01%) 143.05
frag 1682 ( 0.01%) 1422788 ( 0.02%) 845.89
ip6 32401 ( 0.28%) 9741361 ( 0.14%) 300.65
tcp6 4742 ( 0.04%) 1077268 ( 0.02%) 227.18
http(s) 227 ( 0.00%) 265979 ( 0.00%) 1171.71
http(c) 1374 ( 0.01%) 181140 ( 0.00%) 131.83
smtp 863 ( 0.01%) 372783 ( 0.01%) 431.96
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 2181 ( 0.02%) 247716 ( 0.00%) 113.58
udp6 18891 ( 0.16%) 3507509 ( 0.05%) 185.67
dns 17512 ( 0.15%) 3140220 ( 0.04%) 179.32
everque 4 ( 0.00%) 945 ( 0.00%) 236.25
other 1375 ( 0.01%) 366344 ( 0.01%) 266.43
icmp6 5323 ( 0.05%) 709070 ( 0.01%) 133.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3415 ( 0.03%) 4443434 ( 0.06%) 1301.15
tcpdump file: 200803200500.dump.gz (305.26 MB)