Traffic Trace Info
DumpFile: -
Id: 200803200515
StartTime: Thu Mar 20 05:15:01 2008
EndTime: Thu Mar 20 05:30:00 2008
TotalTime: 899.66 seconds
TotalCapSize: 653.88MB CapLen: 96 bytes
# of packets: 11913874 (6558.37MB)
AvgRate: 61.16Mbps stddev:12.97M
IP flow (unique src/dst pair) Information
# of flows: 660010 (avg. 18.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 1.9% 1.5% 1.4% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 363675
Top 10 bandwidth usage (bytes/total in %):
12.9% 12.5% 7.9% 6.4% 5.9% 5.4% 4.4% 3.2% 2.1% 2.0%
# of IPv6 addresses: 1533
Top 10 bandwidth usage (bytes/total in %):
52.6% 49.0% 8.6% 7.1% 5.2% 3.5% 3.1% 3.1% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200515.pktlen.png)
detailed numbers
[ 32- 63]: 2287367
[ 64- 127]: 3747634
[ 128- 255]: 830215
[ 256- 511]: 358610
[ 512- 1023]: 822471
[ 1024- 2047]: 3867577
Protocol Breakdown
![[protocol breakdown chart]](200803200515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11913874 (100.00%) 6876950690 (100.00%) 577.22
ip 11884058 ( 99.75%) 6867588733 ( 99.86%) 577.88
tcp 9408047 ( 78.97%) 6291003558 ( 91.48%) 668.68
http(s) 3350364 ( 28.12%) 4195647324 ( 61.01%) 1252.30
http(c) 1679966 ( 14.10%) 128964817 ( 1.88%) 76.77
squid 536287 ( 4.50%) 366864586 ( 5.33%) 684.08
smtp 622824 ( 5.23%) 98292546 ( 1.43%) 157.82
ftp 14137 ( 0.12%) 1539754 ( 0.02%) 108.92
pop3 3034 ( 0.03%) 1532534 ( 0.02%) 505.12
imap 1053 ( 0.01%) 286323 ( 0.00%) 271.91
telnet 2129 ( 0.02%) 137124 ( 0.00%) 64.41
ssh 1433949 ( 12.04%) 571111820 ( 8.30%) 398.28
dns 1990 ( 0.02%) 151551 ( 0.00%) 76.16
bgp 206 ( 0.00%) 61787 ( 0.00%) 299.94
napster 33 ( 0.00%) 2686 ( 0.00%) 81.39
realaud 11 ( 0.00%) 1652 ( 0.00%) 150.18
rtsp 56676 ( 0.48%) 53573999 ( 0.78%) 945.27
icecast 9966 ( 0.08%) 4279877 ( 0.06%) 429.45
other 1695421 ( 14.23%) 868555118 ( 12.63%) 512.29
udp 1918810 ( 16.11%) 528993728 ( 7.69%) 275.69
dns 981639 ( 8.24%) 148411826 ( 2.16%) 151.19
realaud 15083 ( 0.13%) 7850129 ( 0.11%) 520.46
halflif 19 ( 0.00%) 2205 ( 0.00%) 116.05
starcra 46 ( 0.00%) 8341 ( 0.00%) 181.33
everque 60 ( 0.00%) 9360 ( 0.00%) 156.00
unreal 14 ( 0.00%) 4278 ( 0.00%) 305.57
quake 3 ( 0.00%) 263 ( 0.00%) 87.67
cuseeme 5 ( 0.00%) 712 ( 0.00%) 142.40
other 921918 ( 7.74%) 372692571 ( 5.42%) 404.26
icmp 550512 ( 4.62%) 46668405 ( 0.68%) 84.77
ipip 334 ( 0.00%) 40876 ( 0.00%) 122.38
ip6 1036 ( 0.01%) 141127 ( 0.00%) 136.22
other 5319 ( 0.04%) 741039 ( 0.01%) 139.32
frag 1154 ( 0.01%) 980427 ( 0.01%) 849.59
ip6 29816 ( 0.25%) 9361957 ( 0.14%) 313.99
tcp6 4271 ( 0.04%) 648517 ( 0.01%) 151.84
http(c) 958 ( 0.01%) 119660 ( 0.00%) 124.91
smtp 792 ( 0.01%) 247338 ( 0.00%) 312.30
pop3 37 ( 0.00%) 3418 ( 0.00%) 92.38
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2414 ( 0.02%) 270917 ( 0.00%) 112.23
udp6 16888 ( 0.14%) 3400667 ( 0.05%) 201.37
dns 15355 ( 0.13%) 2945172 ( 0.04%) 191.81
other 1533 ( 0.01%) 455495 ( 0.01%) 297.13
icmp6 5122 ( 0.04%) 728183 ( 0.01%) 142.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3505 ( 0.03%) 4580510 ( 0.07%) 1306.85
tcpdump file: 200803200515.dump.gz (309.58 MB)