Traffic Trace Info
DumpFile: -
Id: 200803200530
StartTime: Thu Mar 20 05:30:00 2008
EndTime: Thu Mar 20 05:45:00 2008
TotalTime: 899.66 seconds
TotalCapSize: 740.45MB CapLen: 96 bytes
# of packets: 13366813 (6662.19MB)
AvgRate: 62.12Mbps stddev:10.27M
IP flow (unique src/dst pair) Information
# of flows: 693994 (avg. 19.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.7% 1.9% 1.4% 1.4% 1.3% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 409368
Top 10 bandwidth usage (bytes/total in %):
11.9% 10.9% 7.1% 6.3% 6.0% 5.2% 3.8% 3.0% 2.9% 2.7%
# of IPv6 addresses: 1500
Top 10 bandwidth usage (bytes/total in %):
53.6% 49.7% 11.6% 9.1% 3.9% 3.6% 3.6% 2.4% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200530.pktlen.png)
detailed numbers
[ 32- 63]: 2567964
[ 64- 127]: 4637483
[ 128- 255]: 1045480
[ 256- 511]: 452876
[ 512- 1023]: 870156
[ 1024- 2047]: 3792854
Protocol Breakdown
![[protocol breakdown chart]](200803200530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13366813 (100.00%) 6985812189 (100.00%) 522.62
ip 13337470 ( 99.78%) 6976888279 ( 99.87%) 523.10
tcp 10530066 ( 78.78%) 6375708404 ( 91.27%) 605.48
http(s) 3169911 ( 23.71%) 3954252974 ( 56.60%) 1247.43
http(c) 1620415 ( 12.12%) 123966494 ( 1.77%) 76.50
squid 725592 ( 5.43%) 546265073 ( 7.82%) 752.85
smtp 638726 ( 4.78%) 97680098 ( 1.40%) 152.93
ftp 14133 ( 0.11%) 1671249 ( 0.02%) 118.25
pop3 2951 ( 0.02%) 1651259 ( 0.02%) 559.56
imap 1042 ( 0.01%) 285865 ( 0.00%) 274.34
telnet 3072 ( 0.02%) 197147 ( 0.00%) 64.18
ssh 2655405 ( 19.87%) 736242889 ( 10.54%) 277.26
dns 3943 ( 0.03%) 1884709 ( 0.03%) 477.99
bgp 203 ( 0.00%) 58129 ( 0.00%) 286.35
napster 145 ( 0.00%) 9233 ( 0.00%) 63.68
realaud 5 ( 0.00%) 530 ( 0.00%) 106.00
rtsp 253 ( 0.00%) 60581 ( 0.00%) 239.45
icecast 9390 ( 0.07%) 5569509 ( 0.08%) 593.13
hotline 5 ( 0.00%) 545 ( 0.00%) 109.00
other 1684800 ( 12.60%) 905907620 ( 12.97%) 537.69
udp 2236175 ( 16.73%) 548940084 ( 7.86%) 245.48
dns 964201 ( 7.21%) 143600653 ( 2.06%) 148.93
realaud 8727 ( 0.07%) 5465693 ( 0.08%) 626.30
halflif 34 ( 0.00%) 3642 ( 0.00%) 107.12
starcra 15 ( 0.00%) 2469 ( 0.00%) 164.60
everque 61 ( 0.00%) 9024 ( 0.00%) 147.93
unreal 16 ( 0.00%) 3042 ( 0.00%) 190.12
quake 12 ( 0.00%) 1744 ( 0.00%) 145.33
cuseeme 3 ( 0.00%) 471 ( 0.00%) 157.00
other 1263082 ( 9.45%) 399833923 ( 5.72%) 316.55
icmp 564366 ( 4.22%) 51287535 ( 0.73%) 90.88
ipip 343 ( 0.00%) 40968 ( 0.00%) 119.44
ip6 1107 ( 0.01%) 154374 ( 0.00%) 139.45
other 5413 ( 0.04%) 756914 ( 0.01%) 139.83
frag 1313 ( 0.01%) 1115352 ( 0.02%) 849.47
ip6 29343 ( 0.22%) 8923910 ( 0.13%) 304.12
tcp6 3898 ( 0.03%) 623767 ( 0.01%) 160.02
http(s) 54 ( 0.00%) 60626 ( 0.00%) 1122.70
http(c) 686 ( 0.01%) 69820 ( 0.00%) 101.78
smtp 766 ( 0.01%) 223379 ( 0.00%) 291.62
ftp 43 ( 0.00%) 3944 ( 0.00%) 91.72
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
dns 8 ( 0.00%) 1800 ( 0.00%) 225.00
bgp 78 ( 0.00%) 8801 ( 0.00%) 112.83
other 2229 ( 0.02%) 252269 ( 0.00%) 113.18
udp6 16811 ( 0.13%) 3158787 ( 0.05%) 187.90
dns 15589 ( 0.12%) 2849245 ( 0.04%) 182.77
other 1222 ( 0.01%) 309542 ( 0.00%) 253.31
icmp6 5196 ( 0.04%) 701716 ( 0.01%) 135.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3408 ( 0.03%) 4435560 ( 0.06%) 1301.51
tcpdump file: 200803200530.dump.gz (356.46 MB)