Traffic Trace Info
DumpFile: -
Id: 200803200545
StartTime: Thu Mar 20 05:45:00 2008
EndTime: Thu Mar 20 06:00:00 2008
TotalTime: 900.47 seconds
TotalCapSize: 628.52MB CapLen: 96 bytes
# of packets: 11473921 (6024.25MB)
AvgRate: 56.09Mbps stddev:9.59M
IP flow (unique src/dst pair) Information
# of flows: 614707 (avg. 18.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.1% 1.7% 1.5% 1.2% 1.2% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 341519
Top 10 bandwidth usage (bytes/total in %):
13.3% 11.7% 8.2% 7.0% 6.3% 5.1% 4.0% 3.2% 2.5% 2.4%
# of IPv6 addresses: 1372
Top 10 bandwidth usage (bytes/total in %):
53.9% 50.2% 7.5% 6.7% 3.2% 2.7% 2.6% 2.5% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200545.pktlen.png)
detailed numbers
[ 32- 63]: 2419266
[ 64- 127]: 3654160
[ 128- 255]: 828707
[ 256- 511]: 345336
[ 512- 1023]: 674688
[ 1024- 2047]: 3551764
Protocol Breakdown
![[protocol breakdown chart]](200803200545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11473921 (100.00%) 6316885707 (100.00%) 550.54
ip 11445949 ( 99.76%) 6307749955 ( 99.86%) 551.09
tcp 8815221 ( 76.83%) 5763820783 ( 91.24%) 653.85
http(s) 2945353 ( 25.67%) 3696987352 ( 58.53%) 1255.19
http(c) 1709291 ( 14.90%) 128392141 ( 2.03%) 75.11
squid 504632 ( 4.40%) 324027460 ( 5.13%) 642.11
smtp 686372 ( 5.98%) 105405325 ( 1.67%) 153.57
ftp 14514 ( 0.13%) 1666872 ( 0.03%) 114.85
pop3 2757 ( 0.02%) 1803699 ( 0.03%) 654.23
imap 1083 ( 0.01%) 316391 ( 0.01%) 292.14
telnet 2630 ( 0.02%) 169240 ( 0.00%) 64.35
ssh 1217663 ( 10.61%) 517642989 ( 8.19%) 425.11
dns 1941 ( 0.02%) 144991 ( 0.00%) 74.70
bgp 223 ( 0.00%) 69268 ( 0.00%) 310.62
napster 101 ( 0.00%) 6592 ( 0.00%) 65.27
realaud 15 ( 0.00%) 2297 ( 0.00%) 153.13
rtsp 171 ( 0.00%) 30486 ( 0.00%) 178.28
icecast 7963 ( 0.07%) 4087183 ( 0.06%) 513.27
hotline 9 ( 0.00%) 540 ( 0.00%) 60.00
other 1720499 ( 14.99%) 983067717 ( 15.56%) 571.39
udp 2025549 ( 17.65%) 490617956 ( 7.77%) 242.21
dns 940074 ( 8.19%) 142191700 ( 2.25%) 151.26
realaud 8718 ( 0.08%) 5455777 ( 0.09%) 625.81
halflif 28 ( 0.00%) 3716 ( 0.00%) 132.71
starcra 37 ( 0.00%) 7269 ( 0.00%) 196.46
everque 51 ( 0.00%) 7914 ( 0.00%) 155.18
unreal 18 ( 0.00%) 2588 ( 0.00%) 143.78
quake 4 ( 0.00%) 975 ( 0.00%) 243.75
cuseeme 10 ( 0.00%) 2375 ( 0.00%) 237.50
other 1076594 ( 9.38%) 342933381 ( 5.43%) 318.54
icmp 598791 ( 5.22%) 52420749 ( 0.83%) 87.54
ipip 318 ( 0.00%) 39454 ( 0.00%) 124.07
ip6 1004 ( 0.01%) 136329 ( 0.00%) 135.79
other 5066 ( 0.04%) 714684 ( 0.01%) 141.07
frag 1216 ( 0.01%) 1028358 ( 0.02%) 845.69
ip6 27972 ( 0.24%) 9135752 ( 0.14%) 326.60
tcp6 4944 ( 0.04%) 1143103 ( 0.02%) 231.21
http(s) 155 ( 0.00%) 196780 ( 0.00%) 1269.55
http(c) 850 ( 0.01%) 85594 ( 0.00%) 100.70
smtp 1389 ( 0.01%) 576987 ( 0.01%) 415.40
pop3 46 ( 0.00%) 4188 ( 0.00%) 91.04
ssh 4 ( 0.00%) 392 ( 0.00%) 98.00
dns 4 ( 0.00%) 751 ( 0.00%) 187.75
bgp 80 ( 0.00%) 9261 ( 0.00%) 115.76
other 2416 ( 0.02%) 269150 ( 0.00%) 111.40
udp6 14614 ( 0.13%) 2738403 ( 0.04%) 187.38
dns 13380 ( 0.12%) 2447683 ( 0.04%) 182.94
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 2 ( 0.00%) 232 ( 0.00%) 116.00
other 1231 ( 0.01%) 290351 ( 0.00%) 235.87
icmp6 4879 ( 0.04%) 668544 ( 0.01%) 137.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3505 ( 0.03%) 4581622 ( 0.07%) 1307.17
tcpdump file: 200803200545.dump.gz (296.57 MB)