Traffic Trace Info
DumpFile: -
Id: 200803200600
StartTime: Thu Mar 20 06:00:00 2008
EndTime: Thu Mar 20 06:15:00 2008
TotalTime: 899.69 seconds
TotalCapSize: 593.07MB CapLen: 96 bytes
# of packets: 10931258 (6124.08MB)
AvgRate: 57.09Mbps stddev:10.23M
IP flow (unique src/dst pair) Information
# of flows: 637220 (avg. 17.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.1% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 363204
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.2% 7.6% 7.1% 7.0% 6.3% 4.0% 3.9% 2.8% 2.7%
# of IPv6 addresses: 1399
Top 10 bandwidth usage (bytes/total in %):
52.5% 48.1% 11.0% 9.1% 4.1% 3.7% 2.8% 2.8% 2.6% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200600.pktlen.png)
detailed numbers
[ 32- 63]: 2253547
[ 64- 127]: 3121837
[ 128- 255]: 716639
[ 256- 511]: 394055
[ 512- 1023]: 878755
[ 1024- 2047]: 3566425
Protocol Breakdown
![[protocol breakdown chart]](200803200600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10931258 (100.00%) 6421564349 (100.00%) 587.45
ip 10899582 ( 99.71%) 6412048353 ( 99.85%) 588.28
tcp 8615342 ( 78.81%) 5925516180 ( 92.28%) 687.79
http(s) 3210263 ( 29.37%) 3884216315 ( 60.49%) 1209.94
http(c) 1680828 ( 15.38%) 125967817 ( 1.96%) 74.94
squid 661687 ( 6.05%) 503805760 ( 7.85%) 761.40
smtp 686839 ( 6.28%) 101149396 ( 1.58%) 147.27
ftp 17265 ( 0.16%) 1845005 ( 0.03%) 106.86
pop3 2205 ( 0.02%) 891248 ( 0.01%) 404.19
imap 1517 ( 0.01%) 431609 ( 0.01%) 284.51
telnet 2567 ( 0.02%) 165125 ( 0.00%) 64.33
ssh 663244 ( 6.07%) 441147969 ( 6.87%) 665.14
dns 2085 ( 0.02%) 217435 ( 0.00%) 104.29
bgp 209 ( 0.00%) 60393 ( 0.00%) 288.96
napster 136 ( 0.00%) 9424 ( 0.00%) 69.29
rtsp 98 ( 0.00%) 37874 ( 0.00%) 386.47
icecast 7537 ( 0.07%) 3843667 ( 0.06%) 509.97
hotline 7 ( 0.00%) 1057 ( 0.00%) 151.00
other 1678561 ( 15.36%) 861708446 ( 13.42%) 513.36
udp 1809771 ( 16.56%) 444403502 ( 6.92%) 245.56
dns 985976 ( 9.02%) 147165539 ( 2.29%) 149.26
realaud 8700 ( 0.08%) 5454383 ( 0.08%) 626.94
halflif 20 ( 0.00%) 2506 ( 0.00%) 125.30
starcra 26 ( 0.00%) 4673 ( 0.00%) 179.73
everque 41 ( 0.00%) 6302 ( 0.00%) 153.71
unreal 13 ( 0.00%) 1420 ( 0.00%) 109.23
quake 5 ( 0.00%) 1035 ( 0.00%) 207.00
cuseeme 8 ( 0.00%) 1957 ( 0.00%) 244.62
other 814917 ( 7.45%) 291715461 ( 4.54%) 357.97
icmp 467897 ( 4.28%) 41207844 ( 0.64%) 88.07
ipip 347 ( 0.00%) 41358 ( 0.00%) 119.19
ip6 1079 ( 0.01%) 152056 ( 0.00%) 140.92
other 5146 ( 0.05%) 727413 ( 0.01%) 141.36
frag 10951 ( 0.10%) 7994863 ( 0.12%) 730.06
ip6 31676 ( 0.29%) 9515996 ( 0.15%) 300.42
tcp6 4385 ( 0.04%) 720785 ( 0.01%) 164.38
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 834 ( 0.01%) 85051 ( 0.00%) 101.98
smtp 940 ( 0.01%) 346866 ( 0.01%) 369.01
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 109 ( 0.00%) 12779 ( 0.00%) 117.24
other 2464 ( 0.02%) 272435 ( 0.00%) 110.57
udp6 17976 ( 0.16%) 3428491 ( 0.05%) 190.73
dns 16834 ( 0.15%) 3186036 ( 0.05%) 189.26
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1141 ( 0.01%) 242318 ( 0.00%) 212.37
icmp6 5774 ( 0.05%) 778025 ( 0.01%) 134.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3510 ( 0.03%) 4584479 ( 0.07%) 1306.12
tcpdump file: 200803200600.dump.gz (280.15 MB)