Traffic Trace Info
DumpFile: -
Id: 200803200645
StartTime: Thu Mar 20 06:45:00 2008
EndTime: Thu Mar 20 07:00:00 2008
TotalTime: 900.25 seconds
TotalCapSize: 612.30MB CapLen: 96 bytes
# of packets: 11072459 (7018.85MB)
AvgRate: 65.41Mbps stddev:29.20M
IP flow (unique src/dst pair) Information
# of flows: 623434 (avg. 17.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.4% 4.6% 2.3% 1.2% 0.9% 0.8% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 323795
Top 10 bandwidth usage (bytes/total in %):
20.2% 16.4% 10.3% 9.7% 7.5% 6.1% 4.7% 4.1% 3.0% 2.9%
# of IPv6 addresses: 1530
Top 10 bandwidth usage (bytes/total in %):
46.2% 41.7% 8.4% 7.3% 4.9% 3.5% 3.1% 2.8% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200645.pktlen.png)
detailed numbers
[ 32- 63]: 2278926
[ 64- 127]: 2785989
[ 128- 255]: 686845
[ 256- 511]: 352473
[ 512- 1023]: 623502
[ 1024- 2047]: 4344724
Protocol Breakdown
![[protocol breakdown chart]](200803200645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11072459 (100.00%) 7359796347 (100.00%) 664.69
ip 11043868 ( 99.74%) 7351838334 ( 99.89%) 665.69
tcp 9011397 ( 81.39%) 6989790524 ( 94.97%) 775.66
http(s) 2926004 ( 26.43%) 3686414444 ( 50.09%) 1259.88
http(c) 1506038 ( 13.60%) 116439648 ( 1.58%) 77.32
squid 747165 ( 6.75%) 590743984 ( 8.03%) 790.65
smtp 784964 ( 7.09%) 114833587 ( 1.56%) 146.29
ftp 24299 ( 0.22%) 2400006 ( 0.03%) 98.77
pop3 2996 ( 0.03%) 1248590 ( 0.02%) 416.75
imap 7995 ( 0.07%) 6761774 ( 0.09%) 845.75
telnet 2257 ( 0.02%) 165306 ( 0.00%) 73.24
ssh 360344 ( 3.25%) 348170793 ( 4.73%) 966.22
dns 2153 ( 0.02%) 160752 ( 0.00%) 74.66
bgp 191 ( 0.00%) 51065 ( 0.00%) 267.36
napster 161 ( 0.00%) 10503 ( 0.00%) 65.24
realaud 24 ( 0.00%) 2151 ( 0.00%) 89.62
rtsp 154 ( 0.00%) 33880 ( 0.00%) 220.00
icecast 6147 ( 0.06%) 2917870 ( 0.04%) 474.68
hotline 14 ( 0.00%) 1119 ( 0.00%) 79.93
other 2640490 ( 23.85%) 2119434992 ( 28.80%) 802.67
udp 1602658 ( 14.47%) 323094443 ( 4.39%) 201.60
dns 1014988 ( 9.17%) 150597968 ( 2.05%) 148.37
realaud 8704 ( 0.08%) 5455284 ( 0.07%) 626.76
halflif 32 ( 0.00%) 4385 ( 0.00%) 137.03
starcra 38 ( 0.00%) 7104 ( 0.00%) 186.95
everque 26 ( 0.00%) 4626 ( 0.00%) 177.92
unreal 17 ( 0.00%) 2814 ( 0.00%) 165.53
quake 8 ( 0.00%) 1041 ( 0.00%) 130.12
cuseeme 9 ( 0.00%) 1415 ( 0.00%) 157.22
other 578769 ( 5.23%) 166967553 ( 2.27%) 288.49
icmp 423469 ( 3.82%) 38061079 ( 0.52%) 89.88
ipip 286 ( 0.00%) 33776 ( 0.00%) 118.10
ip6 1037 ( 0.01%) 141848 ( 0.00%) 136.79
other 5021 ( 0.05%) 716664 ( 0.01%) 142.73
frag 19950 ( 0.18%) 14200169 ( 0.19%) 711.79
ip6 28589 ( 0.26%) 7957893 ( 0.11%) 278.36
tcp6 4324 ( 0.04%) 832057 ( 0.01%) 192.43
http(s) 112 ( 0.00%) 145899 ( 0.00%) 1302.67
http(c) 738 ( 0.01%) 78578 ( 0.00%) 106.47
smtp 973 ( 0.01%) 331184 ( 0.00%) 340.37
pop3 46 ( 0.00%) 4188 ( 0.00%) 91.04
bgp 103 ( 0.00%) 12360 ( 0.00%) 120.00
other 2352 ( 0.02%) 259848 ( 0.00%) 110.48
udp6 16772 ( 0.15%) 3145956 ( 0.04%) 187.57
dns 15456 ( 0.14%) 2778984 ( 0.04%) 179.80
other 1316 ( 0.01%) 366972 ( 0.00%) 278.85
icmp6 4954 ( 0.04%) 680729 ( 0.01%) 137.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2509 ( 0.02%) 3295071 ( 0.04%) 1313.30
tcpdump file: 200803200645.dump.gz (277.41 MB)