Traffic Trace Info
DumpFile: -
Id: 200803200730
StartTime: Thu Mar 20 07:30:01 2008
EndTime: Thu Mar 20 07:45:00 2008
TotalTime: 899.21 seconds
TotalCapSize: 558.90MB CapLen: 96 bytes
# of packets: 10076704 (5534.28MB)
AvgRate: 51.64Mbps stddev:8.09M
IP flow (unique src/dst pair) Information
# of flows: 764995 (avg. 13.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 3.7% 2.0% 1.8% 1.5% 1.5% 1.3% 1.2% 1.2% 0.8%
IP address Information
# of IPv4 addresses: 426908
Top 10 bandwidth usage (bytes/total in %):
10.4% 8.4% 8.1% 7.9% 7.6% 7.0% 6.1% 3.8% 3.8% 2.9%
# of IPv6 addresses: 1497
Top 10 bandwidth usage (bytes/total in %):
50.8% 45.9% 9.2% 7.5% 4.8% 3.1% 2.7% 2.3% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200730.pktlen.png)
detailed numbers
[ 32- 63]: 2200094
[ 64- 127]: 2979354
[ 128- 255]: 621682
[ 256- 511]: 331945
[ 512- 1023]: 737497
[ 1024- 2047]: 3206132
Protocol Breakdown
![[protocol breakdown chart]](200803200730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10076704 (100.00%) 5803111150 (100.00%) 575.89
ip 10052086 ( 99.76%) 5795991102 ( 99.88%) 576.60
tcp 8155959 ( 80.94%) 5522779936 ( 95.17%) 677.15
http(s) 2700015 ( 26.79%) 3268183265 ( 56.32%) 1210.43
http(c) 1508439 ( 14.97%) 118729391 ( 2.05%) 78.71
squid 663329 ( 6.58%) 461900781 ( 7.96%) 696.34
smtp 508100 ( 5.04%) 83007187 ( 1.43%) 163.37
ftp 17068 ( 0.17%) 1872350 ( 0.03%) 109.70
pop3 35893 ( 0.36%) 31863954 ( 0.55%) 887.75
imap 1606 ( 0.02%) 702358 ( 0.01%) 437.33
telnet 468 ( 0.00%) 30354 ( 0.00%) 64.86
ssh 581448 ( 5.77%) 431616216 ( 7.44%) 742.31
dns 3940 ( 0.04%) 1889985 ( 0.03%) 479.69
bgp 202 ( 0.00%) 64650 ( 0.00%) 320.05
napster 320 ( 0.00%) 34829 ( 0.00%) 108.84
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 373 ( 0.00%) 178400 ( 0.00%) 478.28
icecast 6642 ( 0.07%) 3216013 ( 0.06%) 484.19
hotline 11 ( 0.00%) 1083 ( 0.00%) 98.45
other 2128101 ( 21.12%) 1119488880 ( 19.29%) 526.05
udp 1347928 ( 13.38%) 225917720 ( 3.89%) 167.60
dns 875179 ( 8.69%) 128248961 ( 2.21%) 146.54
realaud 8695 ( 0.09%) 5448370 ( 0.09%) 626.61
halflif 19 ( 0.00%) 3854 ( 0.00%) 202.84
starcra 22 ( 0.00%) 3280 ( 0.00%) 149.09
everque 17 ( 0.00%) 2463 ( 0.00%) 144.88
unreal 14 ( 0.00%) 2034 ( 0.00%) 145.29
quake 4 ( 0.00%) 321 ( 0.00%) 80.25
cuseeme 3 ( 0.00%) 466 ( 0.00%) 155.33
other 463935 ( 4.60%) 92173949 ( 1.59%) 198.68
icmp 541534 ( 5.37%) 46360250 ( 0.80%) 85.61
ipip 356 ( 0.00%) 42676 ( 0.00%) 119.88
ip6 1083 ( 0.01%) 150392 ( 0.00%) 138.87
other 5226 ( 0.05%) 740128 ( 0.01%) 141.62
frag 1199 ( 0.01%) 1082623 ( 0.02%) 902.94
ip6 24618 ( 0.24%) 7120048 ( 0.12%) 289.22
tcp6 3648 ( 0.04%) 641989 ( 0.01%) 175.98
http(s) 67 ( 0.00%) 64276 ( 0.00%) 959.34
http(c) 760 ( 0.01%) 82706 ( 0.00%) 108.82
smtp 613 ( 0.01%) 241824 ( 0.00%) 394.49
pop3 55 ( 0.00%) 5046 ( 0.00%) 91.75
bgp 113 ( 0.00%) 13471 ( 0.00%) 119.21
other 2040 ( 0.02%) 234666 ( 0.00%) 115.03
udp6 13152 ( 0.13%) 2480203 ( 0.04%) 188.58
dns 11935 ( 0.12%) 2152063 ( 0.04%) 180.32
other 1217 ( 0.01%) 328140 ( 0.01%) 269.63
icmp6 5285 ( 0.05%) 739629 ( 0.01%) 139.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2503 ( 0.02%) 3254147 ( 0.06%) 1300.10
tcpdump file: 200803200730.dump.gz (256.12 MB)