Traffic Trace Info
DumpFile: -
Id: 200803200745
StartTime: Thu Mar 20 07:45:00 2008
EndTime: Thu Mar 20 08:00:01 2008
TotalTime: 901.00 seconds
TotalCapSize: 551.66MB CapLen: 96 bytes
# of packets: 10033981 (5687.53MB)
AvgRate: 52.95Mbps stddev:11.82M
IP flow (unique src/dst pair) Information
# of flows: 686522 (avg. 14.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 3.5% 3.0% 1.6% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 427152
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.9% 9.4% 9.4% 7.6% 7.0% 6.9% 3.6% 3.1% 2.6%
# of IPv6 addresses: 1879
Top 10 bandwidth usage (bytes/total in %):
51.5% 46.9% 8.7% 8.6% 7.2% 3.0% 2.9% 2.9% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200745.pktlen.png)
detailed numbers
[ 32- 63]: 2354439
[ 64- 127]: 2624956
[ 128- 255]: 628955
[ 256- 511]: 336901
[ 512- 1023]: 768807
[ 1024- 2047]: 3319923
Protocol Breakdown
![[protocol breakdown chart]](200803200745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10033981 (100.00%) 5963804028 (100.00%) 594.36
ip 10005930 ( 99.72%) 5954820134 ( 99.85%) 595.13
tcp 8278525 ( 82.50%) 5690253321 ( 95.41%) 687.35
http(s) 2807123 ( 27.98%) 3385969165 ( 56.78%) 1206.21
http(c) 1493393 ( 14.88%) 118430572 ( 1.99%) 79.30
squid 514722 ( 5.13%) 297089989 ( 4.98%) 577.19
smtp 583520 ( 5.82%) 131739663 ( 2.21%) 225.77
ftp 17968 ( 0.18%) 2034930 ( 0.03%) 113.25
pop3 8859 ( 0.09%) 6953685 ( 0.12%) 784.93
imap 1205 ( 0.01%) 445213 ( 0.01%) 369.47
telnet 920 ( 0.01%) 59259 ( 0.00%) 64.41
ssh 523294 ( 5.22%) 435018917 ( 7.29%) 831.31
dns 2101 ( 0.02%) 167700 ( 0.00%) 79.82
bgp 191 ( 0.00%) 51797 ( 0.00%) 271.19
napster 765 ( 0.01%) 46828 ( 0.00%) 61.21
realaud 46 ( 0.00%) 5632 ( 0.00%) 122.43
rtsp 439 ( 0.00%) 193429 ( 0.00%) 440.61
icecast 6932 ( 0.07%) 3292643 ( 0.06%) 474.99
other 2317038 ( 23.09%) 1308753359 ( 21.94%) 564.84
udp 1321623 ( 13.17%) 227102720 ( 3.81%) 171.84
dns 817646 ( 8.15%) 121955224 ( 2.04%) 149.15
realaud 8695 ( 0.09%) 5453599 ( 0.09%) 627.21
halflif 14 ( 0.00%) 1566 ( 0.00%) 111.86
starcra 31 ( 0.00%) 5917 ( 0.00%) 190.87
everque 26 ( 0.00%) 3988 ( 0.00%) 153.38
unreal 6 ( 0.00%) 741 ( 0.00%) 123.50
quake 5 ( 0.00%) 747 ( 0.00%) 149.40
cuseeme 9 ( 0.00%) 1703 ( 0.00%) 189.22
other 495138 ( 4.93%) 99640912 ( 1.67%) 201.24
icmp 399446 ( 3.98%) 36574636 ( 0.61%) 91.56
ipip 303 ( 0.00%) 37020 ( 0.00%) 122.18
ip6 987 ( 0.01%) 133489 ( 0.00%) 135.25
other 5046 ( 0.05%) 718948 ( 0.01%) 142.48
frag 1516 ( 0.02%) 1443205 ( 0.02%) 951.98
ip6 28051 ( 0.28%) 8983894 ( 0.15%) 320.27
tcp6 4416 ( 0.04%) 825551 ( 0.01%) 186.95
http(s) 112 ( 0.00%) 143753 ( 0.00%) 1283.51
http(c) 1112 ( 0.01%) 116063 ( 0.00%) 104.37
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 557 ( 0.01%) 274611 ( 0.00%) 493.02
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 114 ( 0.00%) 14393 ( 0.00%) 126.25
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 2482 ( 0.02%) 273245 ( 0.00%) 110.09
udp6 15167 ( 0.15%) 3197059 ( 0.05%) 210.79
dns 12920 ( 0.13%) 2464285 ( 0.04%) 190.73
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 564 ( 0.00%) 564.00
other 2245 ( 0.02%) 732073 ( 0.01%) 326.09
icmp6 5206 ( 0.05%) 737107 ( 0.01%) 141.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3232 ( 0.03%) 4220097 ( 0.07%) 1305.72
tcpdump file: 200803200745.dump.gz (250.98 MB)