Traffic Trace Info
DumpFile: -
Id: 200803200800
StartTime: Thu Mar 20 08:00:01 2008
EndTime: Thu Mar 20 08:15:00 2008
TotalTime: 899.29 seconds
TotalCapSize: 535.21MB CapLen: 96 bytes
# of packets: 9497349 (6054.38MB)
AvgRate: 56.48Mbps stddev:12.76M
IP flow (unique src/dst pair) Information
# of flows: 523350 (avg. 18.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 6.6% 3.1% 1.8% 1.7% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 269092
Top 10 bandwidth usage (bytes/total in %):
18.6% 11.1% 8.6% 8.1% 7.2% 7.1% 6.7% 3.2% 3.1% 3.0%
# of IPv6 addresses: 1517
Top 10 bandwidth usage (bytes/total in %):
52.7% 48.1% 10.8% 8.8% 4.4% 3.7% 2.9% 2.9% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200800.pktlen.png)
detailed numbers
[ 32- 63]: 1653024
[ 64- 127]: 2880204
[ 128- 255]: 632130
[ 256- 511]: 323432
[ 512- 1023]: 197532
[ 1024- 2047]: 3811027
Protocol Breakdown
![[protocol breakdown chart]](200803200800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9497349 (100.00%) 6348480583 (100.00%) 668.45
ip 9471156 ( 99.72%) 6340688058 ( 99.88%) 669.47
tcp 7821886 ( 82.36%) 6074263779 ( 95.68%) 776.57
http(s) 2614320 ( 27.53%) 3632185455 ( 57.21%) 1389.34
http(c) 1291291 ( 13.60%) 105741297 ( 1.67%) 81.89
squid 712198 ( 7.50%) 522857391 ( 8.24%) 734.15
smtp 613119 ( 6.46%) 95918137 ( 1.51%) 156.44
ftp 21767 ( 0.23%) 3347411 ( 0.05%) 153.78
pop3 4134 ( 0.04%) 2409855 ( 0.04%) 582.94
imap 2336 ( 0.02%) 781157 ( 0.01%) 334.40
telnet 1301 ( 0.01%) 83647 ( 0.00%) 64.29
ssh 480879 ( 5.06%) 436203840 ( 6.87%) 907.10
dns 2341 ( 0.02%) 198639 ( 0.00%) 84.85
bgp 218 ( 0.00%) 76015 ( 0.00%) 348.69
napster 290 ( 0.00%) 17743 ( 0.00%) 61.18
realaud 1 ( 0.00%) 66 ( 0.00%) 66.00
rtsp 400 ( 0.00%) 165272 ( 0.00%) 413.18
icecast 6578 ( 0.07%) 3121233 ( 0.05%) 474.50
hotline 12 ( 0.00%) 814 ( 0.00%) 67.83
other 2070699 ( 21.80%) 1271155687 ( 20.02%) 613.88
udp 1301628 ( 13.71%) 233688130 ( 3.68%) 179.54
dns 898095 ( 9.46%) 135199837 ( 2.13%) 150.54
realaud 8697 ( 0.09%) 5452190 ( 0.09%) 626.90
halflif 17 ( 0.00%) 2572 ( 0.00%) 151.29
starcra 15 ( 0.00%) 2753 ( 0.00%) 183.53
everque 9 ( 0.00%) 1722 ( 0.00%) 191.33
unreal 9 ( 0.00%) 1071 ( 0.00%) 119.00
quake 4 ( 0.00%) 310 ( 0.00%) 77.50
cuseeme 6 ( 0.00%) 2328 ( 0.00%) 388.00
other 394699 ( 4.16%) 92994582 ( 1.46%) 235.61
icmp 340799 ( 3.59%) 31779277 ( 0.50%) 93.25
ipip 375 ( 0.00%) 44868 ( 0.00%) 119.65
ip6 1125 ( 0.01%) 157313 ( 0.00%) 139.83
other 5343 ( 0.06%) 754691 ( 0.01%) 141.25
frag 1870 ( 0.02%) 1633231 ( 0.03%) 873.39
ip6 26193 ( 0.28%) 7792525 ( 0.12%) 297.50
tcp6 3596 ( 0.04%) 492125 ( 0.01%) 136.85
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 924 ( 0.01%) 96527 ( 0.00%) 104.47
smtp 404 ( 0.00%) 137680 ( 0.00%) 340.79
pop3 43 ( 0.00%) 3772 ( 0.00%) 87.72
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 98 ( 0.00%) 11317 ( 0.00%) 115.48
other 2115 ( 0.02%) 241582 ( 0.00%) 114.22
udp6 14487 ( 0.15%) 2827707 ( 0.04%) 195.19
dns 13117 ( 0.14%) 2498918 ( 0.04%) 190.51
other 1370 ( 0.01%) 328789 ( 0.01%) 239.99
icmp6 5218 ( 0.05%) 732040 ( 0.01%) 140.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2861 ( 0.03%) 3736437 ( 0.06%) 1305.99
tcpdump file: 200803200800.dump.gz (237.92 MB)