Traffic Trace Info
DumpFile: -
Id: 200803200845
StartTime: Thu Mar 20 08:45:00 2008
EndTime: Thu Mar 20 09:00:00 2008
TotalTime: 900.10 seconds
TotalCapSize: 567.00MB CapLen: 96 bytes
# of packets: 9973297 (6117.74MB)
AvgRate: 57.02Mbps stddev:9.62M
IP flow (unique src/dst pair) Information
# of flows: 648739 (avg. 15.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.2% 6.3% 3.3% 1.4% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 375567
Top 10 bandwidth usage (bytes/total in %):
23.9% 16.6% 7.2% 7.1% 6.9% 6.4% 5.4% 3.4% 3.3% 2.8%
# of IPv6 addresses: 1381
Top 10 bandwidth usage (bytes/total in %):
56.9% 52.3% 3.6% 3.3% 3.3% 3.1% 2.3% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200845.pktlen.png)
detailed numbers
[ 32- 63]: 1726385
[ 64- 127]: 3207478
[ 128- 255]: 665063
[ 256- 511]: 369977
[ 512- 1023]: 181189
[ 1024- 2047]: 3823205
Protocol Breakdown
![[protocol breakdown chart]](200803200845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9973297 (100.00%) 6414911717 (100.00%) 643.21
ip 9949039 ( 99.76%) 6407049932 ( 99.88%) 643.99
tcp 8308533 ( 83.31%) 6147511522 ( 95.83%) 739.90
http(s) 2880261 ( 28.88%) 4006739019 ( 62.46%) 1391.10
http(c) 1556874 ( 15.61%) 138681430 ( 2.16%) 89.08
squid 632696 ( 6.34%) 385356272 ( 6.01%) 609.07
smtp 682301 ( 6.84%) 100234800 ( 1.56%) 146.91
ftp 22895 ( 0.23%) 2374800 ( 0.04%) 103.73
pop3 4422 ( 0.04%) 2329570 ( 0.04%) 526.81
imap 4379 ( 0.04%) 2823779 ( 0.04%) 644.85
telnet 599 ( 0.01%) 38661 ( 0.00%) 64.54
ssh 428238 ( 4.29%) 414480960 ( 6.46%) 967.88
dns 1666 ( 0.02%) 118293 ( 0.00%) 71.00
bgp 193 ( 0.00%) 52917 ( 0.00%) 274.18
napster 166 ( 0.00%) 11115 ( 0.00%) 66.96
realaud 22 ( 0.00%) 3003 ( 0.00%) 136.50
rtsp 37332 ( 0.37%) 2615469 ( 0.04%) 70.06
icecast 6408 ( 0.06%) 3107895 ( 0.05%) 485.00
hotline 63 ( 0.00%) 74918 ( 0.00%) 1189.17
other 2050016 ( 20.56%) 1088468501 ( 16.97%) 530.96
udp 1290732 ( 12.94%) 226918286 ( 3.54%) 175.81
dns 908492 ( 9.11%) 134171815 ( 2.09%) 147.69
realaud 8698 ( 0.09%) 5452618 ( 0.08%) 626.88
halflif 15 ( 0.00%) 2158 ( 0.00%) 143.87
starcra 44 ( 0.00%) 7936 ( 0.00%) 180.36
everque 37 ( 0.00%) 4504 ( 0.00%) 121.73
unreal 12 ( 0.00%) 2104 ( 0.00%) 175.33
quake 6 ( 0.00%) 551 ( 0.00%) 91.83
cuseeme 4 ( 0.00%) 886 ( 0.00%) 221.50
other 373357 ( 3.74%) 87237676 ( 1.36%) 233.66
icmp 343257 ( 3.44%) 31709122 ( 0.49%) 92.38
ipip 308 ( 0.00%) 36417 ( 0.00%) 118.24
ip6 1046 ( 0.01%) 143457 ( 0.00%) 137.15
other 5163 ( 0.05%) 731128 ( 0.01%) 141.61
frag 1180 ( 0.01%) 1000783 ( 0.02%) 848.12
ip6 24258 ( 0.24%) 7861785 ( 0.12%) 324.09
tcp6 3718 ( 0.04%) 737910 ( 0.01%) 198.47
http(s) 111 ( 0.00%) 143691 ( 0.00%) 1294.51
http(c) 730 ( 0.01%) 73024 ( 0.00%) 100.03
smtp 672 ( 0.01%) 267531 ( 0.00%) 398.11
pop3 45 ( 0.00%) 4102 ( 0.00%) 91.16
bgp 110 ( 0.00%) 13276 ( 0.00%) 120.69
other 2050 ( 0.02%) 236286 ( 0.00%) 115.26
udp6 12417 ( 0.12%) 2331408 ( 0.04%) 187.76
dns 11320 ( 0.11%) 2092318 ( 0.03%) 184.83
other 1097 ( 0.01%) 239090 ( 0.00%) 217.95
icmp6 4982 ( 0.05%) 690905 ( 0.01%) 138.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3111 ( 0.03%) 4097482 ( 0.06%) 1317.09
tcpdump file: 200803200845.dump.gz (248.49 MB)