Traffic Trace Info
DumpFile: -
Id: 200803200915
StartTime: Thu Mar 20 09:15:01 2008
EndTime: Thu Mar 20 09:30:01 2008
TotalTime: 900.09 seconds
TotalCapSize: 554.57MB CapLen: 96 bytes
# of packets: 9950343 (6396.45MB)
AvgRate: 59.63Mbps stddev:10.83M
IP flow (unique src/dst pair) Information
# of flows: 617608 (avg. 16.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.5% 11.8% 5.8% 1.5% 1.2% 0.8% 0.8% 0.8% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 354519
Top 10 bandwidth usage (bytes/total in %):
21.2% 15.3% 13.8% 12.1% 8.1% 7.1% 6.4% 5.9% 3.0% 2.8%
# of IPv6 addresses: 1530
Top 10 bandwidth usage (bytes/total in %):
39.4% 33.4% 8.5% 8.4% 7.4% 3.3% 3.2% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200915.pktlen.png)
detailed numbers
[ 32- 63]: 2008769
[ 64- 127]: 2730093
[ 128- 255]: 656163
[ 256- 511]: 348415
[ 512- 1023]: 165990
[ 1024- 2047]: 4040913
Protocol Breakdown
![[protocol breakdown chart]](200803200915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9950343 (100.00%) 6707160570 (100.00%) 674.06
ip 9927950 ( 99.77%) 6701763807 ( 99.92%) 675.04
tcp 8241925 ( 82.83%) 6406084877 ( 95.51%) 777.26
http(s) 2706872 ( 27.20%) 3768886575 ( 56.19%) 1392.34
http(c) 1423259 ( 14.30%) 130005723 ( 1.94%) 91.34
squid 483810 ( 4.86%) 310046625 ( 4.62%) 640.84
smtp 623539 ( 6.27%) 91101339 ( 1.36%) 146.10
ftp 30791 ( 0.31%) 5115577 ( 0.08%) 166.14
pop3 3221 ( 0.03%) 999488 ( 0.01%) 310.30
imap 3635 ( 0.04%) 773982 ( 0.01%) 212.92
telnet 1671 ( 0.02%) 107590 ( 0.00%) 64.39
ssh 408313 ( 4.10%) 397779102 ( 5.93%) 974.20
dns 2309 ( 0.02%) 164360 ( 0.00%) 71.18
bgp 341 ( 0.00%) 172119 ( 0.00%) 504.75
napster 33 ( 0.00%) 3291 ( 0.00%) 99.73
realaud 51 ( 0.00%) 6758 ( 0.00%) 132.51
rtsp 4453 ( 0.04%) 428787 ( 0.01%) 96.29
icecast 6486 ( 0.07%) 3099804 ( 0.05%) 477.92
other 2542887 ( 25.56%) 1697378517 ( 25.31%) 667.50
udp 1352104 ( 13.59%) 263698067 ( 3.93%) 195.03
dns 902150 ( 9.07%) 133516928 ( 1.99%) 148.00
realaud 8689 ( 0.09%) 5450335 ( 0.08%) 627.27
halflif 18 ( 0.00%) 2193 ( 0.00%) 121.83
starcra 32 ( 0.00%) 5689 ( 0.00%) 177.78
everque 24 ( 0.00%) 3579 ( 0.00%) 149.12
unreal 18 ( 0.00%) 2570 ( 0.00%) 142.78
quake 3 ( 0.00%) 311 ( 0.00%) 103.67
cuseeme 3 ( 0.00%) 798 ( 0.00%) 266.00
other 441141 ( 4.43%) 124705568 ( 1.86%) 282.69
icmp 326994 ( 3.29%) 31014820 ( 0.46%) 94.85
ipip 318 ( 0.00%) 37368 ( 0.00%) 117.51
ip6 1050 ( 0.01%) 144102 ( 0.00%) 137.24
other 5559 ( 0.06%) 784573 ( 0.01%) 141.14
frag 18663 ( 0.19%) 24542072 ( 0.37%) 1315.01
ip6 22393 ( 0.23%) 5396763 ( 0.08%) 241.00
tcp6 3214 ( 0.03%) 410101 ( 0.01%) 127.60
http(c) 676 ( 0.01%) 69445 ( 0.00%) 102.73
smtp 228 ( 0.00%) 78623 ( 0.00%) 344.84
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
bgp 101 ( 0.00%) 11946 ( 0.00%) 118.28
other 2175 ( 0.02%) 246959 ( 0.00%) 113.54
udp6 12921 ( 0.13%) 2520849 ( 0.04%) 195.10
dns 11462 ( 0.12%) 2095679 ( 0.03%) 182.84
other 1459 ( 0.01%) 425170 ( 0.01%) 291.41
icmp6 4908 ( 0.05%) 671511 ( 0.01%) 136.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1319 ( 0.01%) 1790086 ( 0.03%) 1357.15
tcpdump file: 200803200915.dump.gz (244.42 MB)