Traffic Trace Info
DumpFile: -
Id: 200803200930
StartTime: Thu Mar 20 09:30:01 2008
EndTime: Thu Mar 20 09:45:01 2008
TotalTime: 900.07 seconds
TotalCapSize: 528.64MB CapLen: 96 bytes
# of packets: 9391523 (5869.76MB)
AvgRate: 54.70Mbps stddev:8.72M
IP flow (unique src/dst pair) Information
# of flows: 517523 (avg. 18.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.2% 6.1% 1.9% 1.4% 1.2% 1.2% 1.2% 1.1% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 272461
Top 10 bandwidth usage (bytes/total in %):
23.3% 16.6% 7.3% 7.3% 7.0% 6.2% 5.6% 3.8% 3.1% 2.5%
# of IPv6 addresses: 1452
Top 10 bandwidth usage (bytes/total in %):
33.4% 27.6% 13.4% 11.3% 4.9% 4.4% 4.2% 4.2% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803200930.pktlen.png)
detailed numbers
[ 32- 63]: 1689882
[ 64- 127]: 2870742
[ 128- 255]: 660191
[ 256- 511]: 317093
[ 512- 1023]: 166675
[ 1024- 2047]: 3686940
Protocol Breakdown
![[protocol breakdown chart]](200803200930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9391523 (100.00%) 6154884735 (100.00%) 655.37
ip 9365889 ( 99.73%) 6148866642 ( 99.90%) 656.52
tcp 7684189 ( 81.82%) 5876382678 ( 95.48%) 764.74
http(s) 2819692 ( 30.02%) 3941515592 ( 64.04%) 1397.85
http(c) 1526988 ( 16.26%) 133118391 ( 2.16%) 87.18
squid 522748 ( 5.57%) 351413357 ( 5.71%) 672.24
smtp 624894 ( 6.65%) 105795066 ( 1.72%) 169.30
ftp 69980 ( 0.75%) 6723976 ( 0.11%) 96.08
pop3 5500 ( 0.06%) 3169595 ( 0.05%) 576.29
imap 3072 ( 0.03%) 692444 ( 0.01%) 225.40
telnet 1768 ( 0.02%) 113906 ( 0.00%) 64.43
ssh 415898 ( 4.43%) 398373513 ( 6.47%) 957.86
dns 3834 ( 0.04%) 1970370 ( 0.03%) 513.92
bgp 201 ( 0.00%) 60371 ( 0.00%) 300.35
napster 10 ( 0.00%) 1154 ( 0.00%) 115.40
realaud 32 ( 0.00%) 4299 ( 0.00%) 134.34
rtsp 503 ( 0.01%) 204379 ( 0.00%) 406.32
icecast 6468 ( 0.07%) 3084895 ( 0.05%) 476.95
other 1682302 ( 17.91%) 930123430 ( 15.11%) 552.89
udp 1334869 ( 14.21%) 239542929 ( 3.89%) 179.45
dns 908221 ( 9.67%) 131969618 ( 2.14%) 145.31
realaud 8704 ( 0.09%) 5455296 ( 0.09%) 626.76
halflif 18 ( 0.00%) 2161 ( 0.00%) 120.06
starcra 14 ( 0.00%) 2597 ( 0.00%) 185.50
everque 28 ( 0.00%) 4392 ( 0.00%) 156.86
unreal 8 ( 0.00%) 1186 ( 0.00%) 148.25
quake 3 ( 0.00%) 460 ( 0.00%) 153.33
other 417808 ( 4.45%) 102057880 ( 1.66%) 244.27
icmp 340168 ( 3.62%) 31974766 ( 0.52%) 94.00
ipip 370 ( 0.00%) 45747 ( 0.00%) 123.64
ip6 1069 ( 0.01%) 149853 ( 0.00%) 140.18
other 5224 ( 0.06%) 770669 ( 0.01%) 147.52
frag 2026 ( 0.02%) 1743965 ( 0.03%) 860.79
ip6 25634 ( 0.27%) 6018093 ( 0.10%) 234.77
tcp6 3862 ( 0.04%) 705437 ( 0.01%) 182.66
http(s) 91 ( 0.00%) 105332 ( 0.00%) 1157.49
http(c) 829 ( 0.01%) 85284 ( 0.00%) 102.88
smtp 829 ( 0.01%) 270250 ( 0.00%) 326.00
pop3 59 ( 0.00%) 5346 ( 0.00%) 90.61
bgp 110 ( 0.00%) 13982 ( 0.00%) 127.11
other 1944 ( 0.02%) 225243 ( 0.00%) 115.87
udp6 15205 ( 0.16%) 2941140 ( 0.05%) 193.43
dns 14168 ( 0.15%) 2681799 ( 0.04%) 189.29
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1036 ( 0.01%) 259204 ( 0.00%) 250.20
icmp6 5196 ( 0.06%) 724711 ( 0.01%) 139.47
ip6 1 ( 0.00%) 168 ( 0.00%) 168.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1340 ( 0.01%) 1642557 ( 0.03%) 1225.79
tcpdump file: 200803200930.dump.gz (234.60 MB)