Traffic Trace Info
DumpFile: -
Id: 200803201000
StartTime: Thu Mar 20 10:00:00 2008
EndTime: Thu Mar 20 10:15:00 2008
TotalTime: 899.95 seconds
TotalCapSize: 515.11MB CapLen: 96 bytes
# of packets: 9257709 (5547.04MB)
AvgRate: 51.72Mbps stddev:10.26M
IP flow (unique src/dst pair) Information
# of flows: 554732 (avg. 16.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 6.5% 2.1% 1.9% 1.9% 1.8% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 308845
Top 10 bandwidth usage (bytes/total in %):
15.6% 8.5% 7.3% 7.1% 7.1% 6.8% 6.6% 5.4% 4.8% 3.6%
# of IPv6 addresses: 1359
Top 10 bandwidth usage (bytes/total in %):
44.4% 38.3% 7.5% 7.0% 4.2% 3.7% 3.2% 3.2% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201000.pktlen.png)
detailed numbers
[ 32- 63]: 1831333
[ 64- 127]: 2723281
[ 128- 255]: 679665
[ 256- 511]: 426888
[ 512- 1023]: 175393
[ 1024- 2047]: 3421149
Protocol Breakdown
![[protocol breakdown chart]](200803201000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9257709 (100.00%) 5816495337 (100.00%) 628.29
ip 9235928 ( 99.76%) 5811051362 ( 99.91%) 629.18
tcp 7453264 ( 80.51%) 5501647164 ( 94.59%) 738.15
http(s) 2543034 ( 27.47%) 3405783583 ( 58.55%) 1339.26
http(c) 1404908 ( 15.18%) 124100821 ( 2.13%) 88.33
squid 408773 ( 4.42%) 247759636 ( 4.26%) 606.11
smtp 617283 ( 6.67%) 98296849 ( 1.69%) 159.24
ftp 69806 ( 0.75%) 5722581 ( 0.10%) 81.98
pop3 5737 ( 0.06%) 2491244 ( 0.04%) 434.24
imap 3710 ( 0.04%) 884248 ( 0.02%) 238.34
telnet 942 ( 0.01%) 60460 ( 0.00%) 64.18
ssh 395773 ( 4.28%) 387184762 ( 6.66%) 978.30
dns 1891 ( 0.02%) 136689 ( 0.00%) 72.28
bgp 199 ( 0.00%) 63296 ( 0.00%) 318.07
napster 110 ( 0.00%) 6817 ( 0.00%) 61.97
rtsp 561 ( 0.01%) 242870 ( 0.00%) 432.92
icecast 6419 ( 0.07%) 3074265 ( 0.05%) 478.93
other 1994116 ( 21.54%) 1225838923 ( 21.08%) 614.73
udp 1445408 ( 15.61%) 277015367 ( 4.76%) 191.65
dns 892478 ( 9.64%) 131350513 ( 2.26%) 147.18
realaud 8706 ( 0.09%) 5455232 ( 0.09%) 626.61
halflif 10 ( 0.00%) 1627 ( 0.00%) 162.70
starcra 20 ( 0.00%) 3448 ( 0.00%) 172.40
everque 32 ( 0.00%) 4479 ( 0.00%) 139.97
unreal 7 ( 0.00%) 913 ( 0.00%) 130.43
quake 10 ( 0.00%) 816 ( 0.00%) 81.60
cuseeme 3 ( 0.00%) 250 ( 0.00%) 83.33
other 544104 ( 5.88%) 140183582 ( 2.41%) 257.64
icmp 330714 ( 3.57%) 31465763 ( 0.54%) 95.14
ipip 378 ( 0.00%) 46804 ( 0.00%) 123.82
ip6 1054 ( 0.01%) 145602 ( 0.00%) 138.14
other 5110 ( 0.06%) 730662 ( 0.01%) 142.99
frag 1299 ( 0.01%) 1096975 ( 0.02%) 844.48
ip6 21781 ( 0.24%) 5443975 ( 0.09%) 249.94
tcp6 3030 ( 0.03%) 403364 ( 0.01%) 133.12
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 789 ( 0.01%) 80023 ( 0.00%) 101.42
smtp 337 ( 0.00%) 97298 ( 0.00%) 288.72
pop3 45 ( 0.00%) 3954 ( 0.00%) 87.87
dns 11 ( 0.00%) 1528 ( 0.00%) 138.91
bgp 99 ( 0.00%) 11338 ( 0.00%) 114.53
other 1744 ( 0.02%) 208611 ( 0.00%) 119.62
udp6 12009 ( 0.13%) 2230790 ( 0.04%) 185.76
dns 10986 ( 0.12%) 2011418 ( 0.03%) 183.09
other 1023 ( 0.01%) 219372 ( 0.00%) 214.44
icmp6 5194 ( 0.06%) 733769 ( 0.01%) 141.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1518 ( 0.02%) 2071972 ( 0.04%) 1364.94
tcpdump file: 200803201000.dump.gz (233.62 MB)