Traffic Trace Info
DumpFile: -
Id: 200803201015
StartTime: Thu Mar 20 10:15:00 2008
EndTime: Thu Mar 20 10:30:00 2008
TotalTime: 899.96 seconds
TotalCapSize: 547.14MB CapLen: 96 bytes
# of packets: 9888470 (5472.83MB)
AvgRate: 51.02Mbps stddev:10.05M
IP flow (unique src/dst pair) Information
# of flows: 651097 (avg. 15.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.6% 2.2% 1.9% 1.8% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 362176
Top 10 bandwidth usage (bytes/total in %):
7.5% 7.1% 6.9% 6.8% 6.7% 6.3% 5.5% 3.8% 3.5% 2.9%
# of IPv6 addresses: 1369
Top 10 bandwidth usage (bytes/total in %):
36.6% 30.7% 14.7% 12.1% 5.1% 4.5% 3.7% 3.7% 3.6% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201015.pktlen.png)
detailed numbers
[ 32- 63]: 2180527
[ 64- 127]: 2971573
[ 128- 255]: 747016
[ 256- 511]: 480945
[ 512- 1023]: 188627
[ 1024- 2047]: 3319782
Protocol Breakdown
![[protocol breakdown chart]](200803201015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9888470 (100.00%) 5738682774 (100.00%) 580.34
ip 9864685 ( 99.76%) 5733135372 ( 99.90%) 581.18
tcp 7922213 ( 80.12%) 5393905957 ( 93.99%) 680.86
http(s) 2490390 ( 25.18%) 3297971888 ( 57.47%) 1324.28
http(c) 1563315 ( 15.81%) 155170758 ( 2.70%) 99.26
squid 500634 ( 5.06%) 284455175 ( 4.96%) 568.19
smtp 739215 ( 7.48%) 123730561 ( 2.16%) 167.38
nntp 4 ( 0.00%) 246 ( 0.00%) 61.50
ftp 53247 ( 0.54%) 4844835 ( 0.08%) 90.99
pop3 7025 ( 0.07%) 3357232 ( 0.06%) 477.90
imap 4482 ( 0.05%) 856811 ( 0.01%) 191.17
telnet 567 ( 0.01%) 36555 ( 0.00%) 64.47
ssh 396333 ( 4.01%) 386964796 ( 6.74%) 976.36
dns 8645 ( 0.09%) 10378680 ( 0.18%) 1200.54
bgp 182 ( 0.00%) 54070 ( 0.00%) 297.09
napster 169 ( 0.00%) 10387 ( 0.00%) 61.46
realaud 7 ( 0.00%) 1351 ( 0.00%) 193.00
rtsp 450 ( 0.00%) 192920 ( 0.00%) 428.71
icecast 6431 ( 0.07%) 3085630 ( 0.05%) 479.81
other 2151112 ( 21.75%) 1122793762 ( 19.57%) 521.96
udp 1597794 ( 16.16%) 306374008 ( 5.34%) 191.75
dns 955732 ( 9.67%) 138300489 ( 2.41%) 144.71
realaud 8698 ( 0.09%) 5450869 ( 0.09%) 626.68
halflif 20 ( 0.00%) 2760 ( 0.00%) 138.00
starcra 32 ( 0.00%) 5209 ( 0.00%) 162.78
everque 35 ( 0.00%) 5482 ( 0.00%) 156.63
unreal 12 ( 0.00%) 2123 ( 0.00%) 176.92
quake 3 ( 0.00%) 1578 ( 0.00%) 526.00
cuseeme 4 ( 0.00%) 869 ( 0.00%) 217.25
other 633232 ( 6.40%) 162595960 ( 2.83%) 256.77
icmp 337992 ( 3.42%) 31930227 ( 0.56%) 94.47
ipip 306 ( 0.00%) 35738 ( 0.00%) 116.79
ip6 1024 ( 0.01%) 140196 ( 0.00%) 136.91
other 5356 ( 0.05%) 749246 ( 0.01%) 139.89
frag 1261 ( 0.01%) 1064615 ( 0.02%) 844.26
ip6 23785 ( 0.24%) 5547402 ( 0.10%) 233.23
tcp6 2822 ( 0.03%) 383986 ( 0.01%) 136.07
http(c) 720 ( 0.01%) 73312 ( 0.00%) 101.82
smtp 257 ( 0.00%) 91418 ( 0.00%) 355.71
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 8 ( 0.00%) 1786 ( 0.00%) 223.25
bgp 103 ( 0.00%) 12163 ( 0.00%) 118.09
other 1701 ( 0.02%) 202265 ( 0.00%) 118.91
udp6 14577 ( 0.15%) 2755930 ( 0.05%) 189.06
dns 13516 ( 0.14%) 2518039 ( 0.04%) 186.30
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1060 ( 0.01%) 237754 ( 0.00%) 224.30
icmp6 5025 ( 0.05%) 708930 ( 0.01%) 141.08
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1330 ( 0.01%) 1694340 ( 0.03%) 1273.94
tcpdump file: 200803201015.dump.gz (250.54 MB)