Traffic Trace Info
DumpFile: -
Id: 200803201115
StartTime: Thu Mar 20 11:15:01 2008
EndTime: Thu Mar 20 11:30:01 2008
TotalTime: 899.93 seconds
TotalCapSize: 531.71MB CapLen: 96 bytes
# of packets: 9595495 (4966.67MB)
AvgRate: 46.30Mbps stddev:8.48M
IP flow (unique src/dst pair) Information
# of flows: 544405 (avg. 17.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 3.4% 1.8% 1.2% 1.2% 1.2% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 291256
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.1% 7.8% 7.5% 6.6% 3.6% 3.4% 3.4% 3.4% 2.8%
# of IPv6 addresses: 1418
Top 10 bandwidth usage (bytes/total in %):
29.0% 29.0% 27.5% 23.5% 8.7% 7.6% 3.8% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201115.pktlen.png)
detailed numbers
[ 32- 63]: 2345607
[ 64- 127]: 2987056
[ 128- 255]: 685243
[ 256- 511]: 362640
[ 512- 1023]: 190893
[ 1024- 2047]: 3024056
Protocol Breakdown
![[protocol breakdown chart]](200803201115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9595495 (100.00%) 5207933421 (100.00%) 542.75
ip 9569927 ( 99.73%) 5199924422 ( 99.85%) 543.36
tcp 7871293 ( 82.03%) 4931256544 ( 94.69%) 626.49
http(s) 2267392 ( 23.63%) 2941249944 ( 56.48%) 1297.20
http(c) 1518656 ( 15.83%) 143790977 ( 2.76%) 94.68
squid 595525 ( 6.21%) 364099785 ( 6.99%) 611.39
smtp 567601 ( 5.92%) 93350533 ( 1.79%) 164.47
ftp 25249 ( 0.26%) 2600049 ( 0.05%) 102.98
pop3 6427 ( 0.07%) 3471122 ( 0.07%) 540.08
imap 7571 ( 0.08%) 2934340 ( 0.06%) 387.58
telnet 454 ( 0.00%) 29211 ( 0.00%) 64.34
ssh 446907 ( 4.66%) 426285450 ( 8.19%) 953.86
dns 1962 ( 0.02%) 140030 ( 0.00%) 71.37
bgp 180 ( 0.00%) 46132 ( 0.00%) 256.29
napster 82 ( 0.00%) 9035 ( 0.00%) 110.18
realaud 6 ( 0.00%) 757 ( 0.00%) 126.17
rtsp 1942 ( 0.02%) 2380397 ( 0.05%) 1225.75
icecast 6925 ( 0.07%) 3139021 ( 0.06%) 453.29
hotline 20 ( 0.00%) 1507 ( 0.00%) 75.35
other 2424166 ( 25.26%) 947714574 ( 18.20%) 390.94
udp 1327612 ( 13.84%) 233808330 ( 4.49%) 176.11
dns 857619 ( 8.94%) 126596766 ( 2.43%) 147.61
realaud 10625 ( 0.11%) 7485874 ( 0.14%) 704.55
halflif 13 ( 0.00%) 1996 ( 0.00%) 153.54
starcra 29 ( 0.00%) 5191 ( 0.00%) 179.00
everque 68 ( 0.00%) 9629 ( 0.00%) 141.60
unreal 12 ( 0.00%) 1852 ( 0.00%) 154.33
quake 4 ( 0.00%) 365 ( 0.00%) 91.25
cuseeme 6 ( 0.00%) 1304 ( 0.00%) 217.33
other 459167 ( 4.79%) 99668871 ( 1.91%) 217.06
icmp 364467 ( 3.80%) 33948764 ( 0.65%) 93.15
ipip 304 ( 0.00%) 35020 ( 0.00%) 115.20
ip6 1026 ( 0.01%) 137588 ( 0.00%) 134.10
other 5225 ( 0.05%) 738176 ( 0.01%) 141.28
frag 2012 ( 0.02%) 1765063 ( 0.03%) 877.27
ip6 25568 ( 0.27%) 8008999 ( 0.15%) 313.24
tcp6 4697 ( 0.05%) 2784570 ( 0.05%) 592.84
http(s) 1608 ( 0.02%) 2326470 ( 0.04%) 1446.81
http(c) 793 ( 0.01%) 82110 ( 0.00%) 103.54
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 442 ( 0.00%) 155125 ( 0.00%) 350.96
pop3 35 ( 0.00%) 3214 ( 0.00%) 91.83
bgp 113 ( 0.00%) 15536 ( 0.00%) 137.49
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 1700 ( 0.02%) 201671 ( 0.00%) 118.63
udp6 14589 ( 0.15%) 2682065 ( 0.05%) 183.84
dns 13479 ( 0.14%) 2441078 ( 0.05%) 181.10
other 1110 ( 0.01%) 240987 ( 0.00%) 217.11
icmp6 4828 ( 0.05%) 666824 ( 0.01%) 138.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1424 ( 0.01%) 1871460 ( 0.04%) 1314.23
tcpdump file: 200803201115.dump.gz (246.67 MB)