Traffic Trace Info
DumpFile: -
Id: 200803201130
StartTime: Thu Mar 20 11:30:01 2008
EndTime: Thu Mar 20 11:45:00 2008
TotalTime: 899.13 seconds
TotalCapSize: 566.46MB CapLen: 96 bytes
# of packets: 10237996 (5582.64MB)
AvgRate: 52.10Mbps stddev:11.14M
IP flow (unique src/dst pair) Information
# of flows: 582243 (avg. 17.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 2.8% 2.4% 1.4% 1.3% 1.1% 1.1% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 321320
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.6% 8.3% 7.1% 5.1% 3.5% 3.4% 3.0% 2.8% 2.8%
# of IPv6 addresses: 1480
Top 10 bandwidth usage (bytes/total in %):
55.2% 51.5% 10.0% 7.8% 3.6% 3.4% 2.7% 2.7% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201130.pktlen.png)
detailed numbers
[ 32- 63]: 2598773
[ 64- 127]: 2928851
[ 128- 255]: 686738
[ 256- 511]: 371787
[ 512- 1023]: 212832
[ 1024- 2047]: 3439015
Protocol Breakdown
![[protocol breakdown chart]](200803201130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10237996 (100.00%) 5853819006 (100.00%) 571.77
ip 10212206 ( 99.75%) 5845610849 ( 99.86%) 572.41
tcp 8401852 ( 82.07%) 5523620187 ( 94.36%) 657.43
http(s) 2500142 ( 24.42%) 3286536489 ( 56.14%) 1314.54
http(c) 1740816 ( 17.00%) 156920525 ( 2.68%) 90.14
squid 591078 ( 5.77%) 310626082 ( 5.31%) 525.52
smtp 632658 ( 6.18%) 109364523 ( 1.87%) 172.87
ftp 30396 ( 0.30%) 7718957 ( 0.13%) 253.95
pop3 6820 ( 0.07%) 2489210 ( 0.04%) 364.99
imap 6045 ( 0.06%) 3253962 ( 0.06%) 538.29
telnet 547 ( 0.01%) 35413 ( 0.00%) 64.74
ssh 433766 ( 4.24%) 418606553 ( 7.15%) 965.05
dns 3872 ( 0.04%) 2000114 ( 0.03%) 516.56
bgp 181 ( 0.00%) 49702 ( 0.00%) 274.60
napster 3697 ( 0.04%) 1995587 ( 0.03%) 539.79
realaud 5 ( 0.00%) 318 ( 0.00%) 63.60
rtsp 2964 ( 0.03%) 3891076 ( 0.07%) 1312.78
icecast 7348 ( 0.07%) 3143367 ( 0.05%) 427.79
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2441469 ( 23.85%) 1216984409 ( 20.79%) 498.46
udp 1396675 ( 13.64%) 284095132 ( 4.85%) 203.41
dns 837928 ( 8.18%) 123031318 ( 2.10%) 146.83
realaud 47152 ( 0.46%) 46948374 ( 0.80%) 995.68
halflif 18 ( 0.00%) 3241 ( 0.00%) 180.06
starcra 62 ( 0.00%) 10541 ( 0.00%) 170.02
everque 36 ( 0.00%) 6406 ( 0.00%) 177.94
unreal 21 ( 0.00%) 3474 ( 0.00%) 165.43
quake 14 ( 0.00%) 2298 ( 0.00%) 164.14
cuseeme 3 ( 0.00%) 530 ( 0.00%) 176.67
other 511363 ( 4.99%) 114037156 ( 1.95%) 223.01
icmp 407128 ( 3.98%) 36977679 ( 0.63%) 90.83
ipip 360 ( 0.00%) 43954 ( 0.00%) 122.09
ip6 1027 ( 0.01%) 141241 ( 0.00%) 137.53
other 5164 ( 0.05%) 732656 ( 0.01%) 141.88
frag 1615 ( 0.02%) 1411248 ( 0.02%) 873.84
ip6 25790 ( 0.25%) 8208157 ( 0.14%) 318.27
tcp6 3272 ( 0.03%) 550307 ( 0.01%) 168.19
http(s) 53 ( 0.00%) 60540 ( 0.00%) 1142.26
http(c) 806 ( 0.01%) 85809 ( 0.00%) 106.46
smtp 488 ( 0.00%) 175164 ( 0.00%) 358.94
pop3 35 ( 0.00%) 3220 ( 0.00%) 92.00
bgp 104 ( 0.00%) 12382 ( 0.00%) 119.06
other 1786 ( 0.02%) 213192 ( 0.00%) 119.37
udp6 14093 ( 0.14%) 2703465 ( 0.05%) 191.83
dns 12913 ( 0.13%) 2415195 ( 0.04%) 187.04
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1179 ( 0.01%) 288128 ( 0.00%) 244.38
icmp6 5160 ( 0.05%) 729734 ( 0.01%) 141.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3234 ( 0.03%) 4220435 ( 0.07%) 1305.02
tcpdump file: 200803201130.dump.gz (262.37 MB)