Traffic Trace Info
DumpFile: -
Id: 200803201145
StartTime: Thu Mar 20 11:45:00 2008
EndTime: Thu Mar 20 12:00:01 2008
TotalTime: 900.74 seconds
TotalCapSize: 558.06MB CapLen: 96 bytes
# of packets: 10188632 (5416.25MB)
AvgRate: 50.45Mbps stddev:9.53M
IP flow (unique src/dst pair) Information
# of flows: 560268 (avg. 18.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 3.0% 1.8% 1.5% 1.5% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 305555
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.4% 7.3% 6.4% 6.2% 5.4% 3.1% 3.0% 3.0% 2.9%
# of IPv6 addresses: 1350
Top 10 bandwidth usage (bytes/total in %):
58.2% 54.4% 9.9% 8.0% 3.3% 2.9% 2.7% 2.5% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201145.pktlen.png)
detailed numbers
[ 32- 63]: 2726273
[ 64- 127]: 2859326
[ 128- 255]: 693509
[ 256- 511]: 389155
[ 512- 1023]: 215071
[ 1024- 2047]: 3305298
Protocol Breakdown
![[protocol breakdown chart]](200803201145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10188632 (100.00%) 5679349286 (100.00%) 557.42
ip 10163416 ( 99.75%) 5670979936 ( 99.85%) 557.98
tcp 8194897 ( 80.43%) 5367769726 ( 94.51%) 655.01
http(s) 2308769 ( 22.66%) 2989828358 ( 52.64%) 1294.99
http(c) 1666955 ( 16.36%) 160777379 ( 2.83%) 96.45
squid 583185 ( 5.72%) 330123087 ( 5.81%) 566.07
smtp 597471 ( 5.86%) 97191250 ( 1.71%) 162.67
nntp 43 ( 0.00%) 25861 ( 0.00%) 601.42
ftp 28761 ( 0.28%) 3610301 ( 0.06%) 125.53
pop3 4467 ( 0.04%) 1423520 ( 0.03%) 318.67
imap 3413 ( 0.03%) 618738 ( 0.01%) 181.29
telnet 852 ( 0.01%) 54063 ( 0.00%) 63.45
ssh 368639 ( 3.62%) 353935286 ( 6.23%) 960.11
dns 1831 ( 0.02%) 136182 ( 0.00%) 74.38
bgp 187 ( 0.00%) 49876 ( 0.00%) 266.72
napster 4101 ( 0.04%) 2153971 ( 0.04%) 525.23
realaud 16 ( 0.00%) 2089 ( 0.00%) 130.56
rtsp 4459 ( 0.04%) 6006868 ( 0.11%) 1347.13
icecast 8925 ( 0.09%) 3900044 ( 0.07%) 436.98
hotline 17 ( 0.00%) 2357 ( 0.00%) 138.65
other 2612806 ( 25.64%) 1417930496 ( 24.97%) 542.68
udp 1549088 ( 15.20%) 264465605 ( 4.66%) 170.72
dns 872953 ( 8.57%) 125041317 ( 2.20%) 143.24
realaud 19120 ( 0.19%) 16626702 ( 0.29%) 869.60
halflif 23 ( 0.00%) 4162 ( 0.00%) 180.96
starcra 34 ( 0.00%) 6591 ( 0.00%) 193.85
everque 27 ( 0.00%) 3755 ( 0.00%) 139.07
unreal 7 ( 0.00%) 1415 ( 0.00%) 202.14
quake 9 ( 0.00%) 1194 ( 0.00%) 132.67
cuseeme 6 ( 0.00%) 1072 ( 0.00%) 178.67
other 656868 ( 6.45%) 122760315 ( 2.16%) 186.89
icmp 412519 ( 4.05%) 37777363 ( 0.67%) 91.58
ipip 340 ( 0.00%) 40260 ( 0.00%) 118.41
ip6 1009 ( 0.01%) 135667 ( 0.00%) 134.46
other 5563 ( 0.05%) 791315 ( 0.01%) 142.25
frag 1245 ( 0.01%) 1054554 ( 0.02%) 847.03
ip6 25216 ( 0.25%) 8369350 ( 0.15%) 331.91
tcp6 2974 ( 0.03%) 512730 ( 0.01%) 172.40
http(s) 111 ( 0.00%) 143691 ( 0.00%) 1294.51
http(c) 765 ( 0.01%) 76504 ( 0.00%) 100.01
smtp 294 ( 0.00%) 77287 ( 0.00%) 262.88
pop3 61 ( 0.00%) 5642 ( 0.00%) 92.49
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 113 ( 0.00%) 14119 ( 0.00%) 124.95
other 1623 ( 0.02%) 194852 ( 0.00%) 120.06
udp6 13836 ( 0.14%) 2607440 ( 0.05%) 188.45
dns 12744 ( 0.13%) 2368243 ( 0.04%) 185.83
other 1092 ( 0.01%) 239197 ( 0.00%) 219.04
icmp6 4902 ( 0.05%) 699936 ( 0.01%) 142.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3474 ( 0.03%) 4545164 ( 0.08%) 1308.34
tcpdump file: 200803201145.dump.gz (260.32 MB)