Traffic Trace Info
DumpFile: -
Id: 200803201215
StartTime: Thu Mar 20 12:15:00 2008
EndTime: Thu Mar 20 12:30:00 2008
TotalTime: 899.75 seconds
TotalCapSize: 654.59MB CapLen: 96 bytes
# of packets: 11927369 (6920.87MB)
AvgRate: 64.54Mbps stddev:18.19M
IP flow (unique src/dst pair) Information
# of flows: 737662 (avg. 16.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.0% 3.4% 3.0% 2.5% 2.4% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 476020
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.8% 6.1% 6.0% 5.6% 5.1% 4.8% 4.3% 4.0% 3.9%
# of IPv6 addresses: 1436
Top 10 bandwidth usage (bytes/total in %):
60.9% 54.5% 3.8% 3.8% 3.6% 2.8% 2.8% 2.7% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201215.pktlen.png)
detailed numbers
[ 32- 63]: 2995444
[ 64- 127]: 3209666
[ 128- 255]: 685088
[ 256- 511]: 474929
[ 512- 1023]: 264293
[ 1024- 2047]: 4297949
Protocol Breakdown
![[protocol breakdown chart]](200803201215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11927369 (100.00%) 7257056269 (100.00%) 608.44
ip 11901534 ( 99.78%) 7248720685 ( 99.89%) 609.06
tcp 9955989 ( 83.47%) 6874748446 ( 94.73%) 690.51
http(s) 2905619 ( 24.36%) 3847331292 ( 53.02%) 1324.10
http(c) 1782216 ( 14.94%) 221254298 ( 3.05%) 124.15
squid 526622 ( 4.42%) 284803944 ( 3.92%) 540.81
smtp 761078 ( 6.38%) 238221428 ( 3.28%) 313.01
ftp 121354 ( 1.02%) 83246677 ( 1.15%) 685.98
pop3 5310 ( 0.04%) 2054338 ( 0.03%) 386.88
imap 4694 ( 0.04%) 1855160 ( 0.03%) 395.22
telnet 711 ( 0.01%) 45251 ( 0.00%) 63.64
ssh 692004 ( 5.80%) 464443035 ( 6.40%) 671.16
dns 8395 ( 0.07%) 10382239 ( 0.14%) 1236.72
bgp 260 ( 0.00%) 102894 ( 0.00%) 395.75
napster 1000 ( 0.01%) 366404 ( 0.01%) 366.40
realaud 34 ( 0.00%) 4799 ( 0.00%) 141.15
rtsp 31277 ( 0.26%) 27347090 ( 0.38%) 874.35
icecast 4476 ( 0.04%) 1315452 ( 0.02%) 293.89
other 3110260 ( 26.08%) 1691933405 ( 23.31%) 543.98
udp 1512189 ( 12.68%) 334063584 ( 4.60%) 220.91
dns 810962 ( 6.80%) 116704664 ( 1.61%) 143.91
realaud 9700 ( 0.08%) 5514200 ( 0.08%) 568.47
halflif 31 ( 0.00%) 5175 ( 0.00%) 166.94
starcra 79 ( 0.00%) 10604 ( 0.00%) 134.23
everque 45 ( 0.00%) 8911 ( 0.00%) 198.02
unreal 16 ( 0.00%) 3136 ( 0.00%) 196.00
quake 8 ( 0.00%) 785 ( 0.00%) 98.12
cuseeme 3 ( 0.00%) 594 ( 0.00%) 198.00
other 691303 ( 5.80%) 211802785 ( 2.92%) 306.38
icmp 418520 ( 3.51%) 37660108 ( 0.52%) 89.98
ipip 343 ( 0.00%) 41302 ( 0.00%) 120.41
ip6 1062 ( 0.01%) 144849 ( 0.00%) 136.39
other 13431 ( 0.11%) 2062396 ( 0.03%) 153.55
frag 2988 ( 0.03%) 2404278 ( 0.03%) 804.64
ip6 25835 ( 0.22%) 8335584 ( 0.11%) 322.65
tcp6 3087 ( 0.03%) 570192 ( 0.01%) 184.71
http(s) 295 ( 0.00%) 218455 ( 0.00%) 740.53
http(c) 725 ( 0.01%) 79337 ( 0.00%) 109.43
smtp 275 ( 0.00%) 49358 ( 0.00%) 179.48
pop3 33 ( 0.00%) 2914 ( 0.00%) 88.30
dns 6 ( 0.00%) 563 ( 0.00%) 93.83
bgp 114 ( 0.00%) 20294 ( 0.00%) 178.02
other 1639 ( 0.01%) 199271 ( 0.00%) 121.58
udp6 14420 ( 0.12%) 2575192 ( 0.04%) 178.58
dns 13155 ( 0.11%) 2277083 ( 0.03%) 173.10
other 1265 ( 0.01%) 298109 ( 0.00%) 235.66
icmp6 4826 ( 0.04%) 646021 ( 0.01%) 133.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3472 ( 0.03%) 4540099 ( 0.06%) 1307.63
tcpdump file: 200803201215.dump.gz (302.16 MB)