Traffic Trace Info
DumpFile: -
Id: 200803201245
StartTime: Thu Mar 20 12:45:01 2008
EndTime: Thu Mar 20 13:00:00 2008
TotalTime: 899.53 seconds
TotalCapSize: 698.25MB CapLen: 96 bytes
# of packets: 12576676 (7770.62MB)
AvgRate: 72.49Mbps stddev:12.37M
IP flow (unique src/dst pair) Information
# of flows: 520372 (avg. 24.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.7% 3.7% 3.0% 2.2% 2.1% 2.1% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 276361
Top 10 bandwidth usage (bytes/total in %):
7.7% 6.7% 6.6% 6.6% 6.5% 6.4% 4.8% 4.0% 3.8% 3.7%
# of IPv6 addresses: 1433
Top 10 bandwidth usage (bytes/total in %):
58.2% 49.7% 7.9% 6.4% 3.3% 3.3% 2.6% 2.3% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201245.pktlen.png)
detailed numbers
[ 32- 63]: 2659042
[ 64- 127]: 3536956
[ 128- 255]: 731559
[ 256- 511]: 403102
[ 512- 1023]: 327978
[ 1024- 2047]: 4918039
Protocol Breakdown
![[protocol breakdown chart]](200803201245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12576676 (100.00%) 8148088499 (100.00%) 647.87
ip 12547693 ( 99.77%) 8138909419 ( 99.89%) 648.64
tcp 10534346 ( 83.76%) 7734414226 ( 94.92%) 734.21
http(s) 2803270 ( 22.29%) 3717819293 ( 45.63%) 1326.24
http(c) 1710400 ( 13.60%) 183561003 ( 2.25%) 107.32
squid 525837 ( 4.18%) 314864667 ( 3.86%) 598.79
smtp 795502 ( 6.33%) 228880040 ( 2.81%) 287.72
ftp 114314 ( 0.91%) 64934870 ( 0.80%) 568.04
pop3 4212 ( 0.03%) 1445463 ( 0.02%) 343.18
imap 5000 ( 0.04%) 938792 ( 0.01%) 187.76
telnet 1202 ( 0.01%) 77228 ( 0.00%) 64.25
ssh 1392458 ( 11.07%) 1203117034 ( 14.77%) 864.02
dns 1409 ( 0.01%) 108553 ( 0.00%) 77.04
bgp 183 ( 0.00%) 47821 ( 0.00%) 261.32
napster 712 ( 0.01%) 308675 ( 0.00%) 433.53
realaud 30 ( 0.00%) 3556 ( 0.00%) 118.53
rtsp 33946 ( 0.27%) 29827376 ( 0.37%) 878.67
icecast 3033 ( 0.02%) 798728 ( 0.01%) 263.35
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 3142610 ( 24.99%) 1987666220 ( 24.39%) 632.49
udp 1646233 ( 13.09%) 369596837 ( 4.54%) 224.51
dns 797774 ( 6.34%) 117429717 ( 1.44%) 147.20
realaud 10488 ( 0.08%) 5555948 ( 0.07%) 529.74
halflif 14 ( 0.00%) 2632 ( 0.00%) 188.00
starcra 36 ( 0.00%) 7400 ( 0.00%) 205.56
everque 46 ( 0.00%) 8682 ( 0.00%) 188.74
unreal 12 ( 0.00%) 4608 ( 0.00%) 384.00
quake 10 ( 0.00%) 743 ( 0.00%) 74.30
cuseeme 3 ( 0.00%) 537 ( 0.00%) 179.00
other 837785 ( 6.66%) 246556755 ( 3.03%) 294.30
icmp 357039 ( 2.84%) 33464259 ( 0.41%) 93.73
ipip 343 ( 0.00%) 42710 ( 0.00%) 124.52
ip6 1039 ( 0.01%) 143437 ( 0.00%) 138.05
other 8693 ( 0.07%) 1247950 ( 0.02%) 143.56
frag 2663 ( 0.02%) 2133285 ( 0.03%) 801.08
ip6 28983 ( 0.23%) 9179080 ( 0.11%) 316.71
tcp6 3409 ( 0.03%) 948386 ( 0.01%) 278.20
http(s) 642 ( 0.01%) 603545 ( 0.01%) 940.10
http(c) 750 ( 0.01%) 73858 ( 0.00%) 98.48
smtp 319 ( 0.00%) 58240 ( 0.00%) 182.57
pop3 36 ( 0.00%) 3084 ( 0.00%) 85.67
bgp 110 ( 0.00%) 20234 ( 0.00%) 183.95
other 1552 ( 0.01%) 189425 ( 0.00%) 122.05
udp6 17058 ( 0.14%) 2981478 ( 0.04%) 174.78
dns 15874 ( 0.13%) 2689926 ( 0.03%) 169.45
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1183 ( 0.01%) 291410 ( 0.00%) 246.33
icmp6 4999 ( 0.04%) 685989 ( 0.01%) 137.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3486 ( 0.03%) 4559011 ( 0.06%) 1307.81
tcpdump file: 200803201245.dump.gz (321.56 MB)