Traffic Trace Info
DumpFile: -
Id: 200803201330
StartTime: Thu Mar 20 13:30:00 2008
EndTime: Thu Mar 20 13:45:01 2008
TotalTime: 900.46 seconds
TotalCapSize: 673.24MB CapLen: 96 bytes
# of packets: 12190758 (7366.64MB)
AvgRate: 68.64Mbps stddev:17.26M
IP flow (unique src/dst pair) Information
# of flows: 506650 (avg. 24.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.2% 2.5% 1.5% 1.5% 1.4% 1.4% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 277722
Top 10 bandwidth usage (bytes/total in %):
5.7% 5.7% 5.2% 4.8% 4.4% 4.4% 4.4% 4.3% 3.8% 3.3%
# of IPv6 addresses: 1377
Top 10 bandwidth usage (bytes/total in %):
61.5% 47.9% 5.7% 4.8% 4.0% 3.2% 2.6% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201330.pktlen.png)
detailed numbers
[ 32- 63]: 2705733
[ 64- 127]: 3331786
[ 128- 255]: 698076
[ 256- 511]: 446610
[ 512- 1023]: 402104
[ 1024- 2047]: 4606449
Protocol Breakdown
![[protocol breakdown chart]](200803201330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12190758 (100.00%) 7724481303 (100.00%) 633.63
ip 12157748 ( 99.73%) 7715031061 ( 99.88%) 634.58
tcp 10182659 ( 83.53%) 7287607820 ( 94.34%) 715.69
http(s) 3080410 ( 25.27%) 4183671332 ( 54.16%) 1358.15
http(c) 1861338 ( 15.27%) 162639454 ( 2.11%) 87.38
squid 663019 ( 5.44%) 455210170 ( 5.89%) 686.57
smtp 484891 ( 3.98%) 81743133 ( 1.06%) 168.58
ftp 106320 ( 0.87%) 60934198 ( 0.79%) 573.12
pop3 5258 ( 0.04%) 2311042 ( 0.03%) 439.53
imap 5033 ( 0.04%) 845724 ( 0.01%) 168.04
telnet 823 ( 0.01%) 53293 ( 0.00%) 64.75
ssh 944437 ( 7.75%) 581113559 ( 7.52%) 615.30
dns 3454 ( 0.03%) 1853298 ( 0.02%) 536.57
bgp 211 ( 0.00%) 79038 ( 0.00%) 374.59
napster 141 ( 0.00%) 12315 ( 0.00%) 87.34
realaud 24 ( 0.00%) 3649 ( 0.00%) 152.04
rtsp 2414 ( 0.02%) 2369424 ( 0.03%) 981.53
icecast 5213 ( 0.04%) 1826423 ( 0.02%) 350.36
other 3019641 ( 24.77%) 1752939848 ( 22.69%) 580.51
udp 1604099 ( 13.16%) 391307829 ( 5.07%) 243.94
dns 824969 ( 6.77%) 127643240 ( 1.65%) 154.72
realaud 11891 ( 0.10%) 5648537 ( 0.07%) 475.03
halflif 19 ( 0.00%) 3016 ( 0.00%) 158.74
starcra 29 ( 0.00%) 6060 ( 0.00%) 208.97
everque 29 ( 0.00%) 3863 ( 0.00%) 133.21
unreal 12 ( 0.00%) 3746 ( 0.00%) 312.17
quake 21 ( 0.00%) 3373 ( 0.00%) 160.62
cuseeme 5 ( 0.00%) 973 ( 0.00%) 194.60
other 767084 ( 6.29%) 257976661 ( 3.34%) 336.31
icmp 358363 ( 2.94%) 34124594 ( 0.44%) 95.22
ipip 354 ( 0.00%) 40760 ( 0.00%) 115.14
ip6 1094 ( 0.01%) 152500 ( 0.00%) 139.40
other 11179 ( 0.09%) 1797558 ( 0.02%) 160.80
frag 2483 ( 0.02%) 1961067 ( 0.03%) 789.80
ip6 33010 ( 0.27%) 9450242 ( 0.12%) 286.28
tcp6 3950 ( 0.03%) 918594 ( 0.01%) 232.56
http(s) 498 ( 0.00%) 424585 ( 0.01%) 852.58
http(c) 933 ( 0.01%) 103085 ( 0.00%) 110.49
smtp 585 ( 0.00%) 154508 ( 0.00%) 264.12
pop3 42 ( 0.00%) 3552 ( 0.00%) 84.57
ssh 39 ( 0.00%) 6621 ( 0.00%) 169.77
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 111 ( 0.00%) 18979 ( 0.00%) 170.98
other 1735 ( 0.01%) 206629 ( 0.00%) 119.09
udp6 15269 ( 0.13%) 2664852 ( 0.03%) 174.53
dns 14117 ( 0.12%) 2371727 ( 0.03%) 168.01
other 1152 ( 0.01%) 293125 ( 0.00%) 254.45
icmp6 10304 ( 0.08%) 1337126 ( 0.02%) 129.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3457 ( 0.03%) 4525590 ( 0.06%) 1309.11
tcpdump file: 200803201330.dump.gz (311.14 MB)