Traffic Trace Info
DumpFile: -
Id: 200803201345
StartTime: Thu Mar 20 13:45:01 2008
EndTime: Thu Mar 20 14:00:00 2008
TotalTime: 899.59 seconds
TotalCapSize: 672.51MB CapLen: 96 bytes
# of packets: 12159230 (7218.81MB)
AvgRate: 67.34Mbps stddev:13.72M
IP flow (unique src/dst pair) Information
# of flows: 614222 (avg. 19.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.1% 2.2% 2.2% 1.6% 1.4% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 346184
Top 10 bandwidth usage (bytes/total in %):
10.2% 5.9% 5.4% 5.3% 4.1% 3.8% 3.5% 3.2% 2.4% 2.3%
# of IPv6 addresses: 1271
Top 10 bandwidth usage (bytes/total in %):
58.1% 52.9% 9.8% 7.9% 3.2% 2.9% 2.7% 2.6% 2.6% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201345.pktlen.png)
detailed numbers
[ 32- 63]: 2707737
[ 64- 127]: 3400033
[ 128- 255]: 727887
[ 256- 511]: 467350
[ 512- 1023]: 363317
[ 1024- 2047]: 4492906
Protocol Breakdown
![[protocol breakdown chart]](200803201345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12159230 (100.00%) 7569468534 (100.00%) 622.53
ip 12133380 ( 99.79%) 7561159683 ( 99.89%) 623.17
tcp 10178535 ( 83.71%) 7173721154 ( 94.77%) 704.79
http(s) 2737083 ( 22.51%) 3681249560 ( 48.63%) 1344.95
http(c) 1710979 ( 14.07%) 155603140 ( 2.06%) 90.94
squid 694431 ( 5.71%) 491228975 ( 6.49%) 707.38
smtp 520127 ( 4.28%) 88030178 ( 1.16%) 169.25
ftp 147088 ( 1.21%) 96449839 ( 1.27%) 655.73
pop3 4853 ( 0.04%) 2233242 ( 0.03%) 460.18
imap 19447 ( 0.16%) 5921257 ( 0.08%) 304.48
telnet 578 ( 0.00%) 57436 ( 0.00%) 99.37
ssh 940764 ( 7.74%) 567260457 ( 7.49%) 602.98
dns 1728 ( 0.01%) 126584 ( 0.00%) 73.25
bgp 211 ( 0.00%) 68298 ( 0.00%) 323.69
napster 74 ( 0.00%) 18326 ( 0.00%) 247.65
realaud 11 ( 0.00%) 1121 ( 0.00%) 101.91
rtsp 519 ( 0.00%) 127095 ( 0.00%) 244.88
icecast 864 ( 0.01%) 58918 ( 0.00%) 68.19
hotline 19 ( 0.00%) 5224 ( 0.00%) 274.95
other 3399750 ( 27.96%) 2085280964 ( 27.55%) 613.36
udp 1568260 ( 12.90%) 350392325 ( 4.63%) 223.43
dns 846474 ( 6.96%) 123142088 ( 1.63%) 145.48
realaud 10889 ( 0.09%) 5580394 ( 0.07%) 512.48
halflif 13 ( 0.00%) 2527 ( 0.00%) 194.38
starcra 42 ( 0.00%) 9210 ( 0.00%) 219.29
everque 21 ( 0.00%) 2448 ( 0.00%) 116.57
unreal 16 ( 0.00%) 3419 ( 0.00%) 213.69
quake 17 ( 0.00%) 2166 ( 0.00%) 127.41
cuseeme 5 ( 0.00%) 995 ( 0.00%) 199.00
other 710739 ( 5.85%) 221635137 ( 2.93%) 311.84
icmp 372076 ( 3.06%) 34370514 ( 0.45%) 92.37
ipip 318 ( 0.00%) 39176 ( 0.00%) 123.19
ip6 1020 ( 0.01%) 139720 ( 0.00%) 136.98
other 13171 ( 0.11%) 2496794 ( 0.03%) 189.57
frag 2394 ( 0.02%) 1904752 ( 0.03%) 795.64
ip6 25850 ( 0.21%) 8308851 ( 0.11%) 321.43
tcp6 3649 ( 0.03%) 572200 ( 0.01%) 156.81
http(s) 123 ( 0.00%) 154341 ( 0.00%) 1254.80
http(c) 695 ( 0.01%) 69607 ( 0.00%) 100.15
smtp 321 ( 0.00%) 68573 ( 0.00%) 213.62
pop3 534 ( 0.00%) 49425 ( 0.00%) 92.56
ssh 13 ( 0.00%) 1406 ( 0.00%) 108.15
bgp 111 ( 0.00%) 12900 ( 0.00%) 116.22
other 1852 ( 0.02%) 215948 ( 0.00%) 116.60
udp6 13178 ( 0.11%) 2594785 ( 0.03%) 196.90
dns 12140 ( 0.10%) 2365737 ( 0.03%) 194.87
other 1038 ( 0.01%) 229048 ( 0.00%) 220.66
icmp6 5625 ( 0.05%) 747912 ( 0.01%) 132.96
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3367 ( 0.03%) 4389738 ( 0.06%) 1303.75
tcpdump file: 200803201345.dump.gz (313.25 MB)