Traffic Trace Info
DumpFile: -
Id: 200803201415
StartTime: Thu Mar 20 14:15:00 2008
EndTime: Thu Mar 20 14:30:01 2008
TotalTime: 900.54 seconds
TotalCapSize: 693.35MB CapLen: 96 bytes
# of packets: 12721186 (7317.64MB)
AvgRate: 68.15Mbps stddev:13.87M
IP flow (unique src/dst pair) Information
# of flows: 626312 (avg. 20.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 4.1% 2.8% 2.0% 1.6% 1.5% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 361714
Top 10 bandwidth usage (bytes/total in %):
17.7% 9.2% 6.5% 4.8% 4.7% 4.3% 4.2% 3.9% 3.0% 2.8%
# of IPv6 addresses: 1306
Top 10 bandwidth usage (bytes/total in %):
52.0% 48.5% 10.3% 10.3% 8.5% 7.1% 3.0% 2.7% 2.7% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201415.pktlen.png)
detailed numbers
[ 32- 63]: 2913478
[ 64- 127]: 3612637
[ 128- 255]: 728568
[ 256- 511]: 505523
[ 512- 1023]: 419045
[ 1024- 2047]: 4541935
Protocol Breakdown
![[protocol breakdown chart]](200803201415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12721186 (100.00%) 7673103869 (100.00%) 603.18
ip 12685149 ( 99.72%) 7663988026 ( 99.88%) 604.17
tcp 10183675 ( 80.05%) 7028427091 ( 91.60%) 690.17
http(s) 2982072 ( 23.44%) 4007967422 ( 52.23%) 1344.02
http(c) 1795549 ( 14.11%) 160642504 ( 2.09%) 89.47
squid 618988 ( 4.87%) 385235221 ( 5.02%) 622.36
smtp 538168 ( 4.23%) 86894294 ( 1.13%) 161.46
ftp 177993 ( 1.40%) 133153386 ( 1.74%) 748.08
pop3 5490 ( 0.04%) 2744673 ( 0.04%) 499.94
imap 7878 ( 0.06%) 4232929 ( 0.06%) 537.31
telnet 192 ( 0.00%) 13724 ( 0.00%) 71.48
ssh 863384 ( 6.79%) 427406104 ( 5.57%) 495.04
dns 8594 ( 0.07%) 10314846 ( 0.13%) 1200.24
bgp 179 ( 0.00%) 47332 ( 0.00%) 264.42
napster 20 ( 0.00%) 4424 ( 0.00%) 221.20
realaud 24 ( 0.00%) 3555 ( 0.00%) 148.12
rtsp 27242 ( 0.21%) 17635507 ( 0.23%) 647.36
icecast 8053 ( 0.06%) 2401332 ( 0.03%) 298.19
other 3149844 ( 24.76%) 1789729538 ( 23.32%) 568.20
udp 2069424 ( 16.27%) 594303337 ( 7.75%) 287.18
dns 852828 ( 6.70%) 126626237 ( 1.65%) 148.48
rip 2 ( 0.00%) 455 ( 0.00%) 227.50
realaud 12323 ( 0.10%) 5673379 ( 0.07%) 460.39
halflif 18 ( 0.00%) 3031 ( 0.00%) 168.39
starcra 10362 ( 0.08%) 5806804 ( 0.08%) 560.39
everque 63 ( 0.00%) 10470 ( 0.00%) 166.19
unreal 16 ( 0.00%) 4753 ( 0.00%) 297.06
quake 10 ( 0.00%) 1166 ( 0.00%) 116.60
cuseeme 6 ( 0.00%) 1087 ( 0.00%) 181.17
other 1193757 ( 9.38%) 456164781 ( 5.94%) 382.13
icmp 420889 ( 3.31%) 39566707 ( 0.52%) 94.01
ipip 315 ( 0.00%) 38464 ( 0.00%) 122.11
ip6 1036 ( 0.01%) 139692 ( 0.00%) 134.84
other 9810 ( 0.08%) 1512735 ( 0.02%) 154.20
frag 2442 ( 0.02%) 1902957 ( 0.02%) 779.26
ip6 36037 ( 0.28%) 9115843 ( 0.12%) 252.96
tcp6 13919 ( 0.11%) 1390851 ( 0.02%) 99.92
http(c) 11459 ( 0.09%) 1020737 ( 0.01%) 89.08
smtp 460 ( 0.00%) 141198 ( 0.00%) 306.95
pop3 111 ( 0.00%) 10841 ( 0.00%) 97.67
dns 4 ( 0.00%) 893 ( 0.00%) 223.25
bgp 103 ( 0.00%) 12114 ( 0.00%) 117.61
other 1782 ( 0.01%) 205068 ( 0.00%) 115.08
udp6 13755 ( 0.11%) 2615806 ( 0.03%) 190.17
dns 12721 ( 0.10%) 2380747 ( 0.03%) 187.15
other 1034 ( 0.01%) 235059 ( 0.00%) 227.33
icmp6 4940 ( 0.04%) 686084 ( 0.01%) 138.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3393 ( 0.03%) 4419022 ( 0.06%) 1302.39
tcpdump file: 200803201415.dump.gz (327.16 MB)