Traffic Trace Info
DumpFile: -
Id: 200803201430
StartTime: Thu Mar 20 14:30:01 2008
EndTime: Thu Mar 20 14:45:00 2008
TotalTime: 899.49 seconds
TotalCapSize: 820.35MB CapLen: 96 bytes
# of packets: 15128921 (9235.31MB)
AvgRate: 86.14Mbps stddev:13.54M
IP flow (unique src/dst pair) Information
# of flows: 617418 (avg. 24.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.0% 7.1% 4.9% 2.7% 2.5% 2.0% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 335786
Top 10 bandwidth usage (bytes/total in %):
24.1% 12.4% 7.3% 5.7% 5.1% 5.0% 5.0% 3.9% 3.8% 3.1%
# of IPv6 addresses: 1571
Top 10 bandwidth usage (bytes/total in %):
55.4% 51.8% 11.6% 9.1% 5.7% 3.9% 2.5% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201430.pktlen.png)
detailed numbers
[ 32- 63]: 3457821
[ 64- 127]: 3961216
[ 128- 255]: 827909
[ 256- 511]: 544107
[ 512- 1023]: 501833
[ 1024- 2047]: 5836035
Protocol Breakdown
![[protocol breakdown chart]](200803201430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15128921 (100.00%) 9683924404 (100.00%) 640.09
ip 15101321 ( 99.82%) 9675073423 ( 99.91%) 640.68
tcp 12099444 ( 79.98%) 8904538350 ( 91.95%) 735.95
http(s) 3468755 ( 22.93%) 4658297057 ( 48.10%) 1342.93
http(c) 2123508 ( 14.04%) 199515433 ( 2.06%) 93.96
squid 767313 ( 5.07%) 548616806 ( 5.67%) 714.98
smtp 606509 ( 4.01%) 107275927 ( 1.11%) 176.87
ftp 171562 ( 1.13%) 129319952 ( 1.34%) 753.78
pop3 4569 ( 0.03%) 2018402 ( 0.02%) 441.76
imap 9043 ( 0.06%) 2955665 ( 0.03%) 326.85
telnet 862 ( 0.01%) 55959 ( 0.00%) 64.92
ssh 1397573 ( 9.24%) 965640841 ( 9.97%) 690.94
dns 3711 ( 0.02%) 1863745 ( 0.02%) 502.22
bgp 205 ( 0.00%) 64778 ( 0.00%) 315.99
napster 69 ( 0.00%) 43170 ( 0.00%) 625.65
realaud 57 ( 0.00%) 6595 ( 0.00%) 115.70
rtsp 35506 ( 0.23%) 19321739 ( 0.20%) 544.18
icecast 5708 ( 0.04%) 1848301 ( 0.02%) 323.81
hotline 13 ( 0.00%) 2585 ( 0.00%) 198.85
other 3504463 ( 23.16%) 2267690315 ( 23.42%) 647.09
udp 2462139 ( 16.27%) 719941593 ( 7.43%) 292.40
dns 897705 ( 5.93%) 133656832 ( 1.38%) 148.89
realaud 81309 ( 0.54%) 61700766 ( 0.64%) 758.84
halflif 26 ( 0.00%) 4406 ( 0.00%) 169.46
starcra 8488 ( 0.06%) 4749447 ( 0.05%) 559.55
everque 78 ( 0.00%) 10380 ( 0.00%) 133.08
unreal 23 ( 0.00%) 6037 ( 0.00%) 262.48
quake 9 ( 0.00%) 1176 ( 0.00%) 130.67
cuseeme 3 ( 0.00%) 516 ( 0.00%) 172.00
other 1474463 ( 9.75%) 519794147 ( 5.37%) 352.53
icmp 527181 ( 3.48%) 48462087 ( 0.50%) 91.93
ipip 377 ( 0.00%) 44410 ( 0.00%) 117.80
ip6 1088 ( 0.01%) 150296 ( 0.00%) 138.14
other 11092 ( 0.07%) 1936687 ( 0.02%) 174.60
frag 2447 ( 0.02%) 1895446 ( 0.02%) 774.60
ip6 27600 ( 0.18%) 8850981 ( 0.09%) 320.69
tcp6 3564 ( 0.02%) 545378 ( 0.01%) 153.02
http(s) 69 ( 0.00%) 64764 ( 0.00%) 938.61
http(c) 907 ( 0.01%) 93301 ( 0.00%) 102.87
smtp 258 ( 0.00%) 122221 ( 0.00%) 473.72
pop3 61 ( 0.00%) 5948 ( 0.00%) 97.51
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 105 ( 0.00%) 12148 ( 0.00%) 115.70
other 2157 ( 0.01%) 246361 ( 0.00%) 114.21
udp6 15497 ( 0.10%) 3052313 ( 0.03%) 196.96
dns 14015 ( 0.09%) 2578567 ( 0.03%) 183.99
everque 2 ( 0.00%) 713 ( 0.00%) 356.50
other 1480 ( 0.01%) 473033 ( 0.00%) 319.62
icmp6 5016 ( 0.03%) 682150 ( 0.01%) 135.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3493 ( 0.02%) 4567060 ( 0.05%) 1307.49
tcpdump file: 200803201430.dump.gz (374.38 MB)