Traffic Trace Info
DumpFile: -
Id: 200803201445
StartTime: Thu Mar 20 14:45:00 2008
EndTime: Thu Mar 20 15:00:00 2008
TotalTime: 900.23 seconds
TotalCapSize: 811.98MB CapLen: 96 bytes
# of packets: 15037675 (9218.85MB)
AvgRate: 85.92Mbps stddev:11.55M
IP flow (unique src/dst pair) Information
# of flows: 585610 (avg. 25.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.2% 7.0% 3.7% 2.8% 2.2% 1.6% 1.5% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 322181
Top 10 bandwidth usage (bytes/total in %):
22.7% 11.6% 7.1% 6.5% 4.4% 4.2% 3.4% 3.3% 2.9% 2.6%
# of IPv6 addresses: 1467
Top 10 bandwidth usage (bytes/total in %):
55.8% 52.1% 10.4% 8.3% 4.2% 3.4% 2.7% 2.6% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201445.pktlen.png)
detailed numbers
[ 32- 63]: 3515084
[ 64- 127]: 3808337
[ 128- 255]: 872343
[ 256- 511]: 543230
[ 512- 1023]: 485809
[ 1024- 2047]: 5812872
Protocol Breakdown
![[protocol breakdown chart]](200803201445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15037675 (100.00%) 9666659706 (100.00%) 642.83
ip 15011077 ( 99.82%) 9657883127 ( 99.91%) 643.38
tcp 12087494 ( 80.38%) 8886603475 ( 91.93%) 735.19
http(s) 3623607 ( 24.10%) 4924894577 ( 50.95%) 1359.11
http(c) 2433109 ( 16.18%) 203423062 ( 2.10%) 83.61
squid 713712 ( 4.75%) 475710147 ( 4.92%) 666.53
smtp 564033 ( 3.75%) 88027352 ( 0.91%) 156.07
ftp 170769 ( 1.14%) 130187326 ( 1.35%) 762.36
pop3 4256 ( 0.03%) 1627419 ( 0.02%) 382.38
imap 7395 ( 0.05%) 2839963 ( 0.03%) 384.04
telnet 1349 ( 0.01%) 85943 ( 0.00%) 63.71
ssh 985399 ( 6.55%) 558215688 ( 5.77%) 566.49
dns 1939 ( 0.01%) 152663 ( 0.00%) 78.73
bgp 204 ( 0.00%) 55445 ( 0.00%) 271.79
realaud 13 ( 0.00%) 2007 ( 0.00%) 154.38
rtsp 244089 ( 1.62%) 340848420 ( 3.53%) 1396.41
icecast 2531 ( 0.02%) 222875 ( 0.00%) 88.06
other 3335059 ( 22.18%) 2160308788 ( 22.35%) 647.76
udp 2494649 ( 16.59%) 728601662 ( 7.54%) 292.07
dns 870280 ( 5.79%) 127985131 ( 1.32%) 147.06
realaud 58114 ( 0.39%) 41505546 ( 0.43%) 714.21
halflif 13 ( 0.00%) 1858 ( 0.00%) 142.92
starcra 6506 ( 0.04%) 3585376 ( 0.04%) 551.09
everque 65 ( 0.00%) 9320 ( 0.00%) 143.38
unreal 13 ( 0.00%) 2985 ( 0.00%) 229.62
quake 9 ( 0.00%) 1324 ( 0.00%) 147.11
cuseeme 3 ( 0.00%) 228 ( 0.00%) 76.00
other 1559546 ( 10.37%) 555475009 ( 5.75%) 356.18
icmp 408992 ( 2.72%) 38839717 ( 0.40%) 94.96
ipip 314 ( 0.00%) 37724 ( 0.00%) 120.14
ip6 1082 ( 0.01%) 150001 ( 0.00%) 138.63
other 18546 ( 0.12%) 3650548 ( 0.04%) 196.84
frag 2761 ( 0.02%) 2222095 ( 0.02%) 804.82
ip6 26596 ( 0.18%) 8776459 ( 0.09%) 329.99
tcp6 3833 ( 0.03%) 631159 ( 0.01%) 164.66
http(s) 111 ( 0.00%) 143691 ( 0.00%) 1294.51
http(c) 780 ( 0.01%) 77409 ( 0.00%) 99.24
smtp 157 ( 0.00%) 98823 ( 0.00%) 629.45
pop3 911 ( 0.01%) 83710 ( 0.00%) 91.89
telnet 1 ( 0.00%) 94 ( 0.00%) 94.00
ssh 96 ( 0.00%) 13736 ( 0.00%) 143.08
dns 4 ( 0.00%) 893 ( 0.00%) 223.25
bgp 108 ( 0.00%) 12714 ( 0.00%) 117.72
other 1665 ( 0.01%) 200089 ( 0.00%) 120.17
udp6 14565 ( 0.10%) 2946319 ( 0.03%) 202.29
dns 13317 ( 0.09%) 2591319 ( 0.03%) 194.59
everque 3 ( 0.00%) 440 ( 0.00%) 146.67
other 1245 ( 0.01%) 354560 ( 0.00%) 284.79
icmp6 4674 ( 0.03%) 626326 ( 0.01%) 134.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3493 ( 0.02%) 4568439 ( 0.05%) 1307.88
tcpdump file: 200803201445.dump.gz (372.59 MB)