Traffic Trace Info
DumpFile: -
Id: 200803201500
StartTime: Thu Mar 20 15:00:00 2008
EndTime: Thu Mar 20 15:15:00 2008
TotalTime: 899.92 seconds
TotalCapSize: 767.46MB CapLen: 96 bytes
# of packets: 14203997 (8232.81MB)
AvgRate: 76.74Mbps stddev:10.66M
IP flow (unique src/dst pair) Information
# of flows: 604387 (avg. 23.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.4% 5.7% 3.1% 1.7% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 329282
Top 10 bandwidth usage (bytes/total in %):
25.4% 14.8% 5.8% 4.3% 4.2% 4.2% 3.8% 3.2% 3.1% 1.9%
# of IPv6 addresses: 1333
Top 10 bandwidth usage (bytes/total in %):
57.7% 53.8% 8.6% 7.0% 3.2% 3.0% 2.7% 2.7% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201500.pktlen.png)
detailed numbers
[ 32- 63]: 3508893
[ 64- 127]: 3668612
[ 128- 255]: 877175
[ 256- 511]: 544532
[ 512- 1023]: 515676
[ 1024- 2047]: 5089109
Protocol Breakdown
![[protocol breakdown chart]](200803201500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14203997 (100.00%) 8632722565 (100.00%) 607.77
ip 14178133 ( 99.82%) 8624464124 ( 99.90%) 608.29
tcp 11412432 ( 80.35%) 7927975972 ( 91.84%) 694.68
http(s) 3553147 ( 25.02%) 4769385725 ( 55.25%) 1342.30
http(c) 2537769 ( 17.87%) 210400072 ( 2.44%) 82.91
squid 643563 ( 4.53%) 401121538 ( 4.65%) 623.28
smtp 590997 ( 4.16%) 95161919 ( 1.10%) 161.02
nntp 15 ( 0.00%) 1748 ( 0.00%) 116.53
ftp 169264 ( 1.19%) 123781980 ( 1.43%) 731.30
pop3 4661 ( 0.03%) 2059577 ( 0.02%) 441.87
imap 7059 ( 0.05%) 2856272 ( 0.03%) 404.63
telnet 664 ( 0.00%) 42878 ( 0.00%) 64.58
ssh 920928 ( 6.48%) 412967863 ( 4.78%) 448.43
dns 1980 ( 0.01%) 162734 ( 0.00%) 82.19
bgp 204 ( 0.00%) 70295 ( 0.00%) 344.58
napster 61 ( 0.00%) 7141 ( 0.00%) 117.07
realaud 5 ( 0.00%) 1320 ( 0.00%) 264.00
rtsp 69520 ( 0.49%) 98411171 ( 1.14%) 1415.58
icecast 2870 ( 0.02%) 248438 ( 0.00%) 86.56
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2909715 ( 20.49%) 1811293681 ( 20.98%) 622.50
udp 2329916 ( 16.40%) 650150743 ( 7.53%) 279.04
dns 902366 ( 6.35%) 133138111 ( 1.54%) 147.54
realaud 104342 ( 0.73%) 81007097 ( 0.94%) 776.36
halflif 15 ( 0.00%) 2721 ( 0.00%) 181.40
starcra 5389 ( 0.04%) 3028738 ( 0.04%) 562.02
everque 570 ( 0.00%) 264230 ( 0.00%) 463.56
unreal 11 ( 0.00%) 1671 ( 0.00%) 151.91
quake 24 ( 0.00%) 4156 ( 0.00%) 173.17
cuseeme 3 ( 0.00%) 218 ( 0.00%) 72.67
other 1317109 ( 9.27%) 432643896 ( 5.01%) 328.48
icmp 381722 ( 2.69%) 36134545 ( 0.42%) 94.66
ipip 378 ( 0.00%) 45668 ( 0.00%) 120.81
ip6 1097 ( 0.01%) 153797 ( 0.00%) 140.20
other 52588 ( 0.37%) 10003399 ( 0.12%) 190.22
frag 2694 ( 0.02%) 2231229 ( 0.03%) 828.22
ip6 25864 ( 0.18%) 8258441 ( 0.10%) 319.30
tcp6 3147 ( 0.02%) 403792 ( 0.00%) 128.31
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 785 ( 0.01%) 78974 ( 0.00%) 100.60
smtp 346 ( 0.00%) 76680 ( 0.00%) 221.62
pop3 71 ( 0.00%) 6935 ( 0.00%) 97.68
bgp 107 ( 0.00%) 12647 ( 0.00%) 118.20
other 1833 ( 0.01%) 227944 ( 0.00%) 124.36
udp6 14164 ( 0.10%) 2722327 ( 0.03%) 192.20
dns 13048 ( 0.09%) 2465768 ( 0.03%) 188.98
other 1116 ( 0.01%) 256559 ( 0.00%) 229.89
icmp6 5134 ( 0.04%) 714492 ( 0.01%) 139.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3389 ( 0.02%) 4413750 ( 0.05%) 1302.38
tcpdump file: 200803201500.dump.gz (355.19 MB)