Traffic Trace Info
DumpFile: -
Id: 200803201515
StartTime: Thu Mar 20 15:15:00 2008
EndTime: Thu Mar 20 15:30:01 2008
TotalTime: 900.27 seconds
TotalCapSize: 774.50MB CapLen: 96 bytes
# of packets: 14339949 (7933.25MB)
AvgRate: 73.92Mbps stddev:13.49M
IP flow (unique src/dst pair) Information
# of flows: 698919 (avg. 20.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 4.7% 2.7% 1.3% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 410204
Top 10 bandwidth usage (bytes/total in %):
20.0% 14.4% 5.6% 4.8% 4.5% 4.1% 3.8% 2.8% 2.8% 2.4%
# of IPv6 addresses: 1292
Top 10 bandwidth usage (bytes/total in %):
57.6% 53.7% 7.1% 6.1% 2.9% 2.5% 2.3% 2.1% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201515.pktlen.png)
detailed numbers
[ 32- 63]: 3752878
[ 64- 127]: 3784617
[ 128- 255]: 896732
[ 256- 511]: 563551
[ 512- 1023]: 503361
[ 1024- 2047]: 4838810
Protocol Breakdown
![[protocol breakdown chart]](200803201515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14339949 (100.00%) 8318613893 (100.00%) 580.10
ip 14314519 ( 99.82%) 8310127634 ( 99.90%) 580.54
tcp 10960915 ( 76.44%) 7648477247 ( 91.94%) 697.80
http(s) 3676597 ( 25.64%) 4972252797 ( 59.77%) 1352.41
http(c) 2538048 ( 17.70%) 204938569 ( 2.46%) 80.75
squid 477214 ( 3.33%) 240179304 ( 2.89%) 503.29
smtp 761776 ( 5.31%) 114394326 ( 1.38%) 150.17
nntp 6 ( 0.00%) 650 ( 0.00%) 108.33
ftp 148160 ( 1.03%) 94006876 ( 1.13%) 634.50
pop3 4400 ( 0.03%) 1623648 ( 0.02%) 369.01
imap 9848 ( 0.07%) 5355117 ( 0.06%) 543.78
telnet 565 ( 0.00%) 36609 ( 0.00%) 64.79
ssh 1020778 ( 7.12%) 525758880 ( 6.32%) 515.06
dns 1731 ( 0.01%) 127818 ( 0.00%) 73.84
bgp 217 ( 0.00%) 63740 ( 0.00%) 293.73
napster 1818 ( 0.01%) 454291 ( 0.01%) 249.89
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 41618 ( 0.29%) 52836919 ( 0.64%) 1269.57
icecast 9717 ( 0.07%) 5182632 ( 0.06%) 533.36
hotline 15 ( 0.00%) 1586 ( 0.00%) 105.73
other 2268232 ( 15.82%) 1431252985 ( 17.21%) 631.00
udp 2607695 ( 18.18%) 590614265 ( 7.10%) 226.49
dns 897824 ( 6.26%) 131318089 ( 1.58%) 146.26
realaud 28781 ( 0.20%) 18647780 ( 0.22%) 647.92
halflif 21 ( 0.00%) 2899 ( 0.00%) 138.05
starcra 3695 ( 0.03%) 2062575 ( 0.02%) 558.21
everque 379 ( 0.00%) 160737 ( 0.00%) 424.11
unreal 8 ( 0.00%) 1081 ( 0.00%) 135.12
quake 22 ( 0.00%) 3444 ( 0.00%) 156.55
cuseeme 7 ( 0.00%) 901 ( 0.00%) 128.71
other 1676900 ( 11.69%) 438396542 ( 5.27%) 261.43
icmp 694656 ( 4.84%) 62824126 ( 0.76%) 90.44
ipip 288 ( 0.00%) 34760 ( 0.00%) 120.69
ip6 1080 ( 0.01%) 149299 ( 0.00%) 138.24
other 49885 ( 0.35%) 8027937 ( 0.10%) 160.93
frag 2862 ( 0.02%) 2302531 ( 0.03%) 804.52
ip6 25430 ( 0.18%) 8486259 ( 0.10%) 333.71
tcp6 3391 ( 0.02%) 670567 ( 0.01%) 197.75
http(s) 129 ( 0.00%) 174433 ( 0.00%) 1352.19
http(c) 1056 ( 0.01%) 139455 ( 0.00%) 132.06
smtp 264 ( 0.00%) 130479 ( 0.00%) 494.24
pop3 88 ( 0.00%) 8904 ( 0.00%) 101.18
dns 4 ( 0.00%) 892 ( 0.00%) 223.00
bgp 97 ( 0.00%) 11147 ( 0.00%) 114.92
other 1753 ( 0.01%) 205257 ( 0.00%) 117.09
udp6 13636 ( 0.10%) 2589553 ( 0.03%) 189.91
dns 12604 ( 0.09%) 2360029 ( 0.03%) 187.24
other 1032 ( 0.01%) 229524 ( 0.00%) 222.41
icmp6 4898 ( 0.03%) 672441 ( 0.01%) 137.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3475 ( 0.02%) 4549618 ( 0.05%) 1309.24
tcpdump file: 200803201515.dump.gz (351.83 MB)