Traffic Trace Info
DumpFile: -
Id: 200803201530
StartTime: Thu Mar 20 15:30:01 2008
EndTime: Thu Mar 20 15:45:00 2008
TotalTime: 899.89 seconds
TotalCapSize: 752.97MB CapLen: 96 bytes
# of packets: 13949484 (8026.36MB)
AvgRate: 74.86Mbps stddev:16.08M
IP flow (unique src/dst pair) Information
# of flows: 645313 (avg. 21.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 4.5% 3.7% 2.1% 1.5% 1.4% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 365256
Top 10 bandwidth usage (bytes/total in %):
16.0% 11.8% 5.9% 5.4% 4.9% 4.6% 4.3% 3.9% 3.7% 3.0%
# of IPv6 addresses: 1401
Top 10 bandwidth usage (bytes/total in %):
54.6% 50.9% 9.8% 7.8% 3.7% 3.3% 2.6% 2.5% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201530.pktlen.png)
detailed numbers
[ 32- 63]: 3307585
[ 64- 127]: 3752287
[ 128- 255]: 864933
[ 256- 511]: 611537
[ 512- 1023]: 443411
[ 1024- 2047]: 4969731
Protocol Breakdown
![[protocol breakdown chart]](200803201530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13949484 (100.00%) 8416251873 (100.00%) 603.34
ip 13922339 ( 99.81%) 8407578063 ( 99.90%) 603.89
tcp 10791648 ( 77.36%) 7656532921 ( 90.97%) 709.49
http(s) 3640105 ( 26.09%) 4933715141 ( 58.62%) 1355.38
http(c) 2453973 ( 17.59%) 209594292 ( 2.49%) 85.41
squid 495866 ( 3.55%) 246188374 ( 2.93%) 496.48
smtp 581770 ( 4.17%) 90577795 ( 1.08%) 155.69
ftp 153139 ( 1.10%) 95639359 ( 1.14%) 624.53
pop3 5322 ( 0.04%) 2479234 ( 0.03%) 465.85
imap 7644 ( 0.05%) 3614337 ( 0.04%) 472.83
telnet 525 ( 0.00%) 34236 ( 0.00%) 65.21
ssh 1103554 ( 7.91%) 626198295 ( 7.44%) 567.44
dns 3571 ( 0.03%) 1889481 ( 0.02%) 529.12
bgp 191 ( 0.00%) 61435 ( 0.00%) 321.65
napster 2455 ( 0.02%) 763940 ( 0.01%) 311.18
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 46669 ( 0.33%) 68516614 ( 0.81%) 1468.14
icecast 11900 ( 0.09%) 7985598 ( 0.09%) 671.06
other 2284712 ( 16.38%) 1369259670 ( 16.27%) 599.31
udp 2643420 ( 18.95%) 701284996 ( 8.33%) 265.29
dns 926378 ( 6.64%) 136255754 ( 1.62%) 147.08
realaud 12362 ( 0.09%) 5671123 ( 0.07%) 458.75
halflif 26 ( 0.00%) 4154 ( 0.00%) 159.77
starcra 12816 ( 0.09%) 7239854 ( 0.09%) 564.91
everque 72 ( 0.00%) 10915 ( 0.00%) 151.60
unreal 18 ( 0.00%) 2779 ( 0.00%) 154.39
quake 13 ( 0.00%) 1921 ( 0.00%) 147.77
cuseeme 6 ( 0.00%) 1080 ( 0.00%) 180.00
other 1691667 ( 12.13%) 552076854 ( 6.56%) 326.35
icmp 442632 ( 3.17%) 41577484 ( 0.49%) 93.93
ipip 392 ( 0.00%) 48010 ( 0.00%) 122.47
ip6 1092 ( 0.01%) 152400 ( 0.00%) 139.56
other 43155 ( 0.31%) 7982252 ( 0.09%) 184.97
frag 3110 ( 0.02%) 2446486 ( 0.03%) 786.65
ip6 27145 ( 0.19%) 8673810 ( 0.10%) 319.54
tcp6 3806 ( 0.03%) 652006 ( 0.01%) 171.31
http(s) 53 ( 0.00%) 60540 ( 0.00%) 1142.26
http(c) 875 ( 0.01%) 91282 ( 0.00%) 104.32
smtp 790 ( 0.01%) 258041 ( 0.00%) 326.63
pop3 70 ( 0.00%) 6762 ( 0.00%) 96.60
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 108 ( 0.00%) 12586 ( 0.00%) 116.54
other 1903 ( 0.01%) 222160 ( 0.00%) 116.74
udp6 14719 ( 0.11%) 2879022 ( 0.03%) 195.60
dns 13517 ( 0.10%) 2580098 ( 0.03%) 190.88
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1201 ( 0.01%) 298808 ( 0.00%) 248.80
icmp6 5189 ( 0.04%) 713960 ( 0.01%) 137.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3401 ( 0.02%) 4424742 ( 0.05%) 1301.01
tcpdump file: 200803201530.dump.gz (348.41 MB)