Traffic Trace Info
DumpFile: -
Id: 200803201600
StartTime: Thu Mar 20 16:00:00 2008
EndTime: Thu Mar 20 16:15:00 2008
TotalTime: 900.03 seconds
TotalCapSize: 761.52MB CapLen: 96 bytes
# of packets: 14007560 (7800.11MB)
AvgRate: 72.68Mbps stddev:11.73M
IP flow (unique src/dst pair) Information
# of flows: 824713 (avg. 16.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.5% 3.1% 2.9% 2.6% 2.4% 2.3% 1.8% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 442122
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.5% 6.2% 5.5% 5.3% 5.1% 4.5% 4.4% 3.6% 3.2%
# of IPv6 addresses: 1772
Top 10 bandwidth usage (bytes/total in %):
55.5% 51.7% 8.8% 7.3% 6.3% 3.2% 2.3% 2.3% 2.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201600.pktlen.png)
detailed numbers
[ 32- 63]: 2821419
[ 64- 127]: 4287554
[ 128- 255]: 944217
[ 256- 511]: 680508
[ 512- 1023]: 515392
[ 1024- 2047]: 4758470
Protocol Breakdown
![[protocol breakdown chart]](200803201600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14007560 (100.00%) 8179006562 (100.00%) 583.90
ip 13980860 ( 99.81%) 8170451592 ( 99.90%) 584.40
tcp 10714385 ( 76.49%) 7296171919 ( 89.21%) 680.97
http(s) 3251247 ( 23.21%) 4373102944 ( 53.47%) 1345.05
http(c) 1994583 ( 14.24%) 178043013 ( 2.18%) 89.26
squid 584260 ( 4.17%) 344855878 ( 4.22%) 590.24
smtp 601310 ( 4.29%) 98595729 ( 1.21%) 163.97
ftp 406738 ( 2.90%) 350786531 ( 4.29%) 862.44
pop3 6092 ( 0.04%) 3430442 ( 0.04%) 563.11
imap 6712 ( 0.05%) 3062880 ( 0.04%) 456.33
telnet 697 ( 0.00%) 45333 ( 0.00%) 65.04
ssh 947936 ( 6.77%) 473978111 ( 5.80%) 500.01
dns 2836 ( 0.02%) 228153 ( 0.00%) 80.45
bgp 191 ( 0.00%) 60211 ( 0.00%) 315.24
napster 203 ( 0.00%) 20552 ( 0.00%) 101.24
realaud 5 ( 0.00%) 1320 ( 0.00%) 264.00
rtsp 520 ( 0.00%) 104192 ( 0.00%) 200.37
icecast 2036 ( 0.01%) 198795 ( 0.00%) 97.64
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 2909005 ( 20.77%) 1469656995 ( 17.97%) 505.21
udp 2717390 ( 19.40%) 819854735 ( 10.02%) 301.71
dns 1004101 ( 7.17%) 145671363 ( 1.78%) 145.08
realaud 100086 ( 0.71%) 77348490 ( 0.95%) 772.82
halflif 6 ( 0.00%) 1004 ( 0.00%) 167.33
starcra 11100 ( 0.08%) 6312677 ( 0.08%) 568.71
everque 57 ( 0.00%) 8613 ( 0.00%) 151.11
unreal 13 ( 0.00%) 1642 ( 0.00%) 126.31
quake 17 ( 0.00%) 1670 ( 0.00%) 98.24
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 1601992 ( 11.44%) 590501738 ( 7.22%) 368.60
icmp 497262 ( 3.55%) 44383089 ( 0.54%) 89.25
ipip 378 ( 0.00%) 45860 ( 0.00%) 121.32
ip6 1074 ( 0.01%) 149178 ( 0.00%) 138.90
other 50371 ( 0.36%) 9846811 ( 0.12%) 195.49
frag 2251 ( 0.02%) 1766643 ( 0.02%) 784.83
ip6 26700 ( 0.19%) 8554970 ( 0.10%) 320.41
tcp6 3658 ( 0.03%) 556632 ( 0.01%) 152.17
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 1023 ( 0.01%) 123940 ( 0.00%) 121.15
smtp 571 ( 0.00%) 189422 ( 0.00%) 331.74
ftp 24 ( 0.00%) 9805 ( 0.00%) 408.54
pop3 58 ( 0.00%) 5709 ( 0.00%) 98.43
bgp 108 ( 0.00%) 12609 ( 0.00%) 116.75
other 1869 ( 0.01%) 214535 ( 0.00%) 114.79
udp6 14312 ( 0.10%) 2871719 ( 0.04%) 200.65
dns 12400 ( 0.09%) 2358354 ( 0.03%) 190.19
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1911 ( 0.01%) 513228 ( 0.01%) 268.57
icmp6 5306 ( 0.04%) 704718 ( 0.01%) 132.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3394 ( 0.02%) 4417821 ( 0.05%) 1301.66
tcpdump file: 200803201600.dump.gz (360.40 MB)