Traffic Trace Info
DumpFile: -
Id: 200803201615
StartTime: Thu Mar 20 16:15:00 2008
EndTime: Thu Mar 20 16:30:01 2008
TotalTime: 900.25 seconds
TotalCapSize: 806.00MB CapLen: 96 bytes
# of packets: 14904694 (8956.28MB)
AvgRate: 83.45Mbps stddev:16.49M
IP flow (unique src/dst pair) Information
# of flows: 734178 (avg. 20.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.8% 3.6% 3.2% 2.6% 2.0% 1.9% 1.7% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 412771
Top 10 bandwidth usage (bytes/total in %):
8.9% 7.3% 6.2% 4.6% 4.6% 4.5% 4.2% 3.9% 3.7% 3.3%
# of IPv6 addresses: 1440
Top 10 bandwidth usage (bytes/total in %):
59.5% 55.4% 5.2% 3.2% 3.1% 2.3% 2.3% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201615.pktlen.png)
detailed numbers
[ 32- 63]: 2971312
[ 64- 127]: 4126611
[ 128- 255]: 998433
[ 256- 511]: 730096
[ 512- 1023]: 524943
[ 1024- 2047]: 5553299
Protocol Breakdown
![[protocol breakdown chart]](200803201615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14904694 (100.00%) 9391338914 (100.00%) 630.09
ip 14881144 ( 99.84%) 9383088606 ( 99.91%) 630.54
tcp 11521996 ( 77.30%) 8434653954 ( 89.81%) 732.05
http(s) 3543310 ( 23.77%) 4768551542 ( 50.78%) 1345.79
http(c) 1862919 ( 12.50%) 169443271 ( 1.80%) 90.96
squid 731368 ( 4.91%) 538422464 ( 5.73%) 736.19
smtp 664707 ( 4.46%) 114878408 ( 1.22%) 172.83
ftp 536389 ( 3.60%) 496538920 ( 5.29%) 925.71
pop3 5384 ( 0.04%) 2277279 ( 0.02%) 422.97
imap 7002 ( 0.05%) 2800233 ( 0.03%) 399.92
telnet 701 ( 0.00%) 45552 ( 0.00%) 64.98
ssh 955487 ( 6.41%) 509012781 ( 5.42%) 532.73
dns 9110 ( 0.06%) 10442172 ( 0.11%) 1146.23
bgp 238 ( 0.00%) 74267 ( 0.00%) 312.05
napster 232 ( 0.00%) 26360 ( 0.00%) 113.62
realaud 33 ( 0.00%) 3129 ( 0.00%) 94.82
rtsp 581 ( 0.00%) 125332 ( 0.00%) 215.72
icecast 2386 ( 0.02%) 285429 ( 0.00%) 119.63
other 3202008 ( 21.48%) 1821718355 ( 19.40%) 568.93
udp 2883336 ( 19.35%) 899704767 ( 9.58%) 312.04
dns 954641 ( 6.40%) 143651367 ( 1.53%) 150.48
realaud 14146 ( 0.09%) 5781019 ( 0.06%) 408.67
halflif 11 ( 0.00%) 2065 ( 0.00%) 187.73
starcra 12166 ( 0.08%) 6929561 ( 0.07%) 569.58
everque 62 ( 0.00%) 8061 ( 0.00%) 130.02
unreal 14 ( 0.00%) 2165 ( 0.00%) 154.64
quake 12 ( 0.00%) 1518 ( 0.00%) 126.50
cuseeme 4 ( 0.00%) 880 ( 0.00%) 220.00
other 1902242 ( 12.76%) 743311957 ( 7.91%) 390.76
icmp 417917 ( 2.80%) 38287694 ( 0.41%) 91.62
ipip 294 ( 0.00%) 33644 ( 0.00%) 114.44
ip6 962 ( 0.01%) 129032 ( 0.00%) 134.13
other 56639 ( 0.38%) 10279515 ( 0.11%) 181.49
frag 2449 ( 0.02%) 1975624 ( 0.02%) 806.71
ip6 23550 ( 0.16%) 8250308 ( 0.09%) 350.33
tcp6 3805 ( 0.03%) 662274 ( 0.01%) 174.05
http(c) 815 ( 0.01%) 86418 ( 0.00%) 106.03
smtp 783 ( 0.01%) 324201 ( 0.00%) 414.05
pop3 75 ( 0.00%) 7636 ( 0.00%) 101.81
dns 12 ( 0.00%) 1091 ( 0.00%) 90.92
bgp 100 ( 0.00%) 11516 ( 0.00%) 115.16
other 2020 ( 0.01%) 231412 ( 0.00%) 114.56
udp6 11439 ( 0.08%) 2371371 ( 0.03%) 207.31
dns 10107 ( 0.07%) 1974110 ( 0.02%) 195.32
everque 1 ( 0.00%) 540 ( 0.00%) 540.00
other 1331 ( 0.01%) 396721 ( 0.00%) 298.06
icmp6 4788 ( 0.03%) 649415 ( 0.01%) 135.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3488 ( 0.02%) 4563168 ( 0.05%) 1308.25
tcpdump file: 200803201615.dump.gz (376.16 MB)