Traffic Trace Info
DumpFile: -
Id: 200803201630
StartTime: Thu Mar 20 16:30:01 2008
EndTime: Thu Mar 20 16:45:00 2008
TotalTime: 899.41 seconds
TotalCapSize: 828.74MB CapLen: 96 bytes
# of packets: 15345258 (9389.90MB)
AvgRate: 87.59Mbps stddev:17.35M
IP flow (unique src/dst pair) Information
# of flows: 681777 (avg. 22.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 3.2% 3.1% 2.3% 1.7% 1.7% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 364690
Top 10 bandwidth usage (bytes/total in %):
17.4% 11.2% 6.6% 5.6% 4.9% 4.3% 3.3% 3.2% 3.2% 2.4%
# of IPv6 addresses: 1488
Top 10 bandwidth usage (bytes/total in %):
59.0% 55.0% 4.2% 2.9% 2.8% 2.8% 2.4% 2.2% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201630.pktlen.png)
detailed numbers
[ 32- 63]: 3314678
[ 64- 127]: 4090000
[ 128- 255]: 1013973
[ 256- 511]: 580875
[ 512- 1023]: 453925
[ 1024- 2047]: 5891807
Protocol Breakdown
![[protocol breakdown chart]](200803201630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15345258 (100.00%) 9846023538 (100.00%) 641.63
ip 15320558 ( 99.84%) 9837731384 ( 99.92%) 642.13
tcp 12146864 ( 79.16%) 9060015569 ( 92.02%) 745.87
http(s) 3736998 ( 24.35%) 5110457342 ( 51.90%) 1367.53
http(c) 2045890 ( 13.33%) 192030581 ( 1.95%) 93.86
squid 705978 ( 4.60%) 414211617 ( 4.21%) 586.72
smtp 661099 ( 4.31%) 122518883 ( 1.24%) 185.33
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 487123 ( 3.17%) 444857599 ( 4.52%) 913.23
pop3 4979 ( 0.03%) 2131822 ( 0.02%) 428.16
imap 8290 ( 0.05%) 4053861 ( 0.04%) 489.01
telnet 498 ( 0.00%) 32512 ( 0.00%) 65.29
ssh 813980 ( 5.30%) 364663196 ( 3.70%) 448.00
dns 3664 ( 0.02%) 1876448 ( 0.02%) 512.13
bgp 206 ( 0.00%) 69849 ( 0.00%) 339.07
napster 185 ( 0.00%) 18833 ( 0.00%) 101.80
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 376 ( 0.00%) 71909 ( 0.00%) 191.25
icecast 2712 ( 0.02%) 191570 ( 0.00%) 70.64
hotline 20 ( 0.00%) 2722 ( 0.00%) 136.10
other 3674839 ( 23.95%) 2402825199 ( 24.40%) 653.86
udp 2664993 ( 17.37%) 724942170 ( 7.36%) 272.02
dns 1036429 ( 6.75%) 152086724 ( 1.54%) 146.74
realaud 13010 ( 0.08%) 5709038 ( 0.06%) 438.82
halflif 12 ( 0.00%) 2004 ( 0.00%) 167.00
starcra 2043 ( 0.01%) 1158347 ( 0.01%) 566.98
everque 52 ( 0.00%) 8355 ( 0.00%) 160.67
unreal 16 ( 0.00%) 3019 ( 0.00%) 188.69
quake 18 ( 0.00%) 1944 ( 0.00%) 108.00
cuseeme 3 ( 0.00%) 277 ( 0.00%) 92.33
other 1613374 ( 10.51%) 565948381 ( 5.75%) 350.79
icmp 451103 ( 2.94%) 41996759 ( 0.43%) 93.10
ipip 389 ( 0.00%) 48074 ( 0.00%) 123.58
ip6 1088 ( 0.01%) 152611 ( 0.00%) 140.27
other 56121 ( 0.37%) 10576201 ( 0.11%) 188.45
frag 2314 ( 0.02%) 1836190 ( 0.02%) 793.51
ip6 24700 ( 0.16%) 8292154 ( 0.08%) 335.71
tcp6 3844 ( 0.03%) 601399 ( 0.01%) 156.45
http(s) 53 ( 0.00%) 60540 ( 0.00%) 1142.26
http(c) 868 ( 0.01%) 93617 ( 0.00%) 107.85
smtp 563 ( 0.00%) 180376 ( 0.00%) 320.38
pop3 69 ( 0.00%) 6757 ( 0.00%) 97.93
dns 5 ( 0.00%) 420 ( 0.00%) 84.00
bgp 115 ( 0.00%) 15420 ( 0.00%) 134.09
other 2171 ( 0.01%) 244269 ( 0.00%) 112.51
udp6 12066 ( 0.08%) 2435768 ( 0.02%) 201.87
dns 10795 ( 0.07%) 2111652 ( 0.02%) 195.61
other 1271 ( 0.01%) 324116 ( 0.00%) 255.01
icmp6 5283 ( 0.03%) 703445 ( 0.01%) 133.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3477 ( 0.02%) 4547462 ( 0.05%) 1307.87
tcpdump file: 200803201630.dump.gz (384.18 MB)