Traffic Trace Info
DumpFile: -
Id: 200803201700
StartTime: Thu Mar 20 17:00:00 2008
EndTime: Thu Mar 20 17:15:00 2008
TotalTime: 899.92 seconds
TotalCapSize: 822.44MB CapLen: 96 bytes
# of packets: 14997376 (8686.59MB)
AvgRate: 80.99Mbps stddev:10.34M
IP flow (unique src/dst pair) Information
# of flows: 674217 (avg. 22.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 5.0% 2.9% 2.4% 2.3% 2.1% 1.8% 1.6% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 347791
Top 10 bandwidth usage (bytes/total in %):
16.1% 11.0% 10.4% 5.6% 5.2% 5.1% 4.8% 4.7% 3.5% 3.0%
# of IPv6 addresses: 1374
Top 10 bandwidth usage (bytes/total in %):
46.6% 46.6% 29.9% 27.9% 4.2% 2.9% 2.2% 1.5% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201700.pktlen.png)
detailed numbers
[ 32- 63]: 3305607
[ 64- 127]: 4330559
[ 128- 255]: 944418
[ 256- 511]: 563037
[ 512- 1023]: 460712
[ 1024- 2047]: 5393043
Protocol Breakdown
![[protocol breakdown chart]](200803201700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14997376 (100.00%) 9108547215 (100.00%) 607.34
ip 14964560 ( 99.78%) 9093006122 ( 99.83%) 607.64
tcp 12093998 ( 80.64%) 8451243804 ( 92.78%) 698.80
http(s) 3091850 ( 20.62%) 4141081495 ( 45.46%) 1339.35
http(c) 2050775 ( 13.67%) 189105159 ( 2.08%) 92.21
squid 792712 ( 5.29%) 593731780 ( 6.52%) 748.99
smtp 703045 ( 4.69%) 128625345 ( 1.41%) 182.95
nntp 16 ( 0.00%) 1828 ( 0.00%) 114.25
ftp 346128 ( 2.31%) 256203798 ( 2.81%) 740.20
pop3 5573 ( 0.04%) 2100011 ( 0.02%) 376.82
imap 5744 ( 0.04%) 3149921 ( 0.03%) 548.38
telnet 299 ( 0.00%) 19404 ( 0.00%) 64.90
ssh 850632 ( 5.67%) 352666537 ( 3.87%) 414.59
dns 2315 ( 0.02%) 192666 ( 0.00%) 83.23
bgp 205 ( 0.00%) 58872 ( 0.00%) 287.18
napster 199 ( 0.00%) 23301 ( 0.00%) 117.09
realaud 38 ( 0.00%) 7769 ( 0.00%) 204.45
rtsp 2705 ( 0.02%) 292032 ( 0.00%) 107.96
icecast 6427 ( 0.04%) 5440716 ( 0.06%) 846.54
hotline 6 ( 0.00%) 360 ( 0.00%) 60.00
other 4235258 ( 28.24%) 2778538550 ( 30.50%) 656.05
udp 2414733 ( 16.10%) 594804860 ( 6.53%) 246.32
dns 1090370 ( 7.27%) 162540856 ( 1.78%) 149.07
realaud 12240 ( 0.08%) 5666932 ( 0.06%) 462.98
halflif 18 ( 0.00%) 2236 ( 0.00%) 124.22
starcra 30 ( 0.00%) 4703 ( 0.00%) 156.77
everque 34 ( 0.00%) 4609 ( 0.00%) 135.56
unreal 23 ( 0.00%) 3964 ( 0.00%) 172.35
quake 15 ( 0.00%) 1553 ( 0.00%) 103.53
cuseeme 4 ( 0.00%) 772 ( 0.00%) 193.00
other 1311935 ( 8.75%) 426525630 ( 4.68%) 325.11
icmp 395912 ( 2.64%) 36235955 ( 0.40%) 91.53
ipip 360 ( 0.00%) 44736 ( 0.00%) 124.27
ip6 1045 ( 0.01%) 144640 ( 0.00%) 138.41
other 58512 ( 0.39%) 10532127 ( 0.12%) 180.00
frag 2871 ( 0.02%) 2317795 ( 0.03%) 807.31
ip6 32816 ( 0.22%) 15541093 ( 0.17%) 473.58
tcp6 10090 ( 0.07%) 7825574 ( 0.09%) 775.58
http(s) 5797 ( 0.04%) 7247596 ( 0.08%) 1250.23
http(c) 1539 ( 0.01%) 148590 ( 0.00%) 96.55
smtp 525 ( 0.00%) 178299 ( 0.00%) 339.62
pop3 78 ( 0.00%) 7452 ( 0.00%) 95.54
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 102 ( 0.00%) 12222 ( 0.00%) 119.82
other 2042 ( 0.01%) 230780 ( 0.00%) 113.02
udp6 14204 ( 0.09%) 2660353 ( 0.03%) 187.30
dns 13060 ( 0.09%) 2431384 ( 0.03%) 186.17
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1143 ( 0.01%) 228827 ( 0.00%) 200.20
icmp6 5185 ( 0.03%) 726315 ( 0.01%) 140.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3307 ( 0.02%) 4324771 ( 0.05%) 1307.76
tcpdump file: 200803201700.dump.gz (384.41 MB)