Traffic Trace Info
DumpFile: -
Id: 200803201715
StartTime: Thu Mar 20 17:15:00 2008
EndTime: Thu Mar 20 17:30:00 2008
TotalTime: 899.82 seconds
TotalCapSize: 793.94MB CapLen: 96 bytes
# of packets: 14503728 (7928.31MB)
AvgRate: 73.91Mbps stddev:14.09M
IP flow (unique src/dst pair) Information
# of flows: 823336 (avg. 17.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.8% 3.4% 2.9% 2.8% 2.6% 1.7% 1.3% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 444863
Top 10 bandwidth usage (bytes/total in %):
13.2% 8.2% 7.9% 6.2% 4.8% 4.7% 3.9% 3.7% 3.6% 3.5%
# of IPv6 addresses: 1400
Top 10 bandwidth usage (bytes/total in %):
34.4% 29.1% 14.0% 9.3% 8.6% 8.6% 6.8% 3.5% 3.5% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201715.pktlen.png)
detailed numbers
[ 32- 63]: 3107505
[ 64- 127]: 4394392
[ 128- 255]: 1017319
[ 256- 511]: 710759
[ 512- 1023]: 449043
[ 1024- 2047]: 4824710
Protocol Breakdown
![[protocol breakdown chart]](200803201715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14503728 (100.00%) 8313439467 (100.00%) 573.19
ip 14477594 ( 99.82%) 8306804069 ( 99.92%) 573.77
tcp 11167318 ( 77.00%) 7547032656 ( 90.78%) 675.81
http(s) 2888258 ( 19.91%) 3851091679 ( 46.32%) 1333.36
http(c) 1951679 ( 13.46%) 192000915 ( 2.31%) 98.38
squid 797513 ( 5.50%) 517307745 ( 6.22%) 648.65
smtp 733526 ( 5.06%) 139143171 ( 1.67%) 189.69
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 506519 ( 3.49%) 430231055 ( 5.18%) 849.39
pop3 6272 ( 0.04%) 3322428 ( 0.04%) 529.72
imap 4538 ( 0.03%) 2553847 ( 0.03%) 562.77
telnet 279 ( 0.00%) 18282 ( 0.00%) 65.53
ssh 987578 ( 6.81%) 381096098 ( 4.58%) 385.89
dns 1978 ( 0.01%) 175035 ( 0.00%) 88.49
bgp 203 ( 0.00%) 61050 ( 0.00%) 300.74
napster 191 ( 0.00%) 18986 ( 0.00%) 99.40
realaud 5 ( 0.00%) 693 ( 0.00%) 138.60
rtsp 562 ( 0.00%) 116203 ( 0.00%) 206.77
icecast 14490 ( 0.10%) 15580145 ( 0.19%) 1075.23
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3273717 ( 22.57%) 2014314718 ( 24.23%) 615.30
udp 2706290 ( 18.66%) 702188515 ( 8.45%) 259.47
dns 1176155 ( 8.11%) 168653855 ( 2.03%) 143.39
realaud 12280 ( 0.08%) 5666892 ( 0.07%) 461.47
halflif 13 ( 0.00%) 1918 ( 0.00%) 147.54
starcra 46 ( 0.00%) 7902 ( 0.00%) 171.78
everque 32 ( 0.00%) 4882 ( 0.00%) 152.56
unreal 10 ( 0.00%) 1868 ( 0.00%) 186.80
quake 18 ( 0.00%) 1895 ( 0.00%) 105.28
cuseeme 6 ( 0.00%) 1811 ( 0.00%) 301.83
other 1517684 ( 10.46%) 527833304 ( 6.35%) 347.79
icmp 543316 ( 3.75%) 46683580 ( 0.56%) 85.92
ipip 328 ( 0.00%) 38376 ( 0.00%) 117.00
ip6 1029 ( 0.01%) 139068 ( 0.00%) 135.15
other 59313 ( 0.41%) 10721874 ( 0.13%) 180.77
frag 2884 ( 0.02%) 2254320 ( 0.03%) 781.66
ip6 26134 ( 0.18%) 6635398 ( 0.08%) 253.90
tcp6 4042 ( 0.03%) 1070443 ( 0.01%) 264.83
http(s) 386 ( 0.00%) 572872 ( 0.01%) 1484.12
http(c) 1078 ( 0.01%) 109695 ( 0.00%) 101.76
smtp 487 ( 0.00%) 139943 ( 0.00%) 287.36
pop3 91 ( 0.00%) 9153 ( 0.00%) 100.58
bgp 107 ( 0.00%) 14062 ( 0.00%) 131.42
other 1893 ( 0.01%) 224718 ( 0.00%) 118.71
udp6 15813 ( 0.11%) 2950357 ( 0.04%) 186.58
dns 14663 ( 0.10%) 2724546 ( 0.03%) 185.81
other 1150 ( 0.01%) 225811 ( 0.00%) 196.36
icmp6 4905 ( 0.03%) 730462 ( 0.01%) 148.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1344 ( 0.01%) 1880056 ( 0.02%) 1398.85
tcpdump file: 200803201715.dump.gz (375.96 MB)