Traffic Trace Info
DumpFile: -
Id: 200803201800
StartTime: Thu Mar 20 18:00:01 2008
EndTime: Thu Mar 20 18:15:01 2008
TotalTime: 900.19 seconds
TotalCapSize: 850.71MB CapLen: 96 bytes
# of packets: 15302026 (8223.10MB)
AvgRate: 76.63Mbps stddev:13.20M
IP flow (unique src/dst pair) Information
# of flows: 783387 (avg. 19.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.7% 3.2% 3.2% 2.8% 2.0% 2.0% 1.7% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 436035
Top 10 bandwidth usage (bytes/total in %):
11.4% 11.0% 7.2% 7.1% 5.6% 4.2% 3.8% 3.6% 3.2% 3.2%
# of IPv6 addresses: 1560
Top 10 bandwidth usage (bytes/total in %):
42.4% 36.5% 7.8% 5.8% 5.2% 4.5% 4.4% 4.2% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201800.pktlen.png)
detailed numbers
[ 32- 63]: 3165563
[ 64- 127]: 4963195
[ 128- 255]: 1146787
[ 256- 511]: 596885
[ 512- 1023]: 420643
[ 1024- 2047]: 5008953
Protocol Breakdown
![[protocol breakdown chart]](200803201800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15302026 (100.00%) 8622544497 (100.00%) 563.49
ip 15275690 ( 99.83%) 8615920462 ( 99.92%) 564.03
tcp 12219492 ( 79.86%) 8083744639 ( 93.75%) 661.55
http(s) 3179203 ( 20.78%) 4327665012 ( 50.19%) 1361.24
http(c) 2071650 ( 13.54%) 175726720 ( 2.04%) 84.82
squid 1025296 ( 6.70%) 563386051 ( 6.53%) 549.49
smtp 719253 ( 4.70%) 108760733 ( 1.26%) 151.21
nntp 16 ( 0.00%) 1725 ( 0.00%) 107.81
ftp 501858 ( 3.28%) 318639838 ( 3.70%) 634.92
pop3 6734 ( 0.04%) 4045346 ( 0.05%) 600.73
imap 6250 ( 0.04%) 2720546 ( 0.03%) 435.29
telnet 231 ( 0.00%) 15083 ( 0.00%) 65.29
ssh 1031663 ( 6.74%) 485162650 ( 5.63%) 470.27
dns 2041 ( 0.01%) 222994 ( 0.00%) 109.26
bgp 189 ( 0.00%) 57394 ( 0.00%) 303.67
napster 172 ( 0.00%) 17763 ( 0.00%) 103.27
realaud 4 ( 0.00%) 296 ( 0.00%) 74.00
rtsp 306 ( 0.00%) 54934 ( 0.00%) 179.52
icecast 22835 ( 0.15%) 18927125 ( 0.22%) 828.86
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3651770 ( 23.86%) 2078338149 ( 24.10%) 569.13
udp 2226067 ( 14.55%) 446267524 ( 5.18%) 200.47
dns 1191406 ( 7.79%) 174655291 ( 2.03%) 146.60
realaud 10483 ( 0.07%) 5561679 ( 0.06%) 530.54
halflif 14 ( 0.00%) 2004 ( 0.00%) 143.14
starcra 199 ( 0.00%) 17971 ( 0.00%) 90.31
everque 29 ( 0.00%) 3052 ( 0.00%) 105.24
unreal 34 ( 0.00%) 6764 ( 0.00%) 198.94
quake 15 ( 0.00%) 1512 ( 0.00%) 100.80
cuseeme 6 ( 0.00%) 592 ( 0.00%) 98.67
other 1023699 ( 6.69%) 265949289 ( 3.08%) 259.79
icmp 647843 ( 4.23%) 54391615 ( 0.63%) 83.96
ipip 342 ( 0.00%) 40982 ( 0.00%) 119.83
ip6 1061 ( 0.01%) 146611 ( 0.00%) 138.18
other 180885 ( 1.18%) 31329091 ( 0.36%) 173.20
frag 3896 ( 0.03%) 3100692 ( 0.04%) 795.87
ip6 26336 ( 0.17%) 6624035 ( 0.08%) 251.52
tcp6 3610 ( 0.02%) 541797 ( 0.01%) 150.08
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 980 ( 0.01%) 98025 ( 0.00%) 100.03
smtp 612 ( 0.00%) 208473 ( 0.00%) 340.64
pop3 80 ( 0.00%) 7745 ( 0.00%) 96.81
bgp 121 ( 0.00%) 15304 ( 0.00%) 126.48
other 1812 ( 0.01%) 211638 ( 0.00%) 116.80
udp6 14967 ( 0.10%) 2866833 ( 0.03%) 191.54
dns 13618 ( 0.09%) 2530562 ( 0.03%) 185.82
other 1349 ( 0.01%) 336271 ( 0.00%) 249.27
icmp6 6101 ( 0.04%) 922433 ( 0.01%) 151.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1628 ( 0.01%) 2288892 ( 0.03%) 1405.95
tcpdump file: 200803201800.dump.gz (397.15 MB)