Traffic Trace Info
DumpFile: -
Id: 200803201815
StartTime: Thu Mar 20 18:15:01 2008
EndTime: Thu Mar 20 18:30:01 2008
TotalTime: 899.86 seconds
TotalCapSize: 770.99MB CapLen: 96 bytes
# of packets: 13928359 (7687.18MB)
AvgRate: 71.67Mbps stddev:11.64M
IP flow (unique src/dst pair) Information
# of flows: 800901 (avg. 17.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 5.4% 4.4% 2.4% 2.1% 1.8% 1.5% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 412034
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.6% 8.7% 7.9% 7.4% 5.8% 5.6% 4.5% 4.4% 2.5%
# of IPv6 addresses: 1516
Top 10 bandwidth usage (bytes/total in %):
43.1% 38.2% 9.3% 6.6% 6.5% 4.9% 4.3% 3.7% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201815.pktlen.png)
detailed numbers
[ 32- 63]: 3007012
[ 64- 127]: 4194399
[ 128- 255]: 1089236
[ 256- 511]: 516935
[ 512- 1023]: 400982
[ 1024- 2047]: 4719795
Protocol Breakdown
![[protocol breakdown chart]](200803201815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13928359 (100.00%) 8060590740 (100.00%) 578.72
ip 13903154 ( 99.82%) 8053720310 ( 99.91%) 579.27
tcp 11010842 ( 79.05%) 7544118966 ( 93.59%) 685.15
http(s) 2991371 ( 21.48%) 4045782596 ( 50.19%) 1352.48
http(c) 1835152 ( 13.18%) 155682897 ( 1.93%) 84.83
squid 667848 ( 4.79%) 383483866 ( 4.76%) 574.21
smtp 800718 ( 5.75%) 141776940 ( 1.76%) 177.06
nntp 13 ( 0.00%) 1637 ( 0.00%) 125.92
ftp 412378 ( 2.96%) 239360381 ( 2.97%) 580.44
pop3 7495 ( 0.05%) 4059578 ( 0.05%) 541.64
imap 9383 ( 0.07%) 5420996 ( 0.07%) 577.75
telnet 1054 ( 0.01%) 68285 ( 0.00%) 64.79
ssh 835587 ( 6.00%) 194369855 ( 2.41%) 232.61
dns 8824 ( 0.06%) 10398439 ( 0.13%) 1178.43
bgp 222 ( 0.00%) 74569 ( 0.00%) 335.90
napster 158 ( 0.00%) 15427 ( 0.00%) 97.64
realaud 6 ( 0.00%) 753 ( 0.00%) 125.50
rtsp 3520 ( 0.03%) 2851651 ( 0.04%) 810.13
icecast 62355 ( 0.45%) 57829841 ( 0.72%) 927.43
hotline 510 ( 0.00%) 36672 ( 0.00%) 71.91
other 3374199 ( 24.23%) 2302901643 ( 28.57%) 682.50
udp 2153168 ( 15.46%) 436933995 ( 5.42%) 202.93
dns 1120572 ( 8.05%) 164282915 ( 2.04%) 146.61
realaud 10501 ( 0.08%) 5559572 ( 0.07%) 529.43
halflif 16 ( 0.00%) 2877 ( 0.00%) 179.81
starcra 225 ( 0.00%) 23628 ( 0.00%) 105.01
everque 37 ( 0.00%) 5196 ( 0.00%) 140.43
unreal 31 ( 0.00%) 6703 ( 0.00%) 216.23
quake 18 ( 0.00%) 2960 ( 0.00%) 164.44
cuseeme 6 ( 0.00%) 837 ( 0.00%) 139.50
other 1021729 ( 7.34%) 267028764 ( 3.31%) 261.35
icmp 662489 ( 4.76%) 56180237 ( 0.70%) 84.80
ipip 344 ( 0.00%) 41744 ( 0.00%) 121.35
ip6 1049 ( 0.01%) 143548 ( 0.00%) 136.84
other 75262 ( 0.54%) 16301820 ( 0.20%) 216.60
frag 2577 ( 0.02%) 2040425 ( 0.03%) 791.78
ip6 25205 ( 0.18%) 6870430 ( 0.09%) 272.58
tcp6 3257 ( 0.02%) 549583 ( 0.01%) 168.74
http(s) 9 ( 0.00%) 1695 ( 0.00%) 188.33
http(c) 798 ( 0.01%) 80555 ( 0.00%) 100.95
smtp 495 ( 0.00%) 241315 ( 0.00%) 487.51
pop3 88 ( 0.00%) 8782 ( 0.00%) 99.80
bgp 94 ( 0.00%) 11069 ( 0.00%) 117.76
other 1773 ( 0.01%) 206167 ( 0.00%) 116.28
udp6 15287 ( 0.11%) 3052601 ( 0.04%) 199.69
dns 13835 ( 0.10%) 2635930 ( 0.03%) 190.53
everque 2 ( 0.00%) 279 ( 0.00%) 139.50
other 1450 ( 0.01%) 416392 ( 0.01%) 287.17
icmp6 4892 ( 0.04%) 807092 ( 0.01%) 164.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1739 ( 0.01%) 2457074 ( 0.03%) 1412.92
tcpdump file: 200803201815.dump.gz (364.34 MB)