Traffic Trace Info
DumpFile: -
Id: 200803201830
StartTime: Thu Mar 20 18:30:01 2008
EndTime: Thu Mar 20 18:45:00 2008
TotalTime: 899.62 seconds
TotalCapSize: 725.57MB CapLen: 96 bytes
# of packets: 13246042 (6593.49MB)
AvgRate: 61.47Mbps stddev:9.42M
IP flow (unique src/dst pair) Information
# of flows: 732894 (avg. 18.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.1% 3.7% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 398342
Top 10 bandwidth usage (bytes/total in %):
10.2% 8.7% 7.1% 6.4% 6.4% 4.8% 4.7% 4.3% 3.8% 3.1%
# of IPv6 addresses: 1373
Top 10 bandwidth usage (bytes/total in %):
41.0% 36.6% 12.9% 8.5% 6.2% 4.0% 3.8% 3.4% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201830.pktlen.png)
detailed numbers
[ 32- 63]: 2965980
[ 64- 127]: 4342794
[ 128- 255]: 1101664
[ 256- 511]: 482357
[ 512- 1023]: 436915
[ 1024- 2047]: 3916332
Protocol Breakdown
![[protocol breakdown chart]](200803201830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13246042 (100.00%) 6913770145 (100.00%) 521.95
ip 13217475 ( 99.78%) 6906564792 ( 99.90%) 522.53
tcp 10226399 ( 77.20%) 6400384151 ( 92.57%) 625.87
http(s) 2628104 ( 19.84%) 3519364356 ( 50.90%) 1339.13
http(c) 1818076 ( 13.73%) 160822871 ( 2.33%) 88.46
squid 746002 ( 5.63%) 503427979 ( 7.28%) 674.83
smtp 836266 ( 6.31%) 196592181 ( 2.84%) 235.08
nntp 7 ( 0.00%) 432 ( 0.00%) 61.71
ftp 119625 ( 0.90%) 44902855 ( 0.65%) 375.36
pop3 7154 ( 0.05%) 4233815 ( 0.06%) 591.81
imap 7160 ( 0.05%) 3006292 ( 0.04%) 419.87
telnet 651 ( 0.00%) 42274 ( 0.00%) 64.94
ssh 938386 ( 7.08%) 169304429 ( 2.45%) 180.42
dns 3693 ( 0.03%) 1892452 ( 0.03%) 512.44
bgp 219 ( 0.00%) 65026 ( 0.00%) 296.92
napster 207 ( 0.00%) 23695 ( 0.00%) 114.47
rtsp 9482 ( 0.07%) 7952412 ( 0.12%) 838.69
icecast 231687 ( 1.75%) 202853648 ( 2.93%) 875.55
other 2879646 ( 21.74%) 1585897394 ( 22.94%) 550.73
udp 2159780 ( 16.31%) 421676221 ( 6.10%) 195.24
dns 1130734 ( 8.54%) 164090917 ( 2.37%) 145.12
realaud 11095 ( 0.08%) 5595479 ( 0.08%) 504.32
halflif 12 ( 0.00%) 2008 ( 0.00%) 167.33
starcra 207 ( 0.00%) 20662 ( 0.00%) 99.82
everque 35 ( 0.00%) 4883 ( 0.00%) 139.51
unreal 103 ( 0.00%) 6815 ( 0.00%) 66.17
quake 17 ( 0.00%) 1727 ( 0.00%) 101.59
cuseeme 2 ( 0.00%) 178 ( 0.00%) 89.00
other 1017532 ( 7.68%) 251931160 ( 3.64%) 247.59
icmp 709090 ( 5.35%) 60891988 ( 0.88%) 85.87
ipip 339 ( 0.00%) 40150 ( 0.00%) 118.44
ip6 1128 ( 0.01%) 159343 ( 0.00%) 141.26
other 120739 ( 0.91%) 23412939 ( 0.34%) 193.91
frag 2732 ( 0.02%) 2180160 ( 0.03%) 798.01
ip6 28567 ( 0.22%) 7205353 ( 0.10%) 252.23
tcp6 3723 ( 0.03%) 601879 ( 0.01%) 161.67
http(s) 53 ( 0.00%) 60540 ( 0.00%) 1142.26
http(c) 763 ( 0.01%) 76204 ( 0.00%) 99.87
smtp 586 ( 0.00%) 204119 ( 0.00%) 348.33
pop3 364 ( 0.00%) 33288 ( 0.00%) 91.45
bgp 103 ( 0.00%) 12590 ( 0.00%) 122.23
other 1854 ( 0.01%) 215138 ( 0.00%) 116.04
udp6 17990 ( 0.14%) 3297790 ( 0.05%) 183.31
dns 16845 ( 0.13%) 3027811 ( 0.04%) 179.75
other 1145 ( 0.01%) 269979 ( 0.00%) 235.79
icmp6 5067 ( 0.04%) 828582 ( 0.01%) 163.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1757 ( 0.01%) 2473022 ( 0.04%) 1407.53
tcpdump file: 200803201830.dump.gz (352.62 MB)