Traffic Trace Info
DumpFile: -
Id: 200803201930
StartTime: Thu Mar 20 19:30:00 2008
EndTime: Thu Mar 20 19:45:00 2008
TotalTime: 899.60 seconds
TotalCapSize: 702.64MB CapLen: 96 bytes
# of packets: 12750120 (6323.60MB)
AvgRate: 58.96Mbps stddev:10.66M
IP flow (unique src/dst pair) Information
# of flows: 872835 (avg. 14.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.2% 3.9% 1.6% 1.3% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 521573
Top 10 bandwidth usage (bytes/total in %):
17.8% 10.6% 9.0% 8.7% 5.9% 4.4% 4.0% 2.1% 2.1% 2.1%
# of IPv6 addresses: 1463
Top 10 bandwidth usage (bytes/total in %):
41.5% 36.7% 7.8% 5.6% 5.3% 5.3% 4.2% 4.1% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201930.pktlen.png)
detailed numbers
[ 32- 63]: 3007600
[ 64- 127]: 4098156
[ 128- 255]: 918079
[ 256- 511]: 633909
[ 512- 1023]: 390330
[ 1024- 2047]: 3702046
Protocol Breakdown
![[protocol breakdown chart]](200803201930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12750120 (100.00%) 6630770807 (100.00%) 520.06
ip 12720705 ( 99.77%) 6623580406 ( 99.89%) 520.69
tcp 9612984 ( 75.40%) 6052264704 ( 91.28%) 629.59
http(s) 2267424 ( 17.78%) 3027532384 ( 45.66%) 1335.23
http(c) 1499136 ( 11.76%) 137243864 ( 2.07%) 91.55
squid 680638 ( 5.34%) 452375370 ( 6.82%) 664.63
smtp 864799 ( 6.78%) 142065357 ( 2.14%) 164.28
nntp 6 ( 0.00%) 372 ( 0.00%) 62.00
ftp 82873 ( 0.65%) 31881165 ( 0.48%) 384.70
pop3 5580 ( 0.04%) 2672385 ( 0.04%) 478.92
imap 5303 ( 0.04%) 2880737 ( 0.04%) 543.23
telnet 97 ( 0.00%) 6189 ( 0.00%) 63.80
ssh 523710 ( 4.11%) 96958586 ( 1.46%) 185.14
dns 3445 ( 0.03%) 1892296 ( 0.03%) 549.29
bgp 189 ( 0.00%) 57073 ( 0.00%) 301.97
napster 264 ( 0.00%) 54424 ( 0.00%) 206.15
realaud 35 ( 0.00%) 7007 ( 0.00%) 200.20
rtsp 15942 ( 0.13%) 13128247 ( 0.20%) 823.50
icecast 362 ( 0.00%) 30012 ( 0.00%) 82.91
hotline 9 ( 0.00%) 564 ( 0.00%) 62.67
other 3663169 ( 28.73%) 2143478492 ( 32.33%) 585.14
udp 2263634 ( 17.75%) 493163683 ( 7.44%) 217.86
dns 1204631 ( 9.45%) 176474774 ( 2.66%) 146.50
realaud 10625 ( 0.08%) 5565352 ( 0.08%) 523.80
halflif 18 ( 0.00%) 1826 ( 0.00%) 101.44
starcra 204 ( 0.00%) 20530 ( 0.00%) 100.64
everque 35 ( 0.00%) 5681 ( 0.00%) 162.31
unreal 22 ( 0.00%) 2805 ( 0.00%) 127.50
quake 13 ( 0.00%) 1522 ( 0.00%) 117.08
cuseeme 2 ( 0.00%) 157 ( 0.00%) 78.50
other 1048044 ( 8.22%) 311073656 ( 4.69%) 296.81
icmp 782532 ( 6.14%) 65431937 ( 0.99%) 83.62
ipip 349 ( 0.00%) 42392 ( 0.00%) 121.47
ip6 1119 ( 0.01%) 158394 ( 0.00%) 141.55
other 60087 ( 0.47%) 12519296 ( 0.19%) 208.35
frag 2356 ( 0.02%) 1861258 ( 0.03%) 790.01
ip6 29415 ( 0.23%) 7190401 ( 0.11%) 244.45
tcp6 8121 ( 0.06%) 1113958 ( 0.02%) 137.17
http(s) 42 ( 0.00%) 55245 ( 0.00%) 1315.36
http(c) 5148 ( 0.04%) 460768 ( 0.01%) 89.50
smtp 737 ( 0.01%) 348204 ( 0.01%) 472.46
pop3 66 ( 0.00%) 6542 ( 0.00%) 99.12
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 107 ( 0.00%) 12770 ( 0.00%) 119.35
other 2014 ( 0.02%) 229794 ( 0.00%) 114.10
udp6 14304 ( 0.11%) 2754074 ( 0.04%) 192.54
dns 13106 ( 0.10%) 2463649 ( 0.04%) 187.98
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1197 ( 0.01%) 290309 ( 0.00%) 242.53
icmp6 5206 ( 0.04%) 844373 ( 0.01%) 162.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1754 ( 0.01%) 2473916 ( 0.04%) 1410.44
tcpdump file: 200803201930.dump.gz (336.45 MB)