Traffic Trace Info
DumpFile: -
Id: 200803201945
StartTime: Thu Mar 20 19:45:00 2008
EndTime: Thu Mar 20 20:00:01 2008
TotalTime: 900.54 seconds
TotalCapSize: 704.59MB CapLen: 96 bytes
# of packets: 12806936 (6215.07MB)
AvgRate: 57.89Mbps stddev:12.71M
IP flow (unique src/dst pair) Information
# of flows: 806364 (avg. 15.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.5% 2.2% 1.6% 1.6% 1.3% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 430836
Top 10 bandwidth usage (bytes/total in %):
14.3% 10.2% 9.6% 6.8% 6.0% 3.0% 2.6% 2.5% 2.3% 2.1%
# of IPv6 addresses: 1517
Top 10 bandwidth usage (bytes/total in %):
38.0% 33.8% 10.7% 7.3% 6.7% 6.0% 5.3% 4.9% 3.5% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201945.pktlen.png)
detailed numbers
[ 32- 63]: 3012810
[ 64- 127]: 4337128
[ 128- 255]: 926614
[ 256- 511]: 508324
[ 512- 1023]: 360363
[ 1024- 2047]: 3661697
Protocol Breakdown
![[protocol breakdown chart]](200803201945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12806936 (100.00%) 6516969794 (100.00%) 508.86
ip 12775089 ( 99.75%) 6509317555 ( 99.88%) 509.53
tcp 9522023 ( 74.35%) 5954813101 ( 91.37%) 625.37
http(s) 2393518 ( 18.69%) 3241000440 ( 49.73%) 1354.07
http(c) 1625666 ( 12.69%) 145168432 ( 2.23%) 89.30
squid 654901 ( 5.11%) 448256777 ( 6.88%) 684.46
smtp 727361 ( 5.68%) 117541973 ( 1.80%) 161.60
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 105126 ( 0.82%) 61043343 ( 0.94%) 580.67
pop3 6000 ( 0.05%) 2460257 ( 0.04%) 410.04
imap 5191 ( 0.04%) 2585846 ( 0.04%) 498.14
telnet 172 ( 0.00%) 31023 ( 0.00%) 180.37
ssh 439770 ( 3.43%) 83230260 ( 1.28%) 189.26
dns 1903 ( 0.01%) 145753 ( 0.00%) 76.59
bgp 188 ( 0.00%) 52668 ( 0.00%) 280.15
napster 198 ( 0.00%) 21350 ( 0.00%) 107.83
realaud 39 ( 0.00%) 5563 ( 0.00%) 142.64
rtsp 11254 ( 0.09%) 8903035 ( 0.14%) 791.10
icecast 322 ( 0.00%) 22479 ( 0.00%) 69.81
other 3550410 ( 27.72%) 1844343656 ( 28.30%) 519.47
udp 2146898 ( 16.76%) 457698065 ( 7.02%) 213.19
dns 1143131 ( 8.93%) 167955127 ( 2.58%) 146.93
realaud 12797 ( 0.10%) 5700001 ( 0.09%) 445.42
halflif 20 ( 0.00%) 2635 ( 0.00%) 131.75
starcra 210 ( 0.00%) 20686 ( 0.00%) 98.50
everque 29 ( 0.00%) 3668 ( 0.00%) 126.48
unreal 262 ( 0.00%) 17714 ( 0.00%) 67.61
quake 16 ( 0.00%) 1553 ( 0.00%) 97.06
cuseeme 7 ( 0.00%) 978 ( 0.00%) 139.71
other 990381 ( 7.73%) 283975543 ( 4.36%) 286.73
icmp 1055295 ( 8.24%) 85698367 ( 1.32%) 81.21
ipip 319 ( 0.00%) 37670 ( 0.00%) 118.09
ip6 1085 ( 0.01%) 148920 ( 0.00%) 137.25
other 49469 ( 0.39%) 10921432 ( 0.17%) 220.77
frag 2475 ( 0.02%) 1948102 ( 0.03%) 787.11
ip6 31847 ( 0.25%) 7652239 ( 0.12%) 240.28
tcp6 9585 ( 0.07%) 1372241 ( 0.02%) 143.17
http(s) 122 ( 0.00%) 148986 ( 0.00%) 1221.20
http(c) 1368 ( 0.01%) 138951 ( 0.00%) 101.57
smtp 881 ( 0.01%) 393756 ( 0.01%) 446.94
ftp 25 ( 0.00%) 2360 ( 0.00%) 94.40
pop3 89 ( 0.00%) 8948 ( 0.00%) 100.54
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 106 ( 0.00%) 12267 ( 0.00%) 115.73
other 6993 ( 0.05%) 666899 ( 0.01%) 95.37
udp6 15582 ( 0.12%) 3033837 ( 0.05%) 194.70
dns 14254 ( 0.11%) 2673947 ( 0.04%) 187.59
halflif 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 2 ( 0.00%) 677 ( 0.00%) 338.50
other 1325 ( 0.01%) 359076 ( 0.01%) 271.00
icmp6 4925 ( 0.04%) 815091 ( 0.01%) 165.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1725 ( 0.01%) 2426990 ( 0.04%) 1406.95
tcpdump file: 200803201945.dump.gz (331.89 MB)