Traffic Trace Info
DumpFile: -
Id: 200803202000
StartTime: Thu Mar 20 20:00:01 2008
EndTime: Thu Mar 20 20:15:00 2008
TotalTime: 899.55 seconds
TotalCapSize: 691.78MB CapLen: 96 bytes
# of packets: 12751011 (6475.62MB)
AvgRate: 60.38Mbps stddev:9.52M
IP flow (unique src/dst pair) Information
# of flows: 696761 (avg. 18.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 2.7% 2.1% 2.1% 1.6% 1.6% 1.5% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 363169
Top 10 bandwidth usage (bytes/total in %):
15.2% 8.6% 8.2% 8.0% 7.0% 3.6% 3.4% 2.7% 2.3% 2.2%
# of IPv6 addresses: 1500
Top 10 bandwidth usage (bytes/total in %):
32.0% 26.5% 9.9% 7.1% 6.8% 5.9% 4.8% 4.6% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202000.pktlen.png)
detailed numbers
[ 32- 63]: 3304978
[ 64- 127]: 3684271
[ 128- 255]: 938700
[ 256- 511]: 606348
[ 512- 1023]: 388508
[ 1024- 2047]: 3828206
Protocol Breakdown
![[protocol breakdown chart]](200803202000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12751011 (100.00%) 6790178188 (100.00%) 532.52
ip 12721511 ( 99.77%) 6784171692 ( 99.91%) 533.28
tcp 9591688 ( 75.22%) 6169456333 ( 90.86%) 643.21
http(s) 2449838 ( 19.21%) 3333373167 ( 49.09%) 1360.65
http(c) 1644962 ( 12.90%) 156182094 ( 2.30%) 94.95
squid 797421 ( 6.25%) 542414114 ( 7.99%) 680.21
smtp 887488 ( 6.96%) 136424196 ( 2.01%) 153.72
nntp 6 ( 0.00%) 372 ( 0.00%) 62.00
ftp 52715 ( 0.41%) 22190616 ( 0.33%) 420.95
pop3 15495 ( 0.12%) 12346969 ( 0.18%) 796.84
imap 4948 ( 0.04%) 2524748 ( 0.04%) 510.26
telnet 99 ( 0.00%) 6323 ( 0.00%) 63.87
ssh 385474 ( 3.02%) 72721880 ( 1.07%) 188.66
dns 2493 ( 0.02%) 382277 ( 0.01%) 153.34
bgp 201 ( 0.00%) 53959 ( 0.00%) 268.45
napster 236 ( 0.00%) 23609 ( 0.00%) 100.04
realaud 8 ( 0.00%) 848 ( 0.00%) 106.00
rtsp 34434 ( 0.27%) 29131262 ( 0.43%) 846.00
icecast 255 ( 0.00%) 19431 ( 0.00%) 76.20
hotline 15 ( 0.00%) 2657 ( 0.00%) 177.13
other 3315597 ( 26.00%) 1861657631 ( 27.42%) 561.48
udp 2361613 ( 18.52%) 544099111 ( 8.01%) 230.39
dns 1190472 ( 9.34%) 172538406 ( 2.54%) 144.93
realaud 14122 ( 0.11%) 5775321 ( 0.09%) 408.96
halflif 18 ( 0.00%) 1833 ( 0.00%) 101.83
starcra 216 ( 0.00%) 21219 ( 0.00%) 98.24
everque 47 ( 0.00%) 7197 ( 0.00%) 153.13
unreal 267 ( 0.00%) 18131 ( 0.00%) 67.91
quake 23 ( 0.00%) 3688 ( 0.00%) 160.35
cuseeme 6 ( 0.00%) 586 ( 0.00%) 97.67
other 1156397 ( 9.07%) 365716343 ( 5.39%) 316.26
icmp 721874 ( 5.66%) 60218802 ( 0.89%) 83.42
ipip 356 ( 0.00%) 42488 ( 0.00%) 119.35
ip6 1095 ( 0.01%) 153444 ( 0.00%) 140.13
other 44885 ( 0.35%) 10201514 ( 0.15%) 227.28
frag 2886 ( 0.02%) 2260131 ( 0.03%) 783.14
ip6 29500 ( 0.23%) 6006496 ( 0.09%) 203.61
tcp6 10018 ( 0.08%) 1082273 ( 0.02%) 108.03
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 2871 ( 0.02%) 268473 ( 0.00%) 93.51
smtp 414 ( 0.00%) 165793 ( 0.00%) 400.47
ftp 3 ( 0.00%) 258 ( 0.00%) 86.00
pop3 89 ( 0.00%) 8596 ( 0.00%) 96.58
bgp 107 ( 0.00%) 12641 ( 0.00%) 118.14
other 6529 ( 0.05%) 625900 ( 0.01%) 95.86
udp6 13114 ( 0.10%) 2643695 ( 0.04%) 201.59
dns 11702 ( 0.09%) 2237509 ( 0.03%) 191.21
other 1412 ( 0.01%) 406186 ( 0.01%) 287.67
icmp6 5037 ( 0.04%) 766732 ( 0.01%) 152.22
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1300 ( 0.01%) 1509580 ( 0.02%) 1161.22
tcpdump file: 200803202000.dump.gz (334.21 MB)