Traffic Trace Info
DumpFile: -
Id: 200803202015
StartTime: Thu Mar 20 20:15:00 2008
EndTime: Thu Mar 20 20:30:01 2008
TotalTime: 900.38 seconds
TotalCapSize: 693.10MB CapLen: 96 bytes
# of packets: 12750310 (6614.17MB)
AvgRate: 61.62Mbps stddev:14.20M
IP flow (unique src/dst pair) Information
# of flows: 793047 (avg. 16.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.5% 2.4% 2.1% 1.8% 1.7% 1.6% 1.6% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 441515
Top 10 bandwidth usage (bytes/total in %):
15.1% 8.9% 8.7% 8.3% 5.6% 3.3% 3.2% 2.8% 2.8% 2.4%
# of IPv6 addresses: 1288
Top 10 bandwidth usage (bytes/total in %):
30.6% 24.8% 13.4% 13.4% 5.3% 5.3% 4.1% 4.1% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202015.pktlen.png)
detailed numbers
[ 32- 63]: 3361980
[ 64- 127]: 3610727
[ 128- 255]: 862972
[ 256- 511]: 605941
[ 512- 1023]: 362253
[ 1024- 2047]: 3946437
Protocol Breakdown
![[protocol breakdown chart]](200803202015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12750310 (100.00%) 6935460483 (100.00%) 543.94
ip 12720252 ( 99.76%) 6929842231 ( 99.92%) 544.79
tcp 9696989 ( 76.05%) 6356294429 ( 91.65%) 655.49
http(s) 2622880 ( 20.57%) 3590448737 ( 51.77%) 1368.90
http(c) 1702490 ( 13.35%) 148786015 ( 2.15%) 87.39
squid 758765 ( 5.95%) 462674662 ( 6.67%) 609.77
smtp 737584 ( 5.78%) 128853923 ( 1.86%) 174.70
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 52124 ( 0.41%) 16734784 ( 0.24%) 321.06
pop3 7896 ( 0.06%) 3261602 ( 0.05%) 413.07
imap 5094 ( 0.04%) 2571725 ( 0.04%) 504.85
telnet 33 ( 0.00%) 2429 ( 0.00%) 73.61
ssh 336889 ( 2.64%) 62370772 ( 0.90%) 185.14
dns 8256 ( 0.06%) 10407393 ( 0.15%) 1260.59
bgp 247 ( 0.00%) 95490 ( 0.00%) 386.60
napster 251 ( 0.00%) 66516 ( 0.00%) 265.00
realaud 11 ( 0.00%) 1053 ( 0.00%) 95.73
rtsp 25305 ( 0.20%) 19652827 ( 0.28%) 776.64
icecast 302 ( 0.00%) 21870 ( 0.00%) 72.42
hotline 15 ( 0.00%) 3153 ( 0.00%) 210.20
other 3438840 ( 26.97%) 1910341052 ( 27.54%) 555.52
udp 2205396 ( 17.30%) 497231198 ( 7.17%) 225.46
dns 1088064 ( 8.53%) 157441591 ( 2.27%) 144.70
realaud 14097 ( 0.11%) 5778862 ( 0.08%) 409.94
halflif 19 ( 0.00%) 3294 ( 0.00%) 173.37
starcra 240 ( 0.00%) 25463 ( 0.00%) 106.10
everque 28 ( 0.00%) 4069 ( 0.00%) 145.32
unreal 183 ( 0.00%) 14520 ( 0.00%) 79.34
quake 15 ( 0.00%) 2741 ( 0.00%) 182.73
cuseeme 12 ( 0.00%) 2446 ( 0.00%) 203.83
other 1102700 ( 8.65%) 333932643 ( 4.81%) 302.83
icmp 757001 ( 5.94%) 62633028 ( 0.90%) 82.74
ipip 316 ( 0.00%) 38572 ( 0.00%) 122.06
ip6 1031 ( 0.01%) 140936 ( 0.00%) 136.70
other 59519 ( 0.47%) 13504068 ( 0.19%) 226.89
frag 2889 ( 0.02%) 2516541 ( 0.04%) 871.08
ip6 30058 ( 0.24%) 5618252 ( 0.08%) 186.91
tcp6 11542 ( 0.09%) 1165022 ( 0.02%) 100.94
http(c) 9379 ( 0.07%) 849538 ( 0.01%) 90.58
smtp 357 ( 0.00%) 101964 ( 0.00%) 285.61
pop3 90 ( 0.00%) 9017 ( 0.00%) 100.19
dns 8 ( 0.00%) 1787 ( 0.00%) 223.38
bgp 87 ( 0.00%) 10211 ( 0.00%) 117.37
other 1621 ( 0.01%) 192505 ( 0.00%) 118.76
udp6 12494 ( 0.10%) 2411527 ( 0.03%) 193.01
dns 11407 ( 0.09%) 2187770 ( 0.03%) 191.79
other 1087 ( 0.01%) 223757 ( 0.00%) 205.85
icmp6 4762 ( 0.04%) 702275 ( 0.01%) 147.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1230 ( 0.01%) 1335348 ( 0.02%) 1085.65
tcpdump file: 200803202015.dump.gz (332.09 MB)