Traffic Trace Info
DumpFile: -
Id: 200803202030
StartTime: Thu Mar 20 20:30:01 2008
EndTime: Thu Mar 20 20:45:00 2008
TotalTime: 899.67 seconds
TotalCapSize: 701.94MB CapLen: 96 bytes
# of packets: 12931591 (6452.58MB)
AvgRate: 60.17Mbps stddev:12.89M
IP flow (unique src/dst pair) Information
# of flows: 733475 (avg. 17.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.8% 1.6% 1.5% 1.5% 1.3% 1.1% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 391308
Top 10 bandwidth usage (bytes/total in %):
15.4% 9.1% 7.7% 6.0% 5.3% 4.1% 3.8% 2.9% 2.0% 2.0%
# of IPv6 addresses: 1375
Top 10 bandwidth usage (bytes/total in %):
32.6% 26.2% 5.7% 5.6% 4.4% 3.6% 3.6% 3.6% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202030.pktlen.png)
detailed numbers
[ 32- 63]: 3656675
[ 64- 127]: 3604076
[ 128- 255]: 940314
[ 256- 511]: 533577
[ 512- 1023]: 353959
[ 1024- 2047]: 3842990
Protocol Breakdown
![[protocol breakdown chart]](200803202030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12931591 (100.00%) 6766025263 (100.00%) 523.22
ip 12907866 ( 99.82%) 6760881872 ( 99.92%) 523.78
tcp 9383232 ( 72.56%) 6198450923 ( 91.61%) 660.59
http(s) 2467227 ( 19.08%) 3359139084 ( 49.65%) 1361.50
http(c) 1549943 ( 11.99%) 151103377 ( 2.23%) 97.49
squid 704554 ( 5.45%) 454677340 ( 6.72%) 645.34
smtp 854426 ( 6.61%) 153977597 ( 2.28%) 180.21
nntp 17 ( 0.00%) 1038 ( 0.00%) 61.06
ftp 50280 ( 0.39%) 18686357 ( 0.28%) 371.65
pop3 5839 ( 0.05%) 3404444 ( 0.05%) 583.05
imap 3983 ( 0.03%) 1751577 ( 0.03%) 439.76
telnet 126 ( 0.00%) 8358 ( 0.00%) 66.33
ssh 318335 ( 2.46%) 65512336 ( 0.97%) 205.80
dns 3762 ( 0.03%) 1891593 ( 0.03%) 502.82
bgp 192 ( 0.00%) 53662 ( 0.00%) 279.49
napster 2703 ( 0.02%) 1884743 ( 0.03%) 697.28
realaud 15 ( 0.00%) 3153 ( 0.00%) 210.20
rtsp 1110 ( 0.01%) 233590 ( 0.00%) 210.44
icecast 775 ( 0.01%) 73966 ( 0.00%) 95.44
hotline 11 ( 0.00%) 2706 ( 0.00%) 246.00
other 3419929 ( 26.45%) 1986045524 ( 29.35%) 580.73
udp 2571161 ( 19.88%) 476629398 ( 7.04%) 185.38
dns 1122329 ( 8.68%) 166192665 ( 2.46%) 148.08
realaud 14078 ( 0.11%) 5775336 ( 0.09%) 410.24
halflif 16 ( 0.00%) 1662 ( 0.00%) 103.88
starcra 217 ( 0.00%) 21982 ( 0.00%) 101.30
everque 38 ( 0.00%) 7859 ( 0.00%) 206.82
unreal 151 ( 0.00%) 10841 ( 0.00%) 71.79
quake 18 ( 0.00%) 3996 ( 0.00%) 222.00
cuseeme 6 ( 0.00%) 689 ( 0.00%) 114.83
other 1434262 ( 11.09%) 304591746 ( 4.50%) 212.37
icmp 910267 ( 7.04%) 77807060 ( 1.15%) 85.48
ipip 364 ( 0.00%) 43338 ( 0.00%) 119.06
ip6 1095 ( 0.01%) 153038 ( 0.00%) 139.76
other 41747 ( 0.32%) 7798115 ( 0.12%) 186.79
frag 2612 ( 0.02%) 2079076 ( 0.03%) 795.97
ip6 23725 ( 0.18%) 5143391 ( 0.08%) 216.79
tcp6 5237 ( 0.04%) 795454 ( 0.01%) 151.89
http(s) 42 ( 0.00%) 55245 ( 0.00%) 1315.36
http(c) 2582 ( 0.02%) 243113 ( 0.00%) 94.16
smtp 828 ( 0.01%) 284056 ( 0.00%) 343.06
pop3 64 ( 0.00%) 6202 ( 0.00%) 96.91
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 111 ( 0.00%) 14151 ( 0.00%) 127.49
other 1603 ( 0.01%) 192052 ( 0.00%) 119.81
udp6 12248 ( 0.09%) 2330677 ( 0.03%) 190.29
dns 11120 ( 0.09%) 2053521 ( 0.03%) 184.67
other 1128 ( 0.01%) 277156 ( 0.00%) 245.71
icmp6 5044 ( 0.04%) 746364 ( 0.01%) 147.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1166 ( 0.01%) 1266816 ( 0.02%) 1086.46
tcpdump file: 200803202030.dump.gz (335.38 MB)