Traffic Trace Info
DumpFile: -
Id: 200803202100
StartTime: Thu Mar 20 21:00:00 2008
EndTime: Thu Mar 20 21:15:00 2008
TotalTime: 900.22 seconds
TotalCapSize: 693.01MB CapLen: 96 bytes
# of packets: 12602678 (6678.98MB)
AvgRate: 62.22Mbps stddev:10.67M
IP flow (unique src/dst pair) Information
# of flows: 818010 (avg. 15.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.4% 4.3% 1.3% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0% 0.7%
IP address Information
# of IPv4 addresses: 444408
Top 10 bandwidth usage (bytes/total in %):
24.5% 13.8% 9.6% 7.4% 5.7% 4.4% 2.0% 2.0% 1.7% 1.6%
# of IPv6 addresses: 1400
Top 10 bandwidth usage (bytes/total in %):
34.4% 26.1% 5.3% 5.0% 4.7% 4.3% 4.3% 4.1% 3.8% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202100.pktlen.png)
detailed numbers
[ 32- 63]: 3021247
[ 64- 127]: 3773218
[ 128- 255]: 913495
[ 256- 511]: 521800
[ 512- 1023]: 349015
[ 1024- 2047]: 4023903
Protocol Breakdown
![[protocol breakdown chart]](200803202100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12602678 (100.00%) 7003415410 (100.00%) 555.71
ip 12580799 ( 99.83%) 6998650856 ( 99.93%) 556.30
tcp 9539781 ( 75.70%) 6417675112 ( 91.64%) 672.73
http(s) 2199367 ( 17.45%) 2996733899 ( 42.79%) 1362.54
http(c) 1556989 ( 12.35%) 139052350 ( 1.99%) 89.31
squid 777036 ( 6.17%) 505008821 ( 7.21%) 649.92
smtp 974545 ( 7.73%) 150885167 ( 2.15%) 154.83
nntp 8 ( 0.00%) 492 ( 0.00%) 61.50
ftp 75731 ( 0.60%) 28868445 ( 0.41%) 381.20
pop3 7519 ( 0.06%) 3607464 ( 0.05%) 479.78
imap 2673 ( 0.02%) 887788 ( 0.01%) 332.13
telnet 548 ( 0.00%) 35272 ( 0.00%) 64.36
ssh 228370 ( 1.81%) 69169349 ( 0.99%) 302.88
dns 2043 ( 0.02%) 159433 ( 0.00%) 78.04
bgp 191 ( 0.00%) 57551 ( 0.00%) 301.31
napster 3062 ( 0.02%) 1660897 ( 0.02%) 542.42
realaud 32 ( 0.00%) 4914 ( 0.00%) 153.56
rtsp 50676 ( 0.40%) 38379872 ( 0.55%) 757.36
icecast 703 ( 0.01%) 60881 ( 0.00%) 86.60
hotline 25 ( 0.00%) 4694 ( 0.00%) 187.76
other 3660244 ( 29.04%) 2483096683 ( 35.46%) 678.40
udp 2221001 ( 17.62%) 503278474 ( 7.19%) 226.60
dns 1176553 ( 9.34%) 174030100 ( 2.48%) 147.92
realaud 14117 ( 0.11%) 5779612 ( 0.08%) 409.41
halflif 31 ( 0.00%) 4012 ( 0.00%) 129.42
starcra 249 ( 0.00%) 28046 ( 0.00%) 112.63
everque 47 ( 0.00%) 5827 ( 0.00%) 123.98
unreal 99 ( 0.00%) 8715 ( 0.00%) 88.03
quake 8 ( 0.00%) 847 ( 0.00%) 105.88
cuseeme 3 ( 0.00%) 216 ( 0.00%) 72.00
other 1029867 ( 8.17%) 323404241 ( 4.62%) 314.03
icmp 765464 ( 6.07%) 64820713 ( 0.93%) 84.68
ipip 362 ( 0.00%) 43252 ( 0.00%) 119.48
ip6 1052 ( 0.01%) 145422 ( 0.00%) 138.23
other 53139 ( 0.42%) 12687883 ( 0.18%) 238.77
frag 8510 ( 0.07%) 10781574 ( 0.15%) 1266.93
ip6 21879 ( 0.17%) 4764554 ( 0.07%) 217.77
tcp6 3651 ( 0.03%) 502670 ( 0.01%) 137.68
http(s) 5 ( 0.00%) 612 ( 0.00%) 122.40
http(c) 946 ( 0.01%) 99774 ( 0.00%) 105.47
smtp 478 ( 0.00%) 146013 ( 0.00%) 305.47
pop3 60 ( 0.00%) 5894 ( 0.00%) 98.23
ssh 72 ( 0.00%) 8765 ( 0.00%) 121.74
bgp 120 ( 0.00%) 14730 ( 0.00%) 122.75
other 1970 ( 0.02%) 226882 ( 0.00%) 115.17
udp6 11588 ( 0.09%) 2276440 ( 0.03%) 196.45
dns 10426 ( 0.08%) 2027333 ( 0.03%) 194.45
other 1162 ( 0.01%) 249107 ( 0.00%) 214.38
icmp6 5522 ( 0.04%) 798746 ( 0.01%) 144.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1087 ( 0.01%) 1182482 ( 0.02%) 1087.84
tcpdump file: 200803202100.dump.gz (331.44 MB)