Traffic Trace Info
DumpFile: -
Id: 200803202130
StartTime: Thu Mar 20 21:30:01 2008
EndTime: Thu Mar 20 21:45:01 2008
TotalTime: 900.12 seconds
TotalCapSize: 682.22MB CapLen: 96 bytes
# of packets: 12492750 (6358.99MB)
AvgRate: 59.24Mbps stddev:11.05M
IP flow (unique src/dst pair) Information
# of flows: 943929 (avg. 13.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.2% 2.0% 1.8% 1.4% 1.1% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 575916
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.2% 9.7% 7.1% 3.8% 3.8% 3.2% 3.0% 2.8% 2.4%
# of IPv6 addresses: 1580
Top 10 bandwidth usage (bytes/total in %):
31.8% 24.9% 8.8% 7.8% 7.7% 5.1% 4.0% 3.8% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202130.pktlen.png)
detailed numbers
[ 32- 63]: 3339914
[ 64- 127]: 3625431
[ 128- 255]: 877207
[ 256- 511]: 510877
[ 512- 1023]: 330237
[ 1024- 2047]: 3809084
Protocol Breakdown
![[protocol breakdown chart]](200803202130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12492750 (100.00%) 6667884048 (100.00%) 533.74
ip 12468986 ( 99.81%) 6662629804 ( 99.92%) 534.34
tcp 9551590 ( 76.46%) 6179641612 ( 92.68%) 646.98
http(s) 2666000 ( 21.34%) 3672096148 ( 55.07%) 1377.38
http(c) 1795353 ( 14.37%) 151624501 ( 2.27%) 84.45
squid 681584 ( 5.46%) 376040571 ( 5.64%) 551.72
smtp 871714 ( 6.98%) 159804490 ( 2.40%) 183.32
nntp 7 ( 0.00%) 432 ( 0.00%) 61.71
ftp 58586 ( 0.47%) 29167181 ( 0.44%) 497.85
pop3 6455 ( 0.05%) 3407019 ( 0.05%) 527.81
imap 13353 ( 0.11%) 12283408 ( 0.18%) 919.90
telnet 397 ( 0.00%) 25704 ( 0.00%) 64.75
ssh 110121 ( 0.88%) 20685720 ( 0.31%) 187.85
dns 3845 ( 0.03%) 1888338 ( 0.03%) 491.12
bgp 199 ( 0.00%) 58426 ( 0.00%) 293.60
napster 269 ( 0.00%) 30606 ( 0.00%) 113.78
realaud 145 ( 0.00%) 20346 ( 0.00%) 140.32
rtsp 34868 ( 0.28%) 12763298 ( 0.19%) 366.05
icecast 4191 ( 0.03%) 1256254 ( 0.02%) 299.75
hotline 15 ( 0.00%) 3153 ( 0.00%) 210.20
other 3304487 ( 26.45%) 1738485957 ( 26.07%) 526.10
udp 2130135 ( 17.05%) 411392073 ( 6.17%) 193.13
dns 1213758 ( 9.72%) 175102156 ( 2.63%) 144.26
realaud 12875 ( 0.10%) 5939136 ( 0.09%) 461.29
halflif 21 ( 0.00%) 3169 ( 0.00%) 150.90
starcra 221 ( 0.00%) 22725 ( 0.00%) 102.83
everque 60 ( 0.00%) 8906 ( 0.00%) 148.43
unreal 98 ( 0.00%) 10222 ( 0.00%) 104.31
quake 12 ( 0.00%) 1412 ( 0.00%) 117.67
cuseeme 13 ( 0.00%) 1638 ( 0.00%) 126.00
other 903047 ( 7.23%) 230291202 ( 3.45%) 255.02
icmp 722305 ( 5.78%) 59810814 ( 0.90%) 82.81
ipip 373 ( 0.00%) 44442 ( 0.00%) 119.15
ip6 1091 ( 0.01%) 153663 ( 0.00%) 140.85
other 63492 ( 0.51%) 11587200 ( 0.17%) 182.50
frag 1754 ( 0.01%) 1473785 ( 0.02%) 840.24
ip6 23764 ( 0.19%) 5254244 ( 0.08%) 221.10
tcp6 3580 ( 0.03%) 520708 ( 0.01%) 145.45
http(s) 42 ( 0.00%) 55245 ( 0.00%) 1315.36
http(c) 895 ( 0.01%) 89076 ( 0.00%) 99.53
smtp 391 ( 0.00%) 120673 ( 0.00%) 308.63
pop3 69 ( 0.00%) 6609 ( 0.00%) 95.78
bgp 109 ( 0.00%) 13093 ( 0.00%) 120.12
other 2074 ( 0.02%) 236012 ( 0.00%) 113.80
udp6 13447 ( 0.11%) 2695624 ( 0.04%) 200.46
dns 12030 ( 0.10%) 2306948 ( 0.03%) 191.77
everque 1 ( 0.00%) 564 ( 0.00%) 564.00
other 1416 ( 0.01%) 388112 ( 0.01%) 274.09
icmp6 5542 ( 0.04%) 770834 ( 0.01%) 139.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1165 ( 0.01%) 1262998 ( 0.02%) 1084.12
tcpdump file: 200803202130.dump.gz (330.35 MB)