Traffic Trace Info
DumpFile: -
Id: 200803202200
StartTime: Thu Mar 20 22:00:00 2008
EndTime: Thu Mar 20 22:15:01 2008
TotalTime: 900.40 seconds
TotalCapSize: 673.68MB CapLen: 96 bytes
# of packets: 12449930 (6410.39MB)
AvgRate: 59.72Mbps stddev:11.60M
IP flow (unique src/dst pair) Information
# of flows: 822835 (avg. 15.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.5% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 451673
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.7% 8.2% 7.9% 4.1% 2.6% 2.5% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1338
Top 10 bandwidth usage (bytes/total in %):
33.8% 27.1% 6.4% 5.5% 4.5% 4.5% 4.2% 3.5% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202200.pktlen.png)
detailed numbers
[ 32- 63]: 3122616
[ 64- 127]: 3590905
[ 128- 255]: 905686
[ 256- 511]: 682509
[ 512- 1023]: 329755
[ 1024- 2047]: 3818459
Protocol Breakdown
![[protocol breakdown chart]](200803202200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12449930 (100.00%) 6721776162 (100.00%) 539.90
ip 12428741 ( 99.83%) 6716931692 ( 99.93%) 540.44
tcp 9196666 ( 73.87%) 6111556587 ( 90.92%) 664.54
http(s) 2664824 ( 21.40%) 3621455184 ( 53.88%) 1358.98
http(c) 1868472 ( 15.01%) 163229941 ( 2.43%) 87.36
squid 820790 ( 6.59%) 566969455 ( 8.43%) 690.76
smtp 887741 ( 7.13%) 139779520 ( 2.08%) 157.46
nntp 8 ( 0.00%) 492 ( 0.00%) 61.50
ftp 73325 ( 0.59%) 38620252 ( 0.57%) 526.70
pop3 6800 ( 0.05%) 3148444 ( 0.05%) 463.01
imap 3696 ( 0.03%) 1242268 ( 0.02%) 336.11
telnet 238 ( 0.00%) 15531 ( 0.00%) 65.26
ssh 62175 ( 0.50%) 10295562 ( 0.15%) 165.59
dns 2194 ( 0.02%) 214255 ( 0.00%) 97.65
bgp 176 ( 0.00%) 47563 ( 0.00%) 270.24
napster 274 ( 0.00%) 36143 ( 0.00%) 131.91
rtsp 5955 ( 0.05%) 4738753 ( 0.07%) 795.76
icecast 1780 ( 0.01%) 255639 ( 0.00%) 143.62
other 2798212 ( 22.48%) 1561507225 ( 23.23%) 558.04
udp 2427815 ( 19.50%) 532598624 ( 7.92%) 219.37
dns 1226697 ( 9.85%) 179043388 ( 2.66%) 145.96
realaud 12247 ( 0.10%) 5670315 ( 0.08%) 463.00
halflif 15 ( 0.00%) 2432 ( 0.00%) 162.13
starcra 196 ( 0.00%) 18428 ( 0.00%) 94.02
everque 37 ( 0.00%) 4935 ( 0.00%) 133.38
unreal 150 ( 0.00%) 10815 ( 0.00%) 72.10
quake 11 ( 0.00%) 816 ( 0.00%) 74.18
cuseeme 8 ( 0.00%) 1162 ( 0.00%) 145.25
other 1188415 ( 9.55%) 347826460 ( 5.17%) 292.68
icmp 738992 ( 5.94%) 61440220 ( 0.91%) 83.14
ipip 366 ( 0.00%) 43946 ( 0.00%) 120.07
ip6 980 ( 0.01%) 132996 ( 0.00%) 135.71
other 63922 ( 0.51%) 11159319 ( 0.17%) 174.58
frag 1761 ( 0.01%) 1507874 ( 0.02%) 856.26
ip6 21189 ( 0.17%) 4844470 ( 0.07%) 228.63
tcp6 3797 ( 0.03%) 604835 ( 0.01%) 159.29
http(s) 4 ( 0.00%) 526 ( 0.00%) 131.50
http(c) 757 ( 0.01%) 78729 ( 0.00%) 104.00
smtp 676 ( 0.01%) 257975 ( 0.00%) 381.62
pop3 79 ( 0.00%) 7645 ( 0.00%) 96.77
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 108 ( 0.00%) 13192 ( 0.00%) 122.15
other 2166 ( 0.02%) 246133 ( 0.00%) 113.63
udp6 11299 ( 0.09%) 2263053 ( 0.03%) 200.29
dns 10141 ( 0.08%) 2000308 ( 0.03%) 197.25
other 1158 ( 0.01%) 262745 ( 0.00%) 226.90
icmp6 4897 ( 0.04%) 710144 ( 0.01%) 145.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1165 ( 0.01%) 1262222 ( 0.02%) 1083.45
tcpdump file: 200803202200.dump.gz (328.33 MB)