Traffic Trace Info
DumpFile: -
Id: 200803202230
StartTime: Thu Mar 20 22:30:00 2008
EndTime: Thu Mar 20 22:45:01 2008
TotalTime: 900.44 seconds
TotalCapSize: 675.94MB CapLen: 96 bytes
# of packets: 12406724 (6930.53MB)
AvgRate: 64.56Mbps stddev:10.06M
IP flow (unique src/dst pair) Information
# of flows: 691228 (avg. 17.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.1% 2.0% 1.9% 1.9% 1.5% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 362229
Top 10 bandwidth usage (bytes/total in %):
10.1% 9.4% 9.3% 8.8% 3.4% 3.3% 2.3% 2.2% 2.2% 2.0%
# of IPv6 addresses: 1391
Top 10 bandwidth usage (bytes/total in %):
30.9% 25.0% 11.7% 11.7% 5.4% 5.4% 4.4% 3.8% 3.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202230.pktlen.png)
detailed numbers
[ 32- 63]: 3082912
[ 64- 127]: 3395134
[ 128- 255]: 818988
[ 256- 511]: 524014
[ 512- 1023]: 309121
[ 1024- 2047]: 4276555
Protocol Breakdown
![[protocol breakdown chart]](200803202230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12406724 (100.00%) 7267182860 (100.00%) 585.75
ip 12377028 ( 99.76%) 7261482490 ( 99.92%) 586.69
tcp 9539949 ( 76.89%) 6740186172 ( 92.75%) 706.52
http(s) 2939976 ( 23.70%) 4011228287 ( 55.20%) 1364.37
http(c) 1820478 ( 14.67%) 166931434 ( 2.30%) 91.70
squid 873033 ( 7.04%) 597253918 ( 8.22%) 684.11
smtp 835214 ( 6.73%) 119972239 ( 1.65%) 143.64
nntp 6 ( 0.00%) 372 ( 0.00%) 62.00
ftp 45183 ( 0.36%) 17492087 ( 0.24%) 387.14
pop3 6893 ( 0.06%) 2950803 ( 0.04%) 428.09
imap 3726 ( 0.03%) 1004273 ( 0.01%) 269.53
telnet 28 ( 0.00%) 2049 ( 0.00%) 73.18
ssh 46997 ( 0.38%) 7628202 ( 0.10%) 162.31
dns 3890 ( 0.03%) 1943313 ( 0.03%) 499.57
bgp 207 ( 0.00%) 59771 ( 0.00%) 288.75
napster 487 ( 0.00%) 59136 ( 0.00%) 121.43
realaud 12 ( 0.00%) 1372 ( 0.00%) 114.33
rtsp 5209 ( 0.04%) 4201745 ( 0.06%) 806.63
icecast 326 ( 0.00%) 27187 ( 0.00%) 83.40
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 2958275 ( 23.84%) 1809428424 ( 24.90%) 611.65
udp 2099726 ( 16.92%) 454963048 ( 6.26%) 216.68
dns 1185131 ( 9.55%) 173212543 ( 2.38%) 146.15
rip 4 ( 0.00%) 771 ( 0.00%) 192.75
realaud 12361 ( 0.10%) 5674952 ( 0.08%) 459.10
halflif 15 ( 0.00%) 1577 ( 0.00%) 105.13
starcra 209 ( 0.00%) 21328 ( 0.00%) 102.05
everque 25 ( 0.00%) 2929 ( 0.00%) 117.16
unreal 162 ( 0.00%) 11123 ( 0.00%) 68.66
quake 7 ( 0.00%) 968 ( 0.00%) 138.29
cuseeme 5 ( 0.00%) 458 ( 0.00%) 91.60
other 901764 ( 7.27%) 276013116 ( 3.80%) 306.08
icmp 696958 ( 5.62%) 57977794 ( 0.80%) 83.19
ipip 373 ( 0.00%) 44402 ( 0.00%) 119.04
ip6 1044 ( 0.01%) 144617 ( 0.00%) 138.52
other 38978 ( 0.31%) 8166457 ( 0.11%) 209.51
frag 1739 ( 0.01%) 1493427 ( 0.02%) 858.78
ip6 29696 ( 0.24%) 5700370 ( 0.08%) 191.96
tcp6 11442 ( 0.09%) 1226583 ( 0.02%) 107.20
http(s) 42 ( 0.00%) 55245 ( 0.00%) 1315.36
http(c) 8545 ( 0.07%) 768121 ( 0.01%) 89.89
smtp 399 ( 0.00%) 127659 ( 0.00%) 319.95
pop3 86 ( 0.00%) 8014 ( 0.00%) 93.19
dns 16 ( 0.00%) 3588 ( 0.00%) 224.25
bgp 102 ( 0.00%) 12067 ( 0.00%) 118.30
other 2252 ( 0.02%) 251889 ( 0.00%) 111.85
udp6 11941 ( 0.10%) 2376757 ( 0.03%) 199.04
dns 10735 ( 0.09%) 2078686 ( 0.03%) 193.64
other 1206 ( 0.01%) 298071 ( 0.00%) 247.16
icmp6 5036 ( 0.04%) 733263 ( 0.01%) 145.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1247 ( 0.01%) 1359687 ( 0.02%) 1090.37
tcpdump file: 200803202230.dump.gz (323.58 MB)