Traffic Trace Info
DumpFile: -
Id: 200803202245
StartTime: Thu Mar 20 22:45:01 2008
EndTime: Thu Mar 20 23:00:00 2008
TotalTime: 899.64 seconds
TotalCapSize: 701.13MB CapLen: 96 bytes
# of packets: 12789178 (6942.84MB)
AvgRate: 64.74Mbps stddev:8.71M
IP flow (unique src/dst pair) Information
# of flows: 734717 (avg. 17.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.8% 2.6% 2.5% 2.3% 1.9% 1.8% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 384794
Top 10 bandwidth usage (bytes/total in %):
12.5% 11.6% 10.6% 8.5% 3.8% 3.3% 3.1% 2.9% 2.9% 2.7%
# of IPv6 addresses: 1373
Top 10 bandwidth usage (bytes/total in %):
25.0% 19.8% 16.6% 16.6% 4.9% 3.8% 3.6% 3.3% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202245.pktlen.png)
detailed numbers
[ 32- 63]: 3270176
[ 64- 127]: 3602759
[ 128- 255]: 810270
[ 256- 511]: 549170
[ 512- 1023]: 318593
[ 1024- 2047]: 4238210
Protocol Breakdown
![[protocol breakdown chart]](200803202245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12789178 (100.00%) 7280099349 (100.00%) 569.24
ip 12752604 ( 99.71%) 7273817871 ( 99.91%) 570.38
tcp 9872110 ( 77.19%) 6785426828 ( 93.21%) 687.33
http(s) 2970020 ( 23.22%) 4095833229 ( 56.26%) 1379.06
http(c) 1823429 ( 14.26%) 159452904 ( 2.19%) 87.45
squid 667435 ( 5.22%) 398916602 ( 5.48%) 597.69
smtp 871992 ( 6.82%) 125535457 ( 1.72%) 143.96
nntp 5 ( 0.00%) 306 ( 0.00%) 61.20
ftp 48974 ( 0.38%) 15268221 ( 0.21%) 311.76
pop3 5543 ( 0.04%) 2166225 ( 0.03%) 390.80
imap 1894 ( 0.01%) 405039 ( 0.01%) 213.85
telnet 31 ( 0.00%) 2227 ( 0.00%) 71.84
ssh 45196 ( 0.35%) 7265265 ( 0.10%) 160.75
dns 2850 ( 0.02%) 217341 ( 0.00%) 76.26
bgp 206 ( 0.00%) 57828 ( 0.00%) 280.72
napster 425 ( 0.00%) 110203 ( 0.00%) 259.30
realaud 19 ( 0.00%) 2886 ( 0.00%) 151.89
rtsp 29224 ( 0.23%) 31637957 ( 0.43%) 1082.60
icecast 3929 ( 0.03%) 4487814 ( 0.06%) 1142.23
other 3400935 ( 26.59%) 1944067144 ( 26.70%) 571.63
udp 2095634 ( 16.39%) 420207052 ( 5.77%) 200.52
dns 1205327 ( 9.42%) 174778504 ( 2.40%) 145.01
realaud 11282 ( 0.09%) 5606877 ( 0.08%) 496.98
halflif 22 ( 0.00%) 2339 ( 0.00%) 106.32
starcra 219 ( 0.00%) 21283 ( 0.00%) 97.18
everque 53 ( 0.00%) 9876 ( 0.00%) 186.34
unreal 217 ( 0.00%) 14835 ( 0.00%) 68.36
quake 12 ( 0.00%) 2939 ( 0.00%) 244.92
cuseeme 5 ( 0.00%) 892 ( 0.00%) 178.40
other 878411 ( 6.87%) 239718176 ( 3.29%) 272.90
icmp 748995 ( 5.86%) 62035526 ( 0.85%) 82.83
ipip 324 ( 0.00%) 39538 ( 0.00%) 122.03
ip6 1072 ( 0.01%) 147468 ( 0.00%) 137.56
other 34469 ( 0.27%) 5961459 ( 0.08%) 172.95
frag 1862 ( 0.01%) 1627824 ( 0.02%) 874.23
ip6 36574 ( 0.29%) 6281478 ( 0.09%) 171.75
tcp6 17506 ( 0.14%) 1931711 ( 0.03%) 110.35
http(s) 122 ( 0.00%) 149053 ( 0.00%) 1221.75
http(c) 14379 ( 0.11%) 1291010 ( 0.02%) 89.78
smtp 627 ( 0.00%) 227116 ( 0.00%) 362.23
pop3 104 ( 0.00%) 10032 ( 0.00%) 96.46
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 100 ( 0.00%) 11681 ( 0.00%) 116.81
other 2167 ( 0.02%) 242184 ( 0.00%) 111.76
udp6 13326 ( 0.10%) 2491181 ( 0.03%) 186.94
dns 12262 ( 0.10%) 2252492 ( 0.03%) 183.70
other 1064 ( 0.01%) 238689 ( 0.00%) 224.33
icmp6 4585 ( 0.04%) 651519 ( 0.01%) 142.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1127 ( 0.01%) 1202987 ( 0.02%) 1067.42
tcpdump file: 200803202245.dump.gz (334.04 MB)