Traffic Trace Info
DumpFile: -
Id: 200803202330
StartTime: Thu Mar 20 23:30:00 2008
EndTime: Thu Mar 20 23:45:01 2008
TotalTime: 900.33 seconds
TotalCapSize: 698.39MB CapLen: 96 bytes
# of packets: 12842946 (6730.06MB)
AvgRate: 62.71Mbps stddev:11.24M
IP flow (unique src/dst pair) Information
# of flows: 805833 (avg. 15.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.2% 1.6% 1.5% 1.4% 1.4% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 468981
Top 10 bandwidth usage (bytes/total in %):
13.1% 12.8% 9.8% 9.4% 3.0% 3.0% 2.3% 2.0% 2.0% 1.9%
# of IPv6 addresses: 1582
Top 10 bandwidth usage (bytes/total in %):
28.1% 22.3% 15.8% 10.6% 8.0% 7.6% 3.8% 3.2% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202330.pktlen.png)
detailed numbers
[ 32- 63]: 3572607
[ 64- 127]: 3483522
[ 128- 255]: 817096
[ 256- 511]: 568705
[ 512- 1023]: 332194
[ 1024- 2047]: 4068822
Protocol Breakdown
![[protocol breakdown chart]](200803202330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12842946 (100.00%) 7056979260 (100.00%) 549.48
ip 12814899 ( 99.78%) 7050750931 ( 99.91%) 550.20
tcp 9920753 ( 77.25%) 6574931533 ( 93.17%) 662.75
http(s) 2857834 ( 22.25%) 3895988931 ( 55.21%) 1363.27
http(c) 2068248 ( 16.10%) 210253356 ( 2.98%) 101.66
squid 793326 ( 6.18%) 472555820 ( 6.70%) 595.66
smtp 812117 ( 6.32%) 137475017 ( 1.95%) 169.28
ftp 33197 ( 0.26%) 6439147 ( 0.09%) 193.97
pop3 123114 ( 0.96%) 118734324 ( 1.68%) 964.43
imap 3669 ( 0.03%) 1008956 ( 0.01%) 274.99
telnet 32 ( 0.00%) 2287 ( 0.00%) 71.47
ssh 39171 ( 0.31%) 6415352 ( 0.09%) 163.78
dns 3852 ( 0.03%) 1883313 ( 0.03%) 488.92
bgp 202 ( 0.00%) 61764 ( 0.00%) 305.76
napster 1349 ( 0.01%) 821044 ( 0.01%) 608.63
realaud 19 ( 0.00%) 3153 ( 0.00%) 165.95
rtsp 609 ( 0.00%) 121029 ( 0.00%) 198.73
icecast 12620 ( 0.10%) 15224741 ( 0.22%) 1206.40
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 3171383 ( 24.69%) 1707941412 ( 24.20%) 538.55
udp 2082213 ( 16.21%) 408299013 ( 5.79%) 196.09
dns 1179616 ( 9.18%) 170936011 ( 2.42%) 144.91
realaud 10484 ( 0.08%) 5559482 ( 0.08%) 530.28
halflif 18 ( 0.00%) 2281 ( 0.00%) 126.72
starcra 203 ( 0.00%) 18471 ( 0.00%) 90.99
everque 29 ( 0.00%) 3597 ( 0.00%) 124.03
unreal 66 ( 0.00%) 4782 ( 0.00%) 72.45
quake 20 ( 0.00%) 3128 ( 0.00%) 156.40
cuseeme 5 ( 0.00%) 597 ( 0.00%) 119.40
other 891732 ( 6.94%) 231751425 ( 3.28%) 259.89
icmp 804621 ( 6.27%) 66477039 ( 0.94%) 82.62
ipip 378 ( 0.00%) 46210 ( 0.00%) 122.25
ip6 1084 ( 0.01%) 151326 ( 0.00%) 139.60
other 5850 ( 0.05%) 845810 ( 0.01%) 144.58
frag 1511 ( 0.01%) 1310325 ( 0.02%) 867.19
ip6 28047 ( 0.22%) 6228329 ( 0.09%) 222.07
tcp6 4434 ( 0.03%) 752050 ( 0.01%) 169.61
http(s) 47 ( 0.00%) 55996 ( 0.00%) 1191.40
http(c) 921 ( 0.01%) 93335 ( 0.00%) 101.34
smtp 703 ( 0.01%) 304001 ( 0.00%) 432.43
pop3 65 ( 0.00%) 6375 ( 0.00%) 98.08
bgp 117 ( 0.00%) 14804 ( 0.00%) 126.53
other 2581 ( 0.02%) 277539 ( 0.00%) 107.53
udp6 16811 ( 0.13%) 3360830 ( 0.05%) 199.92
dns 15315 ( 0.12%) 2886496 ( 0.04%) 188.48
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1495 ( 0.01%) 474197 ( 0.01%) 317.19
icmp6 5569 ( 0.04%) 791159 ( 0.01%) 142.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1203 ( 0.01%) 1320210 ( 0.02%) 1097.43
tcpdump file: 200803202330.dump.gz (331.18 MB)