Traffic Trace Info
DumpFile: 200803180100.dump
FileSize: 1001.32MB
Id: 200803180100
StartTime: Tue Mar 18 01:00:00 2008
EndTime: Tue Mar 18 01:15:00 2008
TotalTime: 900.26 seconds
TotalCapSize: 787.76MB CapLen: 96 bytes
# of packets: 13995003 (7027.97MB)
AvgRate: 65.48Mbps stddev:11.01M
IP flow (unique src/dst pair) Information
# of flows: 831848 (avg. 16.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.0% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 464341
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.1% 7.8% 7.0% 3.7% 3.5% 3.1% 2.7% 2.3% 2.1%
# of IPv6 addresses: 2249
Top 10 bandwidth usage (bytes/total in %):
12.7% 11.7% 10.5% 8.6% 6.3% 6.2% 5.6% 5.3% 4.5% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803180100.pktlen.png)
detailed numbers
[ 32- 63]: 2697366
[ 64- 127]: 5115839
[ 128- 255]: 1072673
[ 256- 511]: 549137
[ 512- 1023]: 393248
[ 1024- 2047]: 4166740
Protocol Breakdown
![[protocol breakdown chart]](200803180100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13995003 (100.00%) 7369364918 (100.00%) 526.57
ip 13969323 ( 99.82%) 7364576456 ( 99.94%) 527.20
tcp 10863939 ( 77.63%) 6697409709 ( 90.88%) 616.48
http(s) 3178027 ( 22.71%) 4356284167 ( 59.11%) 1370.75
http(c) 1666775 ( 11.91%) 156986543 ( 2.13%) 94.19
squid 518778 ( 3.71%) 302080942 ( 4.10%) 582.29
smtp 979891 ( 7.00%) 137258430 ( 1.86%) 140.08
ftp 171156 ( 1.22%) 58938448 ( 0.80%) 344.36
pop3 10250 ( 0.07%) 7945518 ( 0.11%) 775.17
imap 6328 ( 0.05%) 2452581 ( 0.03%) 387.58
telnet 680 ( 0.00%) 43765 ( 0.00%) 64.36
ssh 1827960 ( 13.06%) 261516483 ( 3.55%) 143.06
dns 2014 ( 0.01%) 234982 ( 0.00%) 116.67
bgp 217 ( 0.00%) 71659 ( 0.00%) 330.23
napster 49 ( 0.00%) 4843 ( 0.00%) 98.84
realaud 20 ( 0.00%) 2886 ( 0.00%) 144.30
rtsp 37388 ( 0.27%) 30485697 ( 0.41%) 815.39
icecast 12595 ( 0.09%) 15241163 ( 0.21%) 1210.10
hotline 13 ( 0.00%) 1386 ( 0.00%) 106.62
other 2451781 ( 17.52%) 1367859196 ( 18.56%) 557.90
udp 2159539 ( 15.43%) 590461140 ( 8.01%) 273.42
dns 1188207 ( 8.49%) 177809721 ( 2.41%) 149.65
realaud 34 ( 0.00%) 3990 ( 0.00%) 117.35
halflif 25 ( 0.00%) 2659 ( 0.00%) 106.36
starcra 30 ( 0.00%) 5874 ( 0.00%) 195.80
everque 34 ( 0.00%) 5250 ( 0.00%) 154.41
unreal 48 ( 0.00%) 5204 ( 0.00%) 108.42
quake 8 ( 0.00%) 1372 ( 0.00%) 171.50
cuseeme 2 ( 0.00%) 156 ( 0.00%) 78.00
other 971116 ( 6.94%) 412608109 ( 5.60%) 424.88
icmp 934148 ( 6.67%) 74772876 ( 1.01%) 80.04
ipip 379 ( 0.00%) 48941 ( 0.00%) 129.13
ip6 1105 ( 0.01%) 154156 ( 0.00%) 139.51
other 10213 ( 0.07%) 1729634 ( 0.02%) 169.36
frag 2031 ( 0.01%) 1774310 ( 0.02%) 873.61
ip6 25680 ( 0.18%) 4788462 ( 0.06%) 186.47
tcp6 4884 ( 0.03%) 761667 ( 0.01%) 155.95
http(s) 5 ( 0.00%) 1099 ( 0.00%) 219.80
http(c) 1392 ( 0.01%) 138712 ( 0.00%) 99.65
squid 8 ( 0.00%) 1058 ( 0.00%) 132.25
smtp 1030 ( 0.01%) 347105 ( 0.00%) 337.00
pop3 35 ( 0.00%) 3302 ( 0.00%) 94.34
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 76 ( 0.00%) 8565 ( 0.00%) 112.70
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2330 ( 0.02%) 261117 ( 0.00%) 112.07
udp6 15544 ( 0.11%) 3301088 ( 0.04%) 212.37
dns 12920 ( 0.09%) 2441590 ( 0.03%) 188.98
everque 2 ( 0.00%) 322 ( 0.00%) 161.00
other 2622 ( 0.02%) 859176 ( 0.01%) 327.68
icmp6 5218 ( 0.04%) 717912 ( 0.01%) 137.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3715 ( 0.00%) 928.75
tcpdump file: 200803180100.dump.gz (376.18 MB)