Traffic Trace Info
DumpFile: 200801031400.dump
FileSize: 784.37MB
Id: 200801031400
StartTime: Thu Jan 3 14:00:00 2008
EndTime: Thu Jan 3 14:15:00 2008
TotalTime: 900.01 seconds
TotalCapSize: 608.35MB CapLen: 96 bytes
# of packets: 11535155 (5359.28MB)
AvgRate: 49.95Mbps stddev:8.72M
IP flow (unique src/dst pair) Information
# of flows: 642504 (avg. 17.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 354472
Top 10 bandwidth usage (bytes/total in %):
11.9% 7.9% 6.6% 4.4% 3.0% 2.9% 2.5% 2.3% 2.2% 2.1%
# of IPv6 addresses: 3029
Top 10 bandwidth usage (bytes/total in %):
52.5% 52.5% 4.6% 4.6% 3.0% 3.0% 2.9% 2.5% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801031400.pktlen.png)
detailed numbers
[ 32- 63]: 2587387
[ 64- 127]: 4348831
[ 128- 255]: 669296
[ 256- 511]: 350515
[ 512- 1023]: 428059
[ 1024- 2047]: 3151067
Protocol Breakdown
![[protocol breakdown chart]](200801031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11535155 (100.00%) 5619613535 (100.00%) 487.17
ip 11511501 ( 99.79%) 5612162768 ( 99.87%) 487.53
tcp 7328044 ( 63.53%) 4503351675 ( 80.14%) 614.54
http(s) 2091107 ( 18.13%) 2726721033 ( 48.52%) 1303.96
http(c) 1490032 ( 12.92%) 157414148 ( 2.80%) 105.64
squid 645977 ( 5.60%) 444765719 ( 7.91%) 688.52
smtp 553141 ( 4.80%) 87169194 ( 1.55%) 157.59
ftp 17610 ( 0.15%) 3168700 ( 0.06%) 179.94
pop3 12640 ( 0.11%) 7852570 ( 0.14%) 621.25
imap 1769 ( 0.02%) 251718 ( 0.00%) 142.29
telnet 898 ( 0.01%) 56682 ( 0.00%) 63.12
ssh 721172 ( 6.25%) 100184487 ( 1.78%) 138.92
dns 2837 ( 0.02%) 215620 ( 0.00%) 76.00
bgp 179 ( 0.00%) 47819 ( 0.00%) 267.15
rtsp 120 ( 0.00%) 21346 ( 0.00%) 177.88
icecast 1108 ( 0.01%) 1320565 ( 0.02%) 1191.85
other 1789452 ( 15.51%) 974161954 ( 17.34%) 544.39
udp 3293950 ( 28.56%) 1023656662 ( 18.22%) 310.77
dns 1393836 ( 12.08%) 174469695 ( 3.10%) 125.17
realaud 54 ( 0.00%) 6172 ( 0.00%) 114.30
halflif 13 ( 0.00%) 1126 ( 0.00%) 86.62
starcra 567 ( 0.00%) 423007 ( 0.01%) 746.04
everque 94 ( 0.00%) 20347 ( 0.00%) 216.46
unreal 15 ( 0.00%) 1973 ( 0.00%) 131.53
quake 27 ( 0.00%) 4945 ( 0.00%) 183.15
cuseeme 9 ( 0.00%) 1029 ( 0.00%) 114.33
other 1899225 ( 16.46%) 848714486 ( 15.10%) 446.87
icmp 804325 ( 6.97%) 72822500 ( 1.30%) 90.54
ipip 343 ( 0.00%) 42970 ( 0.00%) 125.28
ipsec 181 ( 0.00%) 19910 ( 0.00%) 110.00
ip6 848 ( 0.01%) 105372 ( 0.00%) 124.26
other 83810 ( 0.73%) 12163679 ( 0.22%) 145.13
frag 2863 ( 0.02%) 2327869 ( 0.04%) 813.09
ip6 23654 ( 0.21%) 7450767 ( 0.13%) 314.99
tcp6 6826 ( 0.06%) 4965789 ( 0.09%) 727.48
http(s) 568 ( 0.00%) 450329 ( 0.01%) 792.83
http(c) 193 ( 0.00%) 21774 ( 0.00%) 112.82
smtp 165 ( 0.00%) 36930 ( 0.00%) 223.82
ftp 53 ( 0.00%) 9646 ( 0.00%) 182.00
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
bgp 78 ( 0.00%) 9110 ( 0.00%) 116.79
other 5739 ( 0.05%) 4430212 ( 0.08%) 771.95
udp6 11809 ( 0.10%) 1937081 ( 0.03%) 164.03
dns 7518 ( 0.07%) 1341078 ( 0.02%) 178.38
other 4291 ( 0.04%) 596003 ( 0.01%) 138.90
icmp6 4933 ( 0.04%) 496695 ( 0.01%) 100.69
pim6 32 ( 0.00%) 4312 ( 0.00%) 134.75
other6 54 ( 0.00%) 46890 ( 0.00%) 868.33
tcpdump file: 200801031400.dump.gz (303.29 MB)