Traffic Trace Info
DumpFile: 200801041400.dump
FileSize: 1126.74MB
Id: 200801041400
StartTime: Fri Jan 4 14:00:00 2008
EndTime: Fri Jan 4 14:15:01 2008
TotalTime: 900.31 seconds
TotalCapSize: 882.06MB CapLen: 96 bytes
# of packets: 16034742 (9984.60MB)
AvgRate: 93.03Mbps stddev:14.25M
IP flow (unique src/dst pair) Information
# of flows: 669972 (avg. 23.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 5.3% 2.4% 1.6% 1.6% 1.6% 1.4% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 381076
Top 10 bandwidth usage (bytes/total in %):
16.3% 10.8% 9.0% 5.9% 5.5% 5.1% 4.3% 4.0% 3.6% 3.6%
# of IPv6 addresses: 3079
Top 10 bandwidth usage (bytes/total in %):
6.9% 6.9% 6.0% 5.4% 5.3% 5.1% 4.9% 4.7% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801041400.pktlen.png)
detailed numbers
[ 32- 63]: 3065823
[ 64- 127]: 5009457
[ 128- 255]: 695559
[ 256- 511]: 554933
[ 512- 1023]: 345888
[ 1024- 2047]: 6363082
Protocol Breakdown
![[protocol breakdown chart]](200801041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16034742 (100.00%) 10469614878 (100.00%) 652.93
ip 16012891 ( 99.86%) 10466220905 ( 99.97%) 653.61
tcp 11966669 ( 74.63%) 9539118208 ( 91.11%) 797.14
http(s) 5232427 ( 32.63%) 7131626408 ( 68.12%) 1362.97
http(c) 3024943 ( 18.86%) 282848910 ( 2.70%) 93.51
squid 636627 ( 3.97%) 480401329 ( 4.59%) 754.60
smtp 632604 ( 3.95%) 135745440 ( 1.30%) 214.58
nntp 1984 ( 0.01%) 135372 ( 0.00%) 68.23
ftp 115310 ( 0.72%) 37229889 ( 0.36%) 322.87
pop3 16776 ( 0.10%) 13885501 ( 0.13%) 827.70
imap 7137 ( 0.04%) 537654 ( 0.01%) 75.33
telnet 776 ( 0.00%) 49654 ( 0.00%) 63.99
ssh 37114 ( 0.23%) 5883808 ( 0.06%) 158.53
dns 2515 ( 0.02%) 193671 ( 0.00%) 77.01
bgp 201 ( 0.00%) 60289 ( 0.00%) 299.95
napster 11 ( 0.00%) 2094 ( 0.00%) 190.36
icecast 7654 ( 0.05%) 640270 ( 0.01%) 83.65
other 2250584 ( 14.04%) 1449877559 ( 13.85%) 644.22
udp 3185042 ( 19.86%) 848824743 ( 8.11%) 266.50
dns 1527826 ( 9.53%) 197964969 ( 1.89%) 129.57
realaud 20 ( 0.00%) 3302 ( 0.00%) 165.10
halflif 14 ( 0.00%) 2631 ( 0.00%) 187.93
starcra 26 ( 0.00%) 4248 ( 0.00%) 163.38
everque 93 ( 0.00%) 18311 ( 0.00%) 196.89
unreal 42 ( 0.00%) 7192 ( 0.00%) 171.24
quake 22 ( 0.00%) 2134 ( 0.00%) 97.00
cuseeme 3012 ( 0.02%) 2791931 ( 0.03%) 926.94
other 1653353 ( 10.31%) 647729375 ( 6.19%) 391.77
icmp 830122 ( 5.18%) 73842587 ( 0.71%) 88.95
ipip 364 ( 0.00%) 44936 ( 0.00%) 123.45
ipsec 166 ( 0.00%) 18260 ( 0.00%) 110.00
ip6 850 ( 0.01%) 103460 ( 0.00%) 121.72
other 29678 ( 0.19%) 4268711 ( 0.04%) 143.83
frag 11926 ( 0.07%) 7541178 ( 0.07%) 632.33
ip6 21851 ( 0.14%) 3393973 ( 0.03%) 155.32
tcp6 3955 ( 0.02%) 699583 ( 0.01%) 176.89
http(s) 142 ( 0.00%) 109499 ( 0.00%) 771.12
http(c) 112 ( 0.00%) 13823 ( 0.00%) 123.42
smtp 677 ( 0.00%) 220882 ( 0.00%) 326.27
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
bgp 64 ( 0.00%) 6737 ( 0.00%) 105.27
other 2930 ( 0.02%) 340854 ( 0.00%) 116.33
udp6 12394 ( 0.08%) 2107489 ( 0.02%) 170.04
dns 8166 ( 0.05%) 1505607 ( 0.01%) 184.38
starcra 1 ( 0.00%) 139 ( 0.00%) 139.00
unreal 8 ( 0.00%) 1098 ( 0.00%) 137.25
other 4219 ( 0.03%) 600645 ( 0.01%) 142.37
icmp6 5409 ( 0.03%) 526492 ( 0.01%) 97.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 63 ( 0.00%) 56329 ( 0.00%) 894.11
tcpdump file: 200801041400.dump.gz (401.56 MB)