Traffic Trace Info
DumpFile: 200801071400.dump
FileSize: 1558.16MB
Id: 200801071400
StartTime: Mon Jan 7 14:00:00 2008
EndTime: Mon Jan 7 14:15:00 2008
TotalTime: 899.97 seconds
TotalCapSize: 1216.16MB CapLen: 96 bytes
# of packets: 22413087 (15306.07MB)
AvgRate: 142.69Mbps stddev:26.89M
IP flow (unique src/dst pair) Information
# of flows: 668107 (avg. 33.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.9% 2.8% 1.3% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 344674
Top 10 bandwidth usage (bytes/total in %):
6.4% 6.2% 3.4% 3.3% 2.9% 2.9% 2.8% 2.8% 2.8% 2.8%
# of IPv6 addresses: 2090
Top 10 bandwidth usage (bytes/total in %):
50.7% 50.7% 6.8% 3.4% 3.4% 3.4% 2.9% 2.9% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801071400.pktlen.png)
detailed numbers
[ 32- 63]: 4505722
[ 64- 127]: 5051468
[ 128- 255]: 2046319
[ 256- 511]: 526637
[ 512- 1023]: 565149
[ 1024- 2047]: 9717792
Protocol Breakdown
![[protocol breakdown chart]](200801071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22413087 (100.00%) 16049573444 (100.00%) 716.08
ip 22386942 ( 99.88%) 16041879634 ( 99.95%) 716.57
tcp 17518629 ( 78.16%) 15163601427 ( 94.48%) 865.57
http(s) 8480265 ( 37.84%) 11306349530 ( 70.45%) 1333.25
http(c) 4098760 ( 18.29%) 506107165 ( 3.15%) 123.48
squid 716061 ( 3.19%) 546492885 ( 3.41%) 763.19
smtp 741789 ( 3.31%) 187858495 ( 1.17%) 253.25
nntp 7 ( 0.00%) 420 ( 0.00%) 60.00
ftp 163541 ( 0.73%) 165988388 ( 1.03%) 1014.96
pop3 15665 ( 0.07%) 11756232 ( 0.07%) 750.48
imap 15789 ( 0.07%) 4997062 ( 0.03%) 316.49
telnet 808 ( 0.00%) 61997 ( 0.00%) 76.73
ssh 46441 ( 0.21%) 28638559 ( 0.18%) 616.67
dns 5141 ( 0.02%) 345021 ( 0.00%) 67.11
bgp 197 ( 0.00%) 57020 ( 0.00%) 289.44
napster 14 ( 0.00%) 1767 ( 0.00%) 126.21
realaud 15 ( 0.00%) 972 ( 0.00%) 64.80
rtsp 46749 ( 0.21%) 52588115 ( 0.33%) 1124.90
icecast 17229 ( 0.08%) 15483490 ( 0.10%) 898.69
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3170153 ( 14.14%) 2336874005 ( 14.56%) 737.15
udp 3888304 ( 17.35%) 778506062 ( 4.85%) 200.22
dns 1571316 ( 7.01%) 213075396 ( 1.33%) 135.60
realaud 24 ( 0.00%) 3353 ( 0.00%) 139.71
halflif 34 ( 0.00%) 3031 ( 0.00%) 89.15
starcra 40 ( 0.00%) 6830 ( 0.00%) 170.75
everque 67 ( 0.00%) 10696 ( 0.00%) 159.64
unreal 25 ( 0.00%) 3868 ( 0.00%) 154.72
quake 24 ( 0.00%) 2267 ( 0.00%) 94.46
cuseeme 5 ( 0.00%) 421 ( 0.00%) 84.20
other 2316747 ( 10.34%) 565398709 ( 3.52%) 244.05
icmp 939138 ( 4.19%) 92548540 ( 0.58%) 98.55
ipip 341 ( 0.00%) 40870 ( 0.00%) 119.85
ipsec 888 ( 0.00%) 701176 ( 0.00%) 789.61
ip6 840 ( 0.00%) 102690 ( 0.00%) 122.25
other 38802 ( 0.17%) 6378869 ( 0.04%) 164.40
frag 930 ( 0.00%) 786135 ( 0.00%) 845.31
ip6 26143 ( 0.12%) 7693690 ( 0.05%) 294.29
tcp6 7240 ( 0.03%) 4877273 ( 0.03%) 673.66
http(s) 422 ( 0.00%) 200205 ( 0.00%) 474.42
http(c) 214 ( 0.00%) 19830 ( 0.00%) 92.66
smtp 498 ( 0.00%) 181582 ( 0.00%) 364.62
ftp 207 ( 0.00%) 23909 ( 0.00%) 115.50
ssh 228 ( 0.00%) 29221 ( 0.00%) 128.16
bgp 83 ( 0.00%) 9669 ( 0.00%) 116.49
other 5588 ( 0.02%) 4412857 ( 0.03%) 789.70
udp6 11542 ( 0.05%) 1975789 ( 0.01%) 171.18
dns 9615 ( 0.04%) 1691059 ( 0.01%) 175.88
starcra 2 ( 0.00%) 274 ( 0.00%) 137.00
other 1925 ( 0.01%) 284456 ( 0.00%) 147.77
icmp6 7321 ( 0.03%) 827069 ( 0.01%) 112.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 9479 ( 0.00%) 947.90
tcpdump file: 200801071400.dump.gz (538.99 MB)