Traffic Trace Info
DumpFile: 200801081400.dump
FileSize: 1514.62MB
Id: 200801081400
StartTime: Tue Jan 8 14:00:01 2008
EndTime: Tue Jan 8 14:15:00 2008
TotalTime: 899.18 seconds
TotalCapSize: 1184.95MB CapLen: 96 bytes
# of packets: 21604863 (13620.48MB)
AvgRate: 127.07Mbps stddev:23.49M
IP flow (unique src/dst pair) Information
# of flows: 730666 (avg. 29.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.5% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 370111
Top 10 bandwidth usage (bytes/total in %):
3.9% 3.6% 3.6% 3.3% 3.1% 3.0% 2.9% 2.7% 2.0% 2.0%
# of IPv6 addresses: 2529
Top 10 bandwidth usage (bytes/total in %):
73.6% 73.6% 9.9% 9.9% 3.0% 3.0% 3.0% 1.0% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801081400.pktlen.png)
detailed numbers
[ 32- 63]: 5017497
[ 64- 127]: 5240239
[ 128- 255]: 1742701
[ 256- 511]: 536512
[ 512- 1023]: 555594
[ 1024- 2047]: 8512320
Protocol Breakdown
![[protocol breakdown chart]](200801081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21604863 (100.00%) 14282106109 (100.00%) 661.06
ip 21563838 ( 99.81%) 14254122197 ( 99.80%) 661.02
tcp 17889953 ( 82.81%) 13605518708 ( 95.26%) 760.51
http(s) 7498531 ( 34.71%) 9778861524 ( 68.47%) 1304.10
http(c) 4840476 ( 22.40%) 763581179 ( 5.35%) 157.75
squid 813474 ( 3.77%) 640413239 ( 4.48%) 787.26
smtp 750661 ( 3.47%) 213319476 ( 1.49%) 284.18
ftp 152703 ( 0.71%) 108985737 ( 0.76%) 713.71
pop3 24030 ( 0.11%) 19451945 ( 0.14%) 809.49
imap 6912 ( 0.03%) 985978 ( 0.01%) 142.65
telnet 338 ( 0.00%) 29334 ( 0.00%) 86.79
ssh 134623 ( 0.62%) 86388214 ( 0.60%) 641.70
dns 1904 ( 0.01%) 146430 ( 0.00%) 76.91
bgp 177 ( 0.00%) 47540 ( 0.00%) 268.59
napster 8 ( 0.00%) 492 ( 0.00%) 61.50
rtsp 172446 ( 0.80%) 142584430 ( 1.00%) 826.84
icecast 18078 ( 0.08%) 15411322 ( 0.11%) 852.49
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3475583 ( 16.09%) 1835311322 ( 12.85%) 528.06
udp 2728688 ( 12.63%) 552888147 ( 3.87%) 202.62
dns 1719978 ( 7.96%) 209369137 ( 1.47%) 121.73
realaud 142 ( 0.00%) 20799 ( 0.00%) 146.47
halflif 24 ( 0.00%) 2426 ( 0.00%) 101.08
starcra 43 ( 0.00%) 7483 ( 0.00%) 174.02
everque 77 ( 0.00%) 11430 ( 0.00%) 148.44
unreal 32 ( 0.00%) 4360 ( 0.00%) 136.25
quake 27 ( 0.00%) 3393 ( 0.00%) 125.67
cuseeme 7 ( 0.00%) 579 ( 0.00%) 82.71
other 1008341 ( 4.67%) 343462516 ( 2.40%) 340.62
icmp 906700 ( 4.20%) 88825622 ( 0.62%) 97.97
ipip 342 ( 0.00%) 41696 ( 0.00%) 121.92
ipsec 1042 ( 0.00%) 819412 ( 0.01%) 786.38
ip6 853 ( 0.00%) 103531 ( 0.00%) 121.37
other 36260 ( 0.17%) 5925081 ( 0.04%) 163.41
frag 8077 ( 0.04%) 9729270 ( 0.07%) 1204.56
ip6 41023 ( 0.19%) 27983792 ( 0.20%) 682.15
tcp6 19641 ( 0.09%) 24703107 ( 0.17%) 1257.73
http(s) 2605 ( 0.01%) 3724887 ( 0.03%) 1429.90
http(c) 84 ( 0.00%) 10074 ( 0.00%) 119.93
smtp 238 ( 0.00%) 60694 ( 0.00%) 255.02
ssh 15 ( 0.00%) 3894 ( 0.00%) 259.60
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 16631 ( 0.08%) 20896600 ( 0.15%) 1256.48
udp6 11916 ( 0.06%) 2124060 ( 0.01%) 178.25
dns 9031 ( 0.04%) 1629804 ( 0.01%) 180.47
starcra 8 ( 0.00%) 995 ( 0.00%) 124.38
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 2876 ( 0.01%) 493122 ( 0.00%) 171.46
icmp6 9428 ( 0.04%) 1145199 ( 0.01%) 121.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7346 ( 0.00%) 918.25
tcpdump file: 200801081400.dump.gz (532.76 MB)