Traffic Trace Info
DumpFile: 200801091400.dump
FileSize: 1628.51MB
Id: 200801091400
StartTime: Wed Jan 9 14:00:01 2008
EndTime: Wed Jan 9 14:15:00 2008
TotalTime: 899.25 seconds
TotalCapSize: 1269.30MB CapLen: 96 bytes
# of packets: 23540567 (15646.72MB)
AvgRate: 145.94Mbps stddev:23.77M
IP flow (unique src/dst pair) Information
# of flows: 704973 (avg. 33.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.8% 1.6% 1.6% 1.6% 1.4% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 369319
Top 10 bandwidth usage (bytes/total in %):
8.2% 3.8% 3.5% 3.3% 2.9% 2.7% 2.3% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1155
Top 10 bandwidth usage (bytes/total in %):
25.0% 19.8% 14.1% 9.6% 7.3% 5.3% 4.7% 4.5% 4.5% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801091400.pktlen.png)
detailed numbers
[ 32- 63]: 6455861
[ 64- 127]: 5108158
[ 128- 255]: 901704
[ 256- 511]: 504000
[ 512- 1023]: 471405
[ 1024- 2047]: 10099439
Protocol Breakdown
![[protocol breakdown chart]](200801091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23540567 (100.00%) 16406770972 (100.00%) 696.96
ip 23514901 ( 99.89%) 16401893122 ( 99.97%) 697.51
tcp 18498422 ( 78.58%) 15679055456 ( 95.56%) 847.59
http(s) 8917717 ( 37.88%) 11976368190 ( 73.00%) 1342.99
http(c) 5031376 ( 21.37%) 554568106 ( 3.38%) 110.22
squid 562854 ( 2.39%) 470133642 ( 2.87%) 835.27
smtp 628388 ( 2.67%) 197977215 ( 1.21%) 315.06
ftp 35413 ( 0.15%) 16831643 ( 0.10%) 475.30
pop3 21569 ( 0.09%) 16326820 ( 0.10%) 756.96
imap 6206 ( 0.03%) 1785609 ( 0.01%) 287.72
telnet 537 ( 0.00%) 88674 ( 0.00%) 165.13
ssh 14551 ( 0.06%) 2675321 ( 0.02%) 183.86
dns 1904 ( 0.01%) 149151 ( 0.00%) 78.34
bgp 247 ( 0.00%) 95614 ( 0.00%) 387.10
realaud 5 ( 0.00%) 641 ( 0.00%) 128.20
rtsp 78954 ( 0.34%) 68496146 ( 0.42%) 867.54
icecast 66020 ( 0.28%) 67257605 ( 0.41%) 1018.75
hotline 36 ( 0.00%) 15278 ( 0.00%) 424.39
other 3132644 ( 13.31%) 2306285741 ( 14.06%) 736.21
udp 3779335 ( 16.05%) 581346375 ( 3.54%) 153.82
dns 1479740 ( 6.29%) 187250462 ( 1.14%) 126.54
realaud 940 ( 0.00%) 58343 ( 0.00%) 62.07
halflif 16 ( 0.00%) 1638 ( 0.00%) 102.38
starcra 70 ( 0.00%) 22764 ( 0.00%) 325.20
everque 87 ( 0.00%) 15412 ( 0.00%) 177.15
unreal 25 ( 0.00%) 3436 ( 0.00%) 137.44
quake 21 ( 0.00%) 1709 ( 0.00%) 81.38
cuseeme 2 ( 0.00%) 157 ( 0.00%) 78.50
other 2298402 ( 9.76%) 393983366 ( 2.40%) 171.42
icmp 1082170 ( 4.60%) 112268728 ( 0.68%) 103.74
ipip 346 ( 0.00%) 41584 ( 0.00%) 120.18
ipsec 3552 ( 0.02%) 3917360 ( 0.02%) 1102.86
ip6 888 ( 0.00%) 108321 ( 0.00%) 121.98
other 150188 ( 0.64%) 25155298 ( 0.15%) 167.49
frag 2735 ( 0.01%) 2253674 ( 0.01%) 824.01
ip6 25664 ( 0.11%) 4877730 ( 0.03%) 190.06
tcp6 6582 ( 0.03%) 2000968 ( 0.01%) 304.01
http(s) 2058 ( 0.01%) 1244470 ( 0.01%) 604.70
http(c) 354 ( 0.00%) 57747 ( 0.00%) 163.13
squid 221 ( 0.00%) 194172 ( 0.00%) 878.61
smtp 295 ( 0.00%) 92591 ( 0.00%) 313.87
ftp 47 ( 0.00%) 4440 ( 0.00%) 94.47
telnet 330 ( 0.00%) 24847 ( 0.00%) 75.29
ssh 90 ( 0.00%) 16116 ( 0.00%) 179.07
bgp 60 ( 0.00%) 6210 ( 0.00%) 103.50
other 3127 ( 0.01%) 360375 ( 0.00%) 115.25
udp6 10075 ( 0.04%) 1700786 ( 0.01%) 168.81
dns 9364 ( 0.04%) 1608091 ( 0.01%) 171.73
starcra 3 ( 0.00%) 415 ( 0.00%) 138.33
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 707 ( 0.00%) 92141 ( 0.00%) 130.33
icmp6 8976 ( 0.04%) 1171760 ( 0.01%) 130.54
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200801091400.dump.gz (558.97 MB)