Traffic Trace Info
DumpFile: 200801101400.dump
FileSize: 1388.38MB
Id: 200801101400
StartTime: Thu Jan 10 14:00:00 2008
EndTime: Thu Jan 10 14:15:01 2008
TotalTime: 900.47 seconds
TotalCapSize: 1085.12MB CapLen: 96 bytes
# of packets: 19874064 (10101.03MB)
AvgRate: 94.10Mbps stddev:25.80M
IP flow (unique src/dst pair) Information
# of flows: 758426 (avg. 26.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.2% 1.1% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 442878
Top 10 bandwidth usage (bytes/total in %):
4.0% 3.3% 3.3% 2.9% 2.8% 2.3% 1.9% 1.9% 1.8% 1.7%
# of IPv6 addresses: 1858
Top 10 bandwidth usage (bytes/total in %):
57.1% 56.4% 9.5% 3.9% 2.9% 2.6% 2.4% 2.4% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801101400.pktlen.png)
detailed numbers
[ 32- 63]: 4741388
[ 64- 127]: 6415286
[ 128- 255]: 1790396
[ 256- 511]: 378192
[ 512- 1023]: 390627
[ 1024- 2047]: 6158175
Protocol Breakdown
![[protocol breakdown chart]](200801101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19874064 (100.00%) 10591695833 (100.00%) 532.94
ip 19784673 ( 99.55%) 10582130306 ( 99.91%) 534.87
tcp 14044393 ( 70.67%) 9806135565 ( 92.58%) 698.22
http(s) 5737815 ( 28.87%) 7529605800 ( 71.09%) 1312.28
http(c) 3302877 ( 16.62%) 358798901 ( 3.39%) 108.63
squid 544851 ( 2.74%) 383674822 ( 3.62%) 704.18
smtp 704901 ( 3.55%) 186674176 ( 1.76%) 264.82
ftp 103694 ( 0.52%) 8293219 ( 0.08%) 79.98
pop3 18001 ( 0.09%) 12508443 ( 0.12%) 694.87
imap 9015 ( 0.05%) 6665356 ( 0.06%) 739.36
telnet 196 ( 0.00%) 23056 ( 0.00%) 117.63
ssh 1657038 ( 8.34%) 224491497 ( 2.12%) 135.48
dns 2362 ( 0.01%) 176536 ( 0.00%) 74.74
bgp 236 ( 0.00%) 85696 ( 0.00%) 363.12
napster 35 ( 0.00%) 2753 ( 0.00%) 78.66
realaud 2537 ( 0.01%) 1004947 ( 0.01%) 396.12
rtsp 54903 ( 0.28%) 25072213 ( 0.24%) 456.66
icecast 17902 ( 0.09%) 16166927 ( 0.15%) 903.08
other 1888029 ( 9.50%) 1052891163 ( 9.94%) 557.67
udp 4473166 ( 22.51%) 644996754 ( 6.09%) 144.19
dns 1605979 ( 8.08%) 195341322 ( 1.84%) 121.63
realaud 8013 ( 0.04%) 3920526 ( 0.04%) 489.27
halflif 11 ( 0.00%) 916 ( 0.00%) 83.27
starcra 167 ( 0.00%) 16135 ( 0.00%) 96.62
everque 55 ( 0.00%) 9589 ( 0.00%) 174.35
unreal 11 ( 0.00%) 1517 ( 0.00%) 137.91
quake 41 ( 0.00%) 4142 ( 0.00%) 101.02
cuseeme 2 ( 0.00%) 154 ( 0.00%) 77.00
other 2858673 ( 14.38%) 445607132 ( 4.21%) 155.88
icmp 1221513 ( 6.15%) 120929224 ( 1.14%) 99.00
ipip 348 ( 0.00%) 42124 ( 0.00%) 121.05
ipsec 3471 ( 0.02%) 3434626 ( 0.03%) 989.52
ip6 987 ( 0.00%) 120261 ( 0.00%) 121.84
other 40795 ( 0.21%) 6471752 ( 0.06%) 158.64
frag 2585 ( 0.01%) 2784431 ( 0.03%) 1077.15
ip6 89391 ( 0.45%) 9565527 ( 0.09%) 107.01
tcp6 67042 ( 0.34%) 6210053 ( 0.06%) 92.63
http(s) 284 ( 0.00%) 168486 ( 0.00%) 593.26
http(c) 62603 ( 0.31%) 5482387 ( 0.05%) 87.57
smtp 447 ( 0.00%) 152789 ( 0.00%) 341.81
telnet 721 ( 0.00%) 53745 ( 0.00%) 74.54
bgp 147 ( 0.00%) 17837 ( 0.00%) 121.34
other 2840 ( 0.01%) 334809 ( 0.00%) 117.89
udp6 12708 ( 0.06%) 2123949 ( 0.02%) 167.13
dns 10912 ( 0.05%) 1810988 ( 0.02%) 165.96
starcra 5 ( 0.00%) 581 ( 0.00%) 116.20
other 1791 ( 0.01%) 312380 ( 0.00%) 174.42
icmp6 9595 ( 0.05%) 1211821 ( 0.01%) 126.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 15624 ( 0.00%) 976.50
tcpdump file: 200801101400.dump.gz (477.91 MB)