Traffic Trace Info
DumpFile: 200801111400.dump
FileSize: 1715.13MB
Id: 200801111400
StartTime: Fri Jan 11 14:00:01 2008
EndTime: Fri Jan 11 14:15:01 2008
TotalTime: 899.92 seconds
TotalCapSize: 1339.64MB CapLen: 96 bytes
# of packets: 24607573 (14541.32MB)
AvgRate: 135.55Mbps stddev:23.43M
IP flow (unique src/dst pair) Information
# of flows: 572005 (avg. 43.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.9% 2.0% 1.6% 1.1% 1.1% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 296525
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.6% 5.2% 5.0% 2.8% 2.7% 2.3% 2.2% 2.0% 2.0%
# of IPv6 addresses: 2234
Top 10 bandwidth usage (bytes/total in %):
12.0% 11.9% 11.8% 8.3% 7.7% 6.3% 6.3% 6.0% 5.9% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801111400.pktlen.png)
detailed numbers
[ 32- 63]: 6535098
[ 64- 127]: 7037318
[ 128- 255]: 848098
[ 256- 511]: 436720
[ 512- 1023]: 547350
[ 1024- 2047]: 9202989
Protocol Breakdown
![[protocol breakdown chart]](200801111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24607573 (100.00%) 15247683573 (100.00%) 619.63
ip 24585110 ( 99.91%) 15244146550 ( 99.98%) 620.06
tcp 19418875 ( 78.91%) 14512645231 ( 95.18%) 747.35
http(s) 8719207 ( 35.43%) 11632870804 ( 76.29%) 1334.17
http(c) 5482630 ( 22.28%) 656279583 ( 4.30%) 119.70
squid 738762 ( 3.00%) 614290856 ( 4.03%) 831.51
smtp 672495 ( 2.73%) 186663807 ( 1.22%) 277.57
nntp 8 ( 0.00%) 701 ( 0.00%) 87.62
ftp 123313 ( 0.50%) 22096221 ( 0.14%) 179.19
pop3 21145 ( 0.09%) 14709468 ( 0.10%) 695.65
imap 7510 ( 0.03%) 2547536 ( 0.02%) 339.22
telnet 743 ( 0.00%) 69534 ( 0.00%) 93.59
ssh 89527 ( 0.36%) 13556535 ( 0.09%) 151.42
dns 3796 ( 0.02%) 2122188 ( 0.01%) 559.06
bgp 182 ( 0.00%) 55134 ( 0.00%) 302.93
napster 109 ( 0.00%) 78565 ( 0.00%) 720.78
realaud 27 ( 0.00%) 2295 ( 0.00%) 85.00
rtsp 35839 ( 0.15%) 28419595 ( 0.19%) 792.98
icecast 4762 ( 0.02%) 422208 ( 0.00%) 88.66
hotline 6 ( 0.00%) 889 ( 0.00%) 148.17
other 3518812 ( 14.30%) 1338459192 ( 8.78%) 380.37
udp 3604979 ( 14.65%) 576339310 ( 3.78%) 159.87
dns 1504781 ( 6.12%) 185227546 ( 1.21%) 123.09
realaud 22198 ( 0.09%) 14826445 ( 0.10%) 667.92
halflif 70 ( 0.00%) 6227 ( 0.00%) 88.96
starcra 12 ( 0.00%) 1558 ( 0.00%) 129.83
everque 69 ( 0.00%) 11350 ( 0.00%) 164.49
unreal 6 ( 0.00%) 723 ( 0.00%) 120.50
quake 27 ( 0.00%) 3075 ( 0.00%) 113.89
cuseeme 3 ( 0.00%) 259 ( 0.00%) 86.33
other 2077255 ( 8.44%) 376113159 ( 2.47%) 181.06
icmp 1469841 ( 5.97%) 139950053 ( 0.92%) 95.21
ipip 323 ( 0.00%) 40502 ( 0.00%) 125.39
ipsec 2459 ( 0.01%) 2682618 ( 0.02%) 1090.94
ip6 2577 ( 0.01%) 403180 ( 0.00%) 156.45
other 86056 ( 0.35%) 12085656 ( 0.08%) 140.44
frag 4284 ( 0.02%) 4247409 ( 0.03%) 991.46
ip6 22463 ( 0.09%) 3537023 ( 0.02%) 157.46
tcp6 4738 ( 0.02%) 774737 ( 0.01%) 163.52
http(s) 51 ( 0.00%) 11550 ( 0.00%) 226.47
http(c) 158 ( 0.00%) 19520 ( 0.00%) 123.54
smtp 89 ( 0.00%) 17186 ( 0.00%) 193.10
ssh 1657 ( 0.01%) 418013 ( 0.00%) 252.27
bgp 76 ( 0.00%) 8816 ( 0.00%) 116.00
other 2707 ( 0.01%) 299652 ( 0.00%) 110.70
udp6 11804 ( 0.05%) 2072039 ( 0.01%) 175.54
dns 9127 ( 0.04%) 1570649 ( 0.01%) 172.09
halflif 1 ( 0.00%) 95 ( 0.00%) 95.00
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 139 ( 0.00%) 139.00
other 2674 ( 0.01%) 501019 ( 0.00%) 187.37
icmp6 5889 ( 0.02%) 684310 ( 0.00%) 116.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1857 ( 0.00%) 928.50
tcpdump file: 200801111400.dump.gz (575.60 MB)