Traffic Trace Info
DumpFile: 200801121400.dump
FileSize: 1530.83MB
Id: 200801121400
StartTime: Sat Jan 12 14:00:00 2008
EndTime: Sat Jan 12 14:15:01 2008
TotalTime: 900.29 seconds
TotalCapSize: 1198.97MB CapLen: 96 bytes
# of packets: 21748022 (10714.83MB)
AvgRate: 99.84Mbps stddev:19.80M
IP flow (unique src/dst pair) Information
# of flows: 676148 (avg. 32.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.1% 1.7% 1.7% 1.6% 1.5% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 349044
Top 10 bandwidth usage (bytes/total in %):
7.3% 6.1% 5.0% 3.9% 3.5% 3.5% 3.3% 3.1% 3.0% 2.4%
# of IPv6 addresses: 2538
Top 10 bandwidth usage (bytes/total in %):
23.3% 19.1% 13.9% 7.0% 6.9% 6.5% 6.3% 5.0% 4.5% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801121400.pktlen.png)
detailed numbers
[ 32- 63]: 4912507
[ 64- 127]: 8370369
[ 128- 255]: 1090583
[ 256- 511]: 499013
[ 512- 1023]: 406224
[ 1024- 2047]: 6469326
Protocol Breakdown
![[protocol breakdown chart]](200801121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21748022 (100.00%) 11235310852 (100.00%) 516.61
ip 21715443 ( 99.85%) 11229516197 ( 99.95%) 517.12
tcp 16480557 ( 75.78%) 10387456680 ( 92.45%) 630.29
http(s) 5400138 ( 24.83%) 7399573616 ( 65.86%) 1370.26
http(c) 3687914 ( 16.96%) 381845390 ( 3.40%) 103.54
squid 543016 ( 2.50%) 340161988 ( 3.03%) 626.43
smtp 490782 ( 2.26%) 96197124 ( 0.86%) 196.01
ftp 461991 ( 2.12%) 403942668 ( 3.60%) 874.35
pop3 36460 ( 0.17%) 29939680 ( 0.27%) 821.17
imap 4210 ( 0.02%) 1063723 ( 0.01%) 252.67
telnet 588 ( 0.00%) 51090 ( 0.00%) 86.89
ssh 1777152 ( 8.17%) 247324029 ( 2.20%) 139.17
dns 1884 ( 0.01%) 146922 ( 0.00%) 77.98
bgp 187 ( 0.00%) 55001 ( 0.00%) 294.12
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
rtsp 6247 ( 0.03%) 447764 ( 0.00%) 71.68
icecast 13205 ( 0.06%) 14829861 ( 0.13%) 1123.05
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 4056770 ( 18.65%) 1471877040 ( 13.10%) 362.82
udp 3505299 ( 16.12%) 668807791 ( 5.95%) 190.80
dns 1304177 ( 6.00%) 164950645 ( 1.47%) 126.48
realaud 11197 ( 0.05%) 5891938 ( 0.05%) 526.21
halflif 24 ( 0.00%) 2235 ( 0.00%) 93.12
starcra 10 ( 0.00%) 1699 ( 0.00%) 169.90
everque 49 ( 0.00%) 9635 ( 0.00%) 196.63
unreal 12 ( 0.00%) 1278 ( 0.00%) 106.50
quake 22 ( 0.00%) 1950 ( 0.00%) 88.64
cuseeme 4 ( 0.00%) 399 ( 0.00%) 99.75
other 2189730 ( 10.07%) 497855590 ( 4.43%) 227.36
icmp 1665599 ( 7.66%) 164285544 ( 1.46%) 98.63
ipip 357 ( 0.00%) 43890 ( 0.00%) 122.94
ipsec 842 ( 0.00%) 806284 ( 0.01%) 957.58
ip6 817 ( 0.00%) 99324 ( 0.00%) 121.57
other 61972 ( 0.28%) 8016684 ( 0.07%) 129.36
frag 2838 ( 0.01%) 2871500 ( 0.03%) 1011.80
ip6 32579 ( 0.15%) 5794655 ( 0.05%) 177.86
tcp6 4039 ( 0.02%) 539483 ( 0.00%) 133.57
http(c) 51 ( 0.00%) 5866 ( 0.00%) 115.02
smtp 500 ( 0.00%) 138649 ( 0.00%) 277.30
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 85 ( 0.00%) 10048 ( 0.00%) 118.21
other 3402 ( 0.02%) 384846 ( 0.00%) 113.12
udp6 22185 ( 0.10%) 4502052 ( 0.04%) 202.93
dns 19293 ( 0.09%) 3894664 ( 0.03%) 201.87
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 139 ( 0.00%) 139.00
other 2890 ( 0.01%) 607112 ( 0.01%) 210.07
icmp6 6305 ( 0.03%) 731100 ( 0.01%) 115.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 17940 ( 0.00%) 897.00
tcpdump file: 200801121400.dump.gz (511.79 MB)