Traffic Trace Info
DumpFile: 200801131400.dump
FileSize: 1274.92MB
Id: 200801131400
StartTime: Sun Jan 13 14:00:00 2008
EndTime: Sun Jan 13 14:15:00 2008
TotalTime: 899.74 seconds
TotalCapSize: 990.26MB CapLen: 96 bytes
# of packets: 18655289 (6840.50MB)
AvgRate: 63.77Mbps stddev:8.71M
IP flow (unique src/dst pair) Information
# of flows: 602007 (avg. 30.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.9% 1.6% 1.6% 1.3% 1.2% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 321980
Top 10 bandwidth usage (bytes/total in %):
4.3% 4.1% 4.0% 3.8% 3.8% 3.6% 3.1% 2.6% 2.4% 2.2%
# of IPv6 addresses: 2504
Top 10 bandwidth usage (bytes/total in %):
14.5% 9.9% 8.1% 8.1% 7.5% 6.5% 6.4% 5.5% 4.8% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801131400.pktlen.png)
detailed numbers
[ 32- 63]: 4245377
[ 64- 127]: 7080625
[ 128- 255]: 3017106
[ 256- 511]: 322645
[ 512- 1023]: 207415
[ 1024- 2047]: 3782121
Protocol Breakdown
![[protocol breakdown chart]](200801131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18655289 (100.00%) 7172789110 (100.00%) 384.49
ip 18636753 ( 99.90%) 7169948630 ( 99.96%) 384.72
tcp 11778730 ( 63.14%) 6317311425 ( 88.07%) 536.33
http(s) 2741195 ( 14.69%) 3735947300 ( 52.09%) 1362.89
http(c) 2027811 ( 10.87%) 177173852 ( 2.47%) 87.37
squid 715314 ( 3.83%) 575447361 ( 8.02%) 804.47
smtp 585985 ( 3.14%) 105384581 ( 1.47%) 179.84
ftp 57925 ( 0.31%) 38409877 ( 0.54%) 663.10
pop3 16971 ( 0.09%) 11882098 ( 0.17%) 700.14
imap 2282 ( 0.01%) 266996 ( 0.00%) 117.00
telnet 96 ( 0.00%) 6163 ( 0.00%) 64.20
ssh 981851 ( 5.26%) 130384294 ( 1.82%) 132.79
dns 4854 ( 0.03%) 376211 ( 0.01%) 77.51
bgp 188 ( 0.00%) 44570 ( 0.00%) 237.07
napster 27 ( 0.00%) 2674 ( 0.00%) 99.04
realaud 67 ( 0.00%) 8390 ( 0.00%) 125.22
rtsp 20707 ( 0.11%) 1292571 ( 0.02%) 62.42
icecast 12783 ( 0.07%) 15227817 ( 0.21%) 1191.26
hotline 87 ( 0.00%) 53333 ( 0.00%) 613.02
other 4610586 ( 24.71%) 1525403277 ( 21.27%) 330.85
udp 5178490 ( 27.76%) 693031757 ( 9.66%) 133.83
dns 1147852 ( 6.15%) 146033511 ( 2.04%) 127.22
realaud 9 ( 0.00%) 834 ( 0.00%) 92.67
halflif 13 ( 0.00%) 2509 ( 0.00%) 193.00
starcra 9 ( 0.00%) 988 ( 0.00%) 109.78
everque 43 ( 0.00%) 7435 ( 0.00%) 172.91
unreal 5 ( 0.00%) 447 ( 0.00%) 89.40
quake 14 ( 0.00%) 1138 ( 0.00%) 81.29
cuseeme 265 ( 0.00%) 77598 ( 0.00%) 292.82
other 4029766 ( 21.60%) 546714839 ( 7.62%) 135.67
icmp 1673128 ( 8.97%) 158689543 ( 2.21%) 94.85
ipip 362 ( 0.00%) 42264 ( 0.00%) 116.75
ipsec 205 ( 0.00%) 61958 ( 0.00%) 302.23
ip6 847 ( 0.00%) 102788 ( 0.00%) 121.36
other 4991 ( 0.03%) 708895 ( 0.01%) 142.03
frag 17120 ( 0.09%) 15999115 ( 0.22%) 934.53
ip6 18536 ( 0.10%) 2840480 ( 0.04%) 153.24
tcp6 3060 ( 0.02%) 384933 ( 0.01%) 125.80
http(c) 93 ( 0.00%) 10126 ( 0.00%) 108.88
smtp 158 ( 0.00%) 45872 ( 0.00%) 290.33
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2746 ( 0.01%) 322386 ( 0.00%) 117.40
udp6 9404 ( 0.05%) 1752719 ( 0.02%) 186.38
dns 6425 ( 0.03%) 1198613 ( 0.02%) 186.55
other 2979 ( 0.02%) 554106 ( 0.01%) 186.00
icmp6 6041 ( 0.03%) 698612 ( 0.01%) 115.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200801131400.dump.gz (415.69 MB)