Traffic Trace Info
DumpFile: 200801151400.dump
FileSize: 1944.52MB
Id: 200801151400
StartTime: Tue Jan 15 14:00:00 2008
EndTime: Tue Jan 15 14:15:00 2008
TotalTime: 899.80 seconds
TotalCapSize: 1516.96MB CapLen: 96 bytes
# of packets: 28019827 (15479.59MB)
AvgRate: 144.31Mbps stddev:20.02M
IP flow (unique src/dst pair) Information
# of flows: 749884 (avg. 37.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.5% 1.9% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 426657
Top 10 bandwidth usage (bytes/total in %):
5.2% 5.0% 4.8% 3.5% 3.2% 3.0% 2.8% 2.8% 2.6% 2.5%
# of IPv6 addresses: 2934
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.6% 9.5% 6.9% 6.3% 5.5% 5.5% 4.9% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801151400.pktlen.png)
detailed numbers
[ 32- 63]: 6512688
[ 64- 127]: 8694375
[ 128- 255]: 2007190
[ 256- 511]: 541433
[ 512- 1023]: 612502
[ 1024- 2047]: 9651639
Protocol Breakdown
![[protocol breakdown chart]](200801151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28019827 (100.00%) 16231530943 (100.00%) 579.29
ip 27995618 ( 99.91%) 16227202374 ( 99.97%) 579.63
tcp 21775083 ( 77.71%) 15396194751 ( 94.85%) 707.06
http(s) 8306656 ( 29.65%) 10974770215 ( 67.61%) 1321.20
http(c) 4780617 ( 17.06%) 680815560 ( 4.19%) 142.41
squid 492050 ( 1.76%) 267522007 ( 1.65%) 543.69
smtp 981556 ( 3.50%) 271869568 ( 1.67%) 276.98
ftp 69648 ( 0.25%) 44153435 ( 0.27%) 633.95
pop3 23315 ( 0.08%) 16196464 ( 0.10%) 694.68
imap 12188 ( 0.04%) 12091585 ( 0.07%) 992.09
telnet 3033 ( 0.01%) 1115377 ( 0.01%) 367.75
ssh 395017 ( 1.41%) 67504864 ( 0.42%) 170.89
dns 5883 ( 0.02%) 449355 ( 0.00%) 76.38
bgp 268 ( 0.00%) 122008 ( 0.00%) 455.25
napster 24 ( 0.00%) 3459 ( 0.00%) 144.12
realaud 75 ( 0.00%) 9145 ( 0.00%) 121.93
rtsp 95449 ( 0.34%) 75024849 ( 0.46%) 786.02
icecast 20131 ( 0.07%) 16340535 ( 0.10%) 811.71
hotline 9 ( 0.00%) 2882 ( 0.00%) 320.22
other 6589151 ( 23.52%) 2968202663 ( 18.29%) 450.47
udp 4514680 ( 16.11%) 657878581 ( 4.05%) 145.72
dns 1407588 ( 5.02%) 184209560 ( 1.13%) 130.87
realaud 53 ( 0.00%) 5779 ( 0.00%) 109.04
halflif 20 ( 0.00%) 2362 ( 0.00%) 118.10
starcra 207 ( 0.00%) 21627 ( 0.00%) 104.48
everque 101 ( 0.00%) 14344 ( 0.00%) 142.02
unreal 23 ( 0.00%) 4720 ( 0.00%) 205.22
quake 25 ( 0.00%) 2271 ( 0.00%) 90.84
cuseeme 3 ( 0.00%) 250 ( 0.00%) 83.33
other 3106592 ( 11.09%) 473596527 ( 2.92%) 152.45
icmp 1528381 ( 5.45%) 144960929 ( 0.89%) 94.85
ipip 355 ( 0.00%) 44022 ( 0.00%) 124.01
ipsec 3921 ( 0.01%) 4109294 ( 0.03%) 1048.02
ip6 833 ( 0.00%) 101613 ( 0.00%) 121.98
other 172365 ( 0.62%) 23913184 ( 0.15%) 138.74
frag 13094 ( 0.05%) 12113704 ( 0.07%) 925.13
ip6 24209 ( 0.09%) 4328569 ( 0.03%) 178.80
tcp6 4873 ( 0.02%) 1268245 ( 0.01%) 260.26
http(s) 866 ( 0.00%) 741066 ( 0.00%) 855.73
http(c) 665 ( 0.00%) 83420 ( 0.00%) 125.44
smtp 274 ( 0.00%) 88668 ( 0.00%) 323.61
ssh 14 ( 0.00%) 1036 ( 0.00%) 74.00
bgp 63 ( 0.00%) 6530 ( 0.00%) 103.65
other 2991 ( 0.01%) 347525 ( 0.00%) 116.19
udp6 13171 ( 0.05%) 2331772 ( 0.01%) 177.04
dns 9248 ( 0.03%) 1641688 ( 0.01%) 177.52
everque 2 ( 0.00%) 751 ( 0.00%) 375.50
other 3921 ( 0.01%) 689333 ( 0.00%) 175.81
icmp6 6124 ( 0.02%) 715012 ( 0.00%) 116.76
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10 ( 0.00%) 9324 ( 0.00%) 932.40
tcpdump file: 200801151400.dump.gz (661.29 MB)