Traffic Trace Info
DumpFile: 200801161400.dump
FileSize: 1738.35MB
Id: 200801161400
StartTime: Wed Jan 16 14:00:01 2008
EndTime: Wed Jan 16 14:15:00 2008
TotalTime: 899.83 seconds
TotalCapSize: 1358.00MB CapLen: 96 bytes
# of packets: 24925682 (15289.61MB)
AvgRate: 142.53Mbps stddev:29.04M
IP flow (unique src/dst pair) Information
# of flows: 829333 (avg. 30.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.2% 1.2% 1.1% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 436932
Top 10 bandwidth usage (bytes/total in %):
5.0% 4.4% 3.5% 3.1% 2.6% 2.6% 2.3% 2.0% 2.0% 2.0%
# of IPv6 addresses: 2843
Top 10 bandwidth usage (bytes/total in %):
14.5% 14.5% 10.2% 6.9% 5.8% 5.8% 5.1% 4.7% 4.4% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801161400.pktlen.png)
detailed numbers
[ 32- 63]: 6319703
[ 64- 127]: 6617349
[ 128- 255]: 967389
[ 256- 511]: 610181
[ 512- 1023]: 759538
[ 1024- 2047]: 9651522
Protocol Breakdown
![[protocol breakdown chart]](200801161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24925682 (100.00%) 16032314556 (100.00%) 643.20
ip 24894390 ( 99.87%) 16028128818 ( 99.97%) 643.85
tcp 19039767 ( 76.39%) 14841306352 ( 92.57%) 779.49
http(s) 8201562 ( 32.90%) 10709320551 ( 66.80%) 1305.77
http(c) 4033342 ( 16.18%) 467280033 ( 2.91%) 115.85
squid 620290 ( 2.49%) 478080609 ( 2.98%) 770.74
smtp 599135 ( 2.40%) 155918951 ( 0.97%) 260.24
ftp 155914 ( 0.63%) 106281808 ( 0.66%) 681.67
pop3 40573 ( 0.16%) 16663309 ( 0.10%) 410.70
imap 5203 ( 0.02%) 724707 ( 0.00%) 139.29
telnet 1109 ( 0.00%) 179028 ( 0.00%) 161.43
ssh 374426 ( 1.50%) 51518420 ( 0.32%) 137.59
dns 8189 ( 0.03%) 639018 ( 0.00%) 78.03
bgp 195 ( 0.00%) 57864 ( 0.00%) 296.74
napster 13 ( 0.00%) 838 ( 0.00%) 64.46
realaud 45 ( 0.00%) 6818 ( 0.00%) 151.51
rtsp 73153 ( 0.29%) 63034631 ( 0.39%) 861.68
icecast 24657 ( 0.10%) 21277531 ( 0.13%) 862.94
other 4901954 ( 19.67%) 2770321816 ( 17.28%) 565.15
udp 4480087 ( 17.97%) 1047131131 ( 6.53%) 233.73
dns 1583524 ( 6.35%) 210775913 ( 1.31%) 133.11
realaud 30468 ( 0.12%) 16446105 ( 0.10%) 539.78
halflif 25 ( 0.00%) 2819 ( 0.00%) 112.76
starcra 39 ( 0.00%) 5925 ( 0.00%) 151.92
everque 91 ( 0.00%) 17842 ( 0.00%) 196.07
unreal 205 ( 0.00%) 60118 ( 0.00%) 293.26
quake 31 ( 0.00%) 3360 ( 0.00%) 108.39
cuseeme 10 ( 0.00%) 963 ( 0.00%) 96.30
other 2865622 ( 11.50%) 819791947 ( 5.11%) 286.08
icmp 1302515 ( 5.23%) 124945480 ( 0.78%) 95.93
ipip 372 ( 0.00%) 46580 ( 0.00%) 125.22
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 879 ( 0.00%) 106085 ( 0.00%) 120.69
other 70591 ( 0.28%) 14573500 ( 0.09%) 206.45
frag 14084 ( 0.06%) 12960619 ( 0.08%) 920.24
ip6 31292 ( 0.13%) 4185738 ( 0.03%) 133.76
tcp6 12301 ( 0.05%) 1320718 ( 0.01%) 107.37
http(s) 112 ( 0.00%) 148019 ( 0.00%) 1321.60
http(c) 9019 ( 0.04%) 758612 ( 0.00%) 84.11
smtp 200 ( 0.00%) 72055 ( 0.00%) 360.27
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
bgp 75 ( 0.00%) 8236 ( 0.00%) 109.81
other 2894 ( 0.01%) 333710 ( 0.00%) 115.31
udp6 12745 ( 0.05%) 2156984 ( 0.01%) 169.24
dns 8990 ( 0.04%) 1627038 ( 0.01%) 180.98
starcra 6 ( 0.00%) 717 ( 0.00%) 119.50
other 3749 ( 0.02%) 529229 ( 0.00%) 141.17
icmp6 6205 ( 0.02%) 695120 ( 0.00%) 112.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 8836 ( 0.00%) 803.27
tcpdump file: 200801161400.dump.gz (610.91 MB)