Traffic Trace Info
DumpFile: 200801171400.dump
FileSize: 1976.50MB
Id: 200801171400
StartTime: Thu Jan 17 14:00:01 2008
EndTime: Thu Jan 17 14:15:00 2008
TotalTime: 899.59 seconds
TotalCapSize: 1542.64MB CapLen: 96 bytes
# of packets: 28433190 (16885.41MB)
AvgRate: 157.51Mbps stddev:26.68M
IP flow (unique src/dst pair) Information
# of flows: 870113 (avg. 32.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.1% 0.9% 0.9% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 479775
Top 10 bandwidth usage (bytes/total in %):
4.9% 3.3% 3.1% 3.0% 3.0% 2.5% 2.4% 2.0% 1.9% 1.9%
# of IPv6 addresses: 1313
Top 10 bandwidth usage (bytes/total in %):
17.6% 17.6% 12.1% 8.0% 7.3% 7.3% 6.8% 6.3% 5.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801171400.pktlen.png)
detailed numbers
[ 32- 63]: 6838285
[ 64- 127]: 8573949
[ 128- 255]: 983921
[ 256- 511]: 728301
[ 512- 1023]: 652794
[ 1024- 2047]: 10655940
Protocol Breakdown
![[protocol breakdown chart]](200801171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28433190 (100.00%) 17705633322 (100.00%) 622.71
ip 28406511 ( 99.91%) 17702263451 ( 99.98%) 623.18
tcp 22290589 ( 78.40%) 16485525233 ( 93.11%) 739.57
http(s) 9577371 ( 33.68%) 12873358794 ( 72.71%) 1344.14
http(c) 5424776 ( 19.08%) 554526899 ( 3.13%) 102.22
squid 625207 ( 2.20%) 364038586 ( 2.06%) 582.27
smtp 623025 ( 2.19%) 137629438 ( 0.78%) 220.91
ftp 92457 ( 0.33%) 15227078 ( 0.09%) 164.69
pop3 38503 ( 0.14%) 39757608 ( 0.22%) 1032.58
imap 8210 ( 0.03%) 4142991 ( 0.02%) 504.63
telnet 813 ( 0.00%) 189511 ( 0.00%) 233.10
ssh 45378 ( 0.16%) 8824939 ( 0.05%) 194.48
dns 8098 ( 0.03%) 634158 ( 0.00%) 78.31
bgp 187 ( 0.00%) 51891 ( 0.00%) 277.49
napster 43 ( 0.00%) 4208 ( 0.00%) 97.86
realaud 29 ( 0.00%) 7297 ( 0.00%) 251.62
rtsp 147031 ( 0.52%) 191209818 ( 1.08%) 1300.47
icecast 46825 ( 0.16%) 45888707 ( 0.26%) 980.00
other 5652632 ( 19.88%) 2250033070 ( 12.71%) 398.05
udp 4467641 ( 15.71%) 1048487706 ( 5.92%) 234.68
dns 1574814 ( 5.54%) 201558859 ( 1.14%) 127.99
realaud 9531 ( 0.03%) 7790111 ( 0.04%) 817.34
halflif 36 ( 0.00%) 4367 ( 0.00%) 121.31
starcra 52 ( 0.00%) 9389 ( 0.00%) 180.56
everque 85 ( 0.00%) 14843 ( 0.00%) 174.62
unreal 7215 ( 0.03%) 4019095 ( 0.02%) 557.05
quake 50 ( 0.00%) 5739 ( 0.00%) 114.78
cuseeme 14 ( 0.00%) 1736 ( 0.00%) 124.00
other 2875800 ( 10.11%) 835067044 ( 4.72%) 290.38
icmp 1591776 ( 5.60%) 154237780 ( 0.87%) 96.90
ipip 398 ( 0.00%) 54104 ( 0.00%) 135.94
ipsec 1090 ( 0.00%) 1011436 ( 0.01%) 927.92
ip6 919 ( 0.00%) 124910 ( 0.00%) 135.92
other 54098 ( 0.19%) 12822282 ( 0.07%) 237.02
frag 12169 ( 0.04%) 11374934 ( 0.06%) 934.75
ip6 26679 ( 0.09%) 3369871 ( 0.02%) 126.31
tcp6 10978 ( 0.04%) 940711 ( 0.01%) 85.69
http(c) 8048 ( 0.03%) 597341 ( 0.00%) 74.22
smtp 155 ( 0.00%) 36914 ( 0.00%) 238.15
bgp 70 ( 0.00%) 7903 ( 0.00%) 112.90
other 2705 ( 0.01%) 298553 ( 0.00%) 110.37
udp6 10021 ( 0.04%) 1757820 ( 0.01%) 175.41
dns 9128 ( 0.03%) 1640567 ( 0.01%) 179.73
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 891 ( 0.00%) 117003 ( 0.00%) 131.32
icmp6 5650 ( 0.02%) 667260 ( 0.00%) 118.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801171400.dump.gz (668.19 MB)