Traffic Trace Info
DumpFile: 200801181400.dump
FileSize: 1722.10MB
Id: 200801181400
StartTime: Fri Jan 18 14:00:01 2008
EndTime: Fri Jan 18 14:15:00 2008
TotalTime: 899.59 seconds
TotalCapSize: 1346.72MB CapLen: 96 bytes
# of packets: 24600616 (14227.53MB)
AvgRate: 132.72Mbps stddev:27.43M
IP flow (unique src/dst pair) Information
# of flows: 768858 (avg. 32.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.7% 3.0% 2.0% 2.0% 2.0% 1.7% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 414949
Top 10 bandwidth usage (bytes/total in %):
5.1% 4.8% 4.7% 4.0% 3.8% 3.3% 3.2% 3.2% 3.0% 2.9%
# of IPv6 addresses: 2342
Top 10 bandwidth usage (bytes/total in %):
12.7% 11.6% 7.0% 6.8% 6.8% 6.4% 4.7% 4.0% 4.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801181400.pktlen.png)
detailed numbers
[ 32- 63]: 5412169
[ 64- 127]: 8140636
[ 128- 255]: 1035932
[ 256- 511]: 544933
[ 512- 1023]: 641578
[ 1024- 2047]: 8825368
Protocol Breakdown
![[protocol breakdown chart]](200801181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24600616 (100.00%) 14918647502 (100.00%) 606.43
ip 24578860 ( 99.91%) 14915328039 ( 99.98%) 606.84
tcp 18958200 ( 77.06%) 13994312945 ( 93.80%) 738.17
http(s) 7872194 ( 32.00%) 10510887412 ( 70.45%) 1335.19
http(c) 3773585 ( 15.34%) 514268302 ( 3.45%) 136.28
squid 755122 ( 3.07%) 549332521 ( 3.68%) 727.48
smtp 683329 ( 2.78%) 166917186 ( 1.12%) 244.27
nntp 147 ( 0.00%) 10701 ( 0.00%) 72.80
ftp 61785 ( 0.25%) 4814035 ( 0.03%) 77.92
pop3 27915 ( 0.11%) 20114508 ( 0.13%) 720.56
imap 6725 ( 0.03%) 2771850 ( 0.02%) 412.17
telnet 535 ( 0.00%) 44186 ( 0.00%) 82.59
ssh 289542 ( 1.18%) 56697108 ( 0.38%) 195.82
dns 2264 ( 0.01%) 191086 ( 0.00%) 84.40
bgp 248 ( 0.00%) 107300 ( 0.00%) 432.66
napster 10 ( 0.00%) 1198 ( 0.00%) 119.80
realaud 322 ( 0.00%) 170808 ( 0.00%) 530.46
rtsp 35515 ( 0.14%) 10400184 ( 0.07%) 292.84
icecast 25445 ( 0.10%) 17424942 ( 0.12%) 684.81
other 5423513 ( 22.05%) 2140159378 ( 14.35%) 394.61
udp 3728614 ( 15.16%) 725806495 ( 4.87%) 194.66
dns 1723781 ( 7.01%) 219300433 ( 1.47%) 127.22
realaud 37 ( 0.00%) 3802 ( 0.00%) 102.76
halflif 36 ( 0.00%) 5357 ( 0.00%) 148.81
starcra 3681 ( 0.01%) 251169 ( 0.00%) 68.23
everque 177 ( 0.00%) 25449 ( 0.00%) 143.78
unreal 38 ( 0.00%) 7457 ( 0.00%) 196.24
quake 25 ( 0.00%) 2379 ( 0.00%) 95.16
cuseeme 10 ( 0.00%) 1101 ( 0.00%) 110.10
other 1999834 ( 8.13%) 506083918 ( 3.39%) 253.06
icmp 1781537 ( 7.24%) 170202010 ( 1.14%) 95.54
ipip 350 ( 0.00%) 44624 ( 0.00%) 127.50
ipsec 4361 ( 0.02%) 4830822 ( 0.03%) 1107.73
ip6 852 ( 0.00%) 103343 ( 0.00%) 121.29
other 104946 ( 0.43%) 20027800 ( 0.13%) 190.84
frag 14118 ( 0.06%) 12633805 ( 0.08%) 894.87
ip6 21756 ( 0.09%) 3319463 ( 0.02%) 152.58
tcp6 2923 ( 0.01%) 507866 ( 0.00%) 173.75
http(s) 11 ( 0.00%) 4041 ( 0.00%) 367.36
http(c) 148 ( 0.00%) 17061 ( 0.00%) 115.28
smtp 726 ( 0.00%) 247407 ( 0.00%) 340.78
bgp 64 ( 0.00%) 6662 ( 0.00%) 104.09
other 1974 ( 0.01%) 232695 ( 0.00%) 117.88
udp6 12615 ( 0.05%) 2104715 ( 0.01%) 166.84
dns 10066 ( 0.04%) 1736330 ( 0.01%) 172.49
starcra 4 ( 0.00%) 592 ( 0.00%) 148.00
other 2545 ( 0.01%) 367793 ( 0.00%) 144.52
icmp6 6178 ( 0.03%) 694232 ( 0.00%) 112.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8570 ( 0.00%) 857.00
tcpdump file: 200801181400.dump.gz (583.64 MB)