Traffic Trace Info
DumpFile: 200801191400.dump
FileSize: 1467.50MB
Id: 200801191400
StartTime: Sat Jan 19 14:00:00 2008
EndTime: Sat Jan 19 14:15:00 2008
TotalTime: 900.11 seconds
TotalCapSize: 1146.72MB CapLen: 96 bytes
# of packets: 21021810 (11600.24MB)
AvgRate: 108.13Mbps stddev:28.41M
IP flow (unique src/dst pair) Information
# of flows: 700534 (avg. 30.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.2% 2.6% 2.6% 2.4% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 346908
Top 10 bandwidth usage (bytes/total in %):
5.4% 5.3% 4.7% 4.7% 3.8% 3.3% 3.2% 3.1% 3.1% 3.0%
# of IPv6 addresses: 2765
Top 10 bandwidth usage (bytes/total in %):
28.7% 28.6% 9.3% 7.6% 5.2% 5.2% 4.6% 4.5% 4.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801191400.pktlen.png)
detailed numbers
[ 32- 63]: 3896111
[ 64- 127]: 8076402
[ 128- 255]: 915028
[ 256- 511]: 512383
[ 512- 1023]: 302573
[ 1024- 2047]: 7319313
Protocol Breakdown
![[protocol breakdown chart]](200801191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21021810 (100.00%) 12163734355 (100.00%) 578.62
ip 20983983 ( 99.82%) 12159145892 ( 99.96%) 579.45
tcp 16486089 ( 78.42%) 11182954291 ( 91.94%) 678.33
http(s) 5958636 ( 28.35%) 8193789601 ( 67.36%) 1375.11
http(c) 3157642 ( 15.02%) 363401198 ( 2.99%) 115.09
squid 651538 ( 3.10%) 435744075 ( 3.58%) 668.79
smtp 526808 ( 2.51%) 90214042 ( 0.74%) 171.25
ftp 42854 ( 0.20%) 4455637 ( 0.04%) 103.97
pop3 32732 ( 0.16%) 22862036 ( 0.19%) 698.46
imap 1991 ( 0.01%) 170172 ( 0.00%) 85.47
telnet 852 ( 0.00%) 61608 ( 0.00%) 72.31
ssh 22552 ( 0.11%) 3394910 ( 0.03%) 150.54
dns 8324 ( 0.04%) 640581 ( 0.01%) 76.96
bgp 187 ( 0.00%) 46806 ( 0.00%) 250.30
realaud 162 ( 0.00%) 20881 ( 0.00%) 128.90
rtsp 6188 ( 0.03%) 663665 ( 0.01%) 107.25
icecast 16885 ( 0.08%) 15483309 ( 0.13%) 916.99
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 6058729 ( 28.82%) 2052005230 ( 16.87%) 338.69
udp 2924991 ( 13.91%) 736397181 ( 6.05%) 251.76
dns 1468176 ( 6.98%) 186898007 ( 1.54%) 127.30
realaud 3260 ( 0.02%) 1125278 ( 0.01%) 345.18
halflif 86 ( 0.00%) 15250 ( 0.00%) 177.33
starcra 41 ( 0.00%) 9043 ( 0.00%) 220.56
everque 74 ( 0.00%) 13573 ( 0.00%) 183.42
unreal 19 ( 0.00%) 4108 ( 0.00%) 216.21
quake 23 ( 0.00%) 2621 ( 0.00%) 113.96
cuseeme 7 ( 0.00%) 704 ( 0.00%) 100.57
other 1453267 ( 6.91%) 548312417 ( 4.51%) 377.30
icmp 1392879 ( 6.63%) 139371408 ( 1.15%) 100.06
ipip 316 ( 0.00%) 37072 ( 0.00%) 117.32
ipsec 3225 ( 0.02%) 3416630 ( 0.03%) 1059.42
ip6 855 ( 0.00%) 103170 ( 0.00%) 120.67
other 175628 ( 0.84%) 96866140 ( 0.80%) 551.54
frag 16032 ( 0.08%) 14943040 ( 0.12%) 932.08
ip6 37827 ( 0.18%) 4588463 ( 0.04%) 121.30
tcp6 19966 ( 0.09%) 1678129 ( 0.01%) 84.05
http(s) 9 ( 0.00%) 2730 ( 0.00%) 303.33
http(c) 167 ( 0.00%) 20332 ( 0.00%) 121.75
smtp 338 ( 0.00%) 105582 ( 0.00%) 312.37
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 19391 ( 0.09%) 1543162 ( 0.01%) 79.58
udp6 11452 ( 0.05%) 2165237 ( 0.02%) 189.07
dns 7778 ( 0.04%) 1476386 ( 0.01%) 189.82
other 3674 ( 0.02%) 688851 ( 0.01%) 187.49
icmp6 6367 ( 0.03%) 730570 ( 0.01%) 114.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10447 ( 0.00%) 870.58
tcpdump file: 200801191400.dump.gz (491.19 MB)