Traffic Trace Info
DumpFile: 200801201400.dump
FileSize: 1701.52MB
Id: 200801201400
StartTime: Sun Jan 20 14:00:00 2008
EndTime: Sun Jan 20 14:15:00 2008
TotalTime: 900.02 seconds
TotalCapSize: 1339.95MB CapLen: 96 bytes
# of packets: 23695198 (10665.02MB)
AvgRate: 99.41Mbps stddev:13.95M
IP flow (unique src/dst pair) Information
# of flows: 754388 (avg. 31.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.0% 3.0% 2.0% 1.9% 1.5% 1.4% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 386595
Top 10 bandwidth usage (bytes/total in %):
21.6% 16.4% 3.8% 3.7% 3.2% 3.2% 3.1% 3.1% 3.0% 2.9%
# of IPv6 addresses: 2953
Top 10 bandwidth usage (bytes/total in %):
14.6% 12.9% 6.6% 6.3% 6.3% 6.3% 5.9% 4.2% 4.1% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801201400.pktlen.png)
detailed numbers
[ 32- 63]: 3437517
[ 64- 127]: 11402653
[ 128- 255]: 1473194
[ 256- 511]: 569289
[ 512- 1023]: 617512
[ 1024- 2047]: 6195033
Protocol Breakdown
![[protocol breakdown chart]](200801201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23695198 (100.00%) 11183079321 (100.00%) 471.96
ip 23674639 ( 99.91%) 11179849806 ( 99.97%) 472.23
tcp 19427706 ( 81.99%) 10366411948 ( 92.70%) 533.59
http(s) 3561598 ( 15.03%) 4814083292 ( 43.05%) 1351.66
http(c) 1974725 ( 8.33%) 198369324 ( 1.77%) 100.45
squid 782929 ( 3.30%) 553266725 ( 4.95%) 706.66
smtp 479561 ( 2.02%) 76594249 ( 0.68%) 159.72
ftp 68417 ( 0.29%) 24980740 ( 0.22%) 365.12
pop3 26702 ( 0.11%) 19868768 ( 0.18%) 744.09
imap 1673 ( 0.01%) 416992 ( 0.00%) 249.25
telnet 975 ( 0.00%) 69768 ( 0.00%) 71.56
ssh 3721610 ( 15.71%) 578316072 ( 5.17%) 155.39
dns 3004 ( 0.01%) 216978 ( 0.00%) 72.23
bgp 183 ( 0.00%) 46678 ( 0.00%) 255.07
napster 7 ( 0.00%) 434 ( 0.00%) 62.00
realaud 5 ( 0.00%) 1320 ( 0.00%) 264.00
rtsp 19443 ( 0.08%) 24282558 ( 0.22%) 1248.91
icecast 6492 ( 0.03%) 7686689 ( 0.07%) 1184.02
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 8780379 ( 37.06%) 4068211179 ( 36.38%) 463.33
udp 2353838 ( 9.93%) 632215352 ( 5.65%) 268.59
dns 1309733 ( 5.53%) 159677644 ( 1.43%) 121.92
realaud 171 ( 0.00%) 19166 ( 0.00%) 112.08
halflif 25 ( 0.00%) 3446 ( 0.00%) 137.84
starcra 64 ( 0.00%) 11446 ( 0.00%) 178.84
everque 107 ( 0.00%) 19948 ( 0.00%) 186.43
unreal 32 ( 0.00%) 6415 ( 0.00%) 200.47
quake 14 ( 0.00%) 1308 ( 0.00%) 93.43
cuseeme 5 ( 0.00%) 696 ( 0.00%) 139.20
other 1040052 ( 4.39%) 466990672 ( 4.18%) 449.01
icmp 1884121 ( 7.95%) 179920652 ( 1.61%) 95.49
ipip 328 ( 0.00%) 41068 ( 0.00%) 125.21
ipsec 178 ( 0.00%) 19580 ( 0.00%) 110.00
ip6 853 ( 0.00%) 103446 ( 0.00%) 121.27
other 7615 ( 0.03%) 1137760 ( 0.01%) 149.41
frag 102457 ( 0.43%) 139637046 ( 1.25%) 1362.88
ip6 20559 ( 0.09%) 3229515 ( 0.03%) 157.09
tcp6 2066 ( 0.01%) 345518 ( 0.00%) 167.24
http(c) 99 ( 0.00%) 11164 ( 0.00%) 112.77
smtp 424 ( 0.00%) 146638 ( 0.00%) 345.84
dns 8 ( 0.00%) 1796 ( 0.00%) 224.50
bgp 64 ( 0.00%) 6643 ( 0.00%) 103.80
other 1471 ( 0.01%) 179277 ( 0.00%) 121.87
udp6 11036 ( 0.05%) 2075793 ( 0.02%) 188.09
dns 7335 ( 0.03%) 1339336 ( 0.01%) 182.60
starcra 3 ( 0.00%) 1268 ( 0.00%) 422.67
everque 6 ( 0.00%) 3432 ( 0.00%) 572.00
other 3692 ( 0.02%) 731757 ( 0.01%) 198.20
icmp6 7414 ( 0.03%) 793433 ( 0.01%) 107.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 12 ( 0.00%) 10555 ( 0.00%) 879.58
tcpdump file: 200801201400.dump.gz (594.37 MB)