Traffic Trace Info
DumpFile: 200801211400.dump
FileSize: 1995.93MB
Id: 200801211400
StartTime: Mon Jan 21 14:00:00 2008
EndTime: Mon Jan 21 14:15:01 2008
TotalTime: 900.50 seconds
TotalCapSize: 1564.96MB CapLen: 96 bytes
# of packets: 28243542 (14564.62MB)
AvgRate: 135.69Mbps stddev:23.54M
IP flow (unique src/dst pair) Information
# of flows: 891003 (avg. 31.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.2% 1.0% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 488624
Top 10 bandwidth usage (bytes/total in %):
4.0% 3.9% 3.6% 3.5% 3.0% 2.7% 2.7% 2.7% 2.4% 2.1%
# of IPv6 addresses: 1476
Top 10 bandwidth usage (bytes/total in %):
15.4% 15.2% 14.1% 8.7% 6.0% 6.0% 5.5% 5.5% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801211400.pktlen.png)
detailed numbers
[ 32- 63]: 6084904
[ 64- 127]: 10554767
[ 128- 255]: 1324533
[ 256- 511]: 741534
[ 512- 1023]: 666915
[ 1024- 2047]: 8870889
Protocol Breakdown
![[protocol breakdown chart]](200801211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28243542 (100.00%) 15272109410 (100.00%) 540.73
ip 28217990 ( 99.91%) 15268242974 ( 99.97%) 541.08
tcp 23831862 ( 84.38%) 14521572562 ( 95.09%) 609.33
http(s) 7678252 ( 27.19%) 9849679067 ( 64.49%) 1282.80
http(c) 4481513 ( 15.87%) 575706645 ( 3.77%) 128.46
squid 1367440 ( 4.84%) 703871873 ( 4.61%) 514.74
smtp 718242 ( 2.54%) 260117029 ( 1.70%) 362.16
ftp 82672 ( 0.29%) 53635592 ( 0.35%) 648.78
pop3 37366 ( 0.13%) 28426532 ( 0.19%) 760.76
imap 7352 ( 0.03%) 2361163 ( 0.02%) 321.16
telnet 841 ( 0.00%) 69559 ( 0.00%) 82.71
ssh 1846626 ( 6.54%) 248924661 ( 1.63%) 134.80
dns 3282 ( 0.01%) 248978 ( 0.00%) 75.86
bgp 177 ( 0.00%) 44137 ( 0.00%) 249.36
napster 45 ( 0.00%) 7025 ( 0.00%) 156.11
realaud 147 ( 0.00%) 58589 ( 0.00%) 398.56
rtsp 101358 ( 0.36%) 123437993 ( 0.81%) 1217.84
icecast 15589 ( 0.06%) 10578432 ( 0.07%) 678.58
hotline 71 ( 0.00%) 14786 ( 0.00%) 208.25
other 7490887 ( 26.52%) 2664390381 ( 17.45%) 355.68
udp 2513921 ( 8.90%) 555904148 ( 3.64%) 221.13
dns 1500063 ( 5.31%) 182503955 ( 1.20%) 121.66
realaud 1849 ( 0.01%) 116805 ( 0.00%) 63.17
halflif 28 ( 0.00%) 3949 ( 0.00%) 141.04
starcra 46 ( 0.00%) 7426 ( 0.00%) 161.43
everque 1155 ( 0.00%) 202096 ( 0.00%) 174.97
unreal 17 ( 0.00%) 2828 ( 0.00%) 166.35
quake 10 ( 0.00%) 896 ( 0.00%) 89.60
cuseeme 7 ( 0.00%) 756 ( 0.00%) 108.00
other 1010737 ( 3.58%) 373064037 ( 2.44%) 369.10
icmp 1759393 ( 6.23%) 170726406 ( 1.12%) 97.04
ipip 334 ( 0.00%) 41864 ( 0.00%) 125.34
ipsec 1612 ( 0.01%) 1832312 ( 0.01%) 1136.67
ip6 862 ( 0.00%) 105844 ( 0.00%) 122.79
other 110006 ( 0.39%) 18059838 ( 0.12%) 164.17
frag 1667 ( 0.01%) 1362451 ( 0.01%) 817.31
ip6 25552 ( 0.09%) 3866436 ( 0.03%) 151.32
tcp6 7636 ( 0.03%) 1128095 ( 0.01%) 147.73
http(s) 347 ( 0.00%) 197746 ( 0.00%) 569.87
http(c) 5182 ( 0.02%) 603536 ( 0.00%) 116.47
smtp 387 ( 0.00%) 124030 ( 0.00%) 320.49
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 79 ( 0.00%) 9172 ( 0.00%) 116.10
other 1640 ( 0.01%) 193537 ( 0.00%) 118.01
udp6 11386 ( 0.04%) 1969245 ( 0.01%) 172.95
dns 10201 ( 0.04%) 1813195 ( 0.01%) 177.75
starcra 3 ( 0.00%) 390 ( 0.00%) 130.00
other 1182 ( 0.00%) 155660 ( 0.00%) 131.69
icmp6 6500 ( 0.02%) 765016 ( 0.01%) 117.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801211400.dump.gz (707.12 MB)