Traffic Trace Info
DumpFile: 200801221400.dump
FileSize: 1730.70MB
Id: 200801221400
StartTime: Tue Jan 22 14:00:01 2008
EndTime: Tue Jan 22 14:15:00 2008
TotalTime: 899.73 seconds
TotalCapSize: 1352.12MB CapLen: 96 bytes
# of packets: 24809779 (12974.95MB)
AvgRate: 120.92Mbps stddev:20.06M
IP flow (unique src/dst pair) Information
# of flows: 713909 (avg. 34.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.4% 1.2% 1.0% 0.9% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 366265
Top 10 bandwidth usage (bytes/total in %):
3.4% 3.3% 3.2% 3.1% 3.0% 3.0% 2.8% 2.8% 2.3% 2.0%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
14.1% 10.9% 8.2% 7.4% 7.3% 7.3% 5.4% 5.1% 4.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801221400.pktlen.png)
detailed numbers
[ 32- 63]: 5193601
[ 64- 127]: 9375981
[ 128- 255]: 1141693
[ 256- 511]: 638352
[ 512- 1023]: 552405
[ 1024- 2047]: 7907747
Protocol Breakdown
![[protocol breakdown chart]](200801221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24809779 (100.00%) 13605221237 (100.00%) 548.38
ip 24791379 ( 99.93%) 13602372673 ( 99.98%) 548.67
tcp 20124550 ( 81.12%) 12892653714 ( 94.76%) 640.64
http(s) 6363902 ( 25.65%) 8228637624 ( 60.48%) 1293.02
http(c) 3715361 ( 14.98%) 509971883 ( 3.75%) 137.26
squid 630860 ( 2.54%) 416329851 ( 3.06%) 659.94
smtp 774273 ( 3.12%) 234243096 ( 1.72%) 302.53
nntp 13 ( 0.00%) 1040 ( 0.00%) 80.00
ftp 40109 ( 0.16%) 3881031 ( 0.03%) 96.76
pop3 35089 ( 0.14%) 27808932 ( 0.20%) 792.53
imap 4774 ( 0.02%) 1241954 ( 0.01%) 260.15
telnet 183 ( 0.00%) 17894 ( 0.00%) 97.78
ssh 8017 ( 0.03%) 1347755 ( 0.01%) 168.11
dns 2845 ( 0.01%) 205183 ( 0.00%) 72.12
bgp 200 ( 0.00%) 53165 ( 0.00%) 265.82
napster 539 ( 0.00%) 84317 ( 0.00%) 156.43
rtsp 37574 ( 0.15%) 12340713 ( 0.09%) 328.44
icecast 9431 ( 0.04%) 7231350 ( 0.05%) 766.76
other 8501379 ( 34.27%) 3449257866 ( 25.35%) 405.73
udp 2850801 ( 11.49%) 510020307 ( 3.75%) 178.90
dns 1661828 ( 6.70%) 201990554 ( 1.48%) 121.55
realaud 83 ( 0.00%) 35506 ( 0.00%) 427.78
halflif 11 ( 0.00%) 991 ( 0.00%) 90.09
starcra 29 ( 0.00%) 5050 ( 0.00%) 174.14
everque 63 ( 0.00%) 10845 ( 0.00%) 172.14
unreal 36 ( 0.00%) 7541 ( 0.00%) 209.47
quake 36 ( 0.00%) 2932 ( 0.00%) 81.44
cuseeme 10 ( 0.00%) 1421 ( 0.00%) 142.10
other 1188689 ( 4.79%) 307962939 ( 2.26%) 259.08
icmp 1677773 ( 6.76%) 162631086 ( 1.20%) 96.93
ipip 354 ( 0.00%) 44040 ( 0.00%) 124.41
ipsec 11763 ( 0.05%) 12017666 ( 0.09%) 1021.65
ip6 853 ( 0.00%) 104574 ( 0.00%) 122.60
other 125285 ( 0.50%) 24901286 ( 0.18%) 198.76
frag 2847 ( 0.01%) 2206842 ( 0.02%) 775.15
ip6 18400 ( 0.07%) 2848564 ( 0.02%) 154.81
tcp6 2158 ( 0.01%) 317206 ( 0.00%) 146.99
http(s) 52 ( 0.00%) 9807 ( 0.00%) 188.60
http(c) 57 ( 0.00%) 6649 ( 0.00%) 116.65
smtp 326 ( 0.00%) 95457 ( 0.00%) 292.81
ssh 13 ( 0.00%) 1406 ( 0.00%) 108.15
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 64 ( 0.00%) 6643 ( 0.00%) 103.80
other 1639 ( 0.01%) 196609 ( 0.00%) 119.96
udp6 10741 ( 0.04%) 1882313 ( 0.01%) 175.25
dns 10321 ( 0.04%) 1828101 ( 0.01%) 177.12
other 420 ( 0.00%) 54212 ( 0.00%) 129.08
icmp6 5471 ( 0.02%) 644965 ( 0.00%) 117.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801221400.dump.gz (595.04 MB)