Traffic Trace Info
DumpFile: 200801241400.dump
FileSize: 1956.39MB
Id: 200801241400
StartTime: Thu Jan 24 14:00:01 2008
EndTime: Thu Jan 24 14:15:01 2008
TotalTime: 899.85 seconds
TotalCapSize: 1526.90MB CapLen: 96 bytes
# of packets: 28146857 (13741.82MB)
AvgRate: 128.09Mbps stddev:22.10M
IP flow (unique src/dst pair) Information
# of flows: 734119 (avg. 38.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.5% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 370566
Top 10 bandwidth usage (bytes/total in %):
7.0% 4.2% 4.1% 4.1% 4.0% 2.6% 2.5% 2.5% 2.5% 1.9%
# of IPv6 addresses: 781
Top 10 bandwidth usage (bytes/total in %):
14.3% 7.5% 7.3% 7.3% 7.1% 6.6% 6.0% 5.8% 5.0% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801241400.pktlen.png)
detailed numbers
[ 32- 63]: 5322670
[ 64- 127]: 12017494
[ 128- 255]: 1085769
[ 256- 511]: 676306
[ 512- 1023]: 573478
[ 1024- 2047]: 8471140
Protocol Breakdown
![[protocol breakdown chart]](200801241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28146857 (100.00%) 14409338470 (100.00%) 511.93
ip 28128920 ( 99.94%) 14406339871 ( 99.98%) 512.15
tcp 21461576 ( 76.25%) 12583811429 ( 87.33%) 586.34
http(s) 6600185 ( 23.45%) 8616737884 ( 59.80%) 1305.53
http(c) 4487853 ( 15.94%) 536019710 ( 3.72%) 119.44
squid 1077513 ( 3.83%) 584270068 ( 4.05%) 542.24
smtp 786768 ( 2.80%) 193949483 ( 1.35%) 246.51
nntp 26 ( 0.00%) 1624 ( 0.00%) 62.46
ftp 63484 ( 0.23%) 18579608 ( 0.13%) 292.67
pop3 16004 ( 0.06%) 13170782 ( 0.09%) 822.97
imap 42059 ( 0.15%) 45471808 ( 0.32%) 1081.14
telnet 776 ( 0.00%) 92721 ( 0.00%) 119.49
ssh 425416 ( 1.51%) 115272937 ( 0.80%) 270.97
dns 2299 ( 0.01%) 172549 ( 0.00%) 75.05
bgp 227 ( 0.00%) 88974 ( 0.00%) 391.96
napster 41 ( 0.00%) 6275 ( 0.00%) 153.05
realaud 40 ( 0.00%) 6096 ( 0.00%) 152.40
rtsp 21049 ( 0.07%) 12921856 ( 0.09%) 613.89
icecast 11995 ( 0.04%) 10014481 ( 0.07%) 834.89
hotline 22 ( 0.00%) 1764 ( 0.00%) 80.18
other 7925816 ( 28.16%) 2437032629 ( 16.91%) 307.48
udp 4921928 ( 17.49%) 1647558056 ( 11.43%) 334.74
dns 1577121 ( 5.60%) 194069295 ( 1.35%) 123.05
realaud 486 ( 0.00%) 207476 ( 0.00%) 426.91
halflif 14 ( 0.00%) 1665 ( 0.00%) 118.93
starcra 16 ( 0.00%) 2328 ( 0.00%) 145.50
everque 116 ( 0.00%) 14375 ( 0.00%) 123.92
unreal 19 ( 0.00%) 4032 ( 0.00%) 212.21
quake 16 ( 0.00%) 1557 ( 0.00%) 97.31
cuseeme 10 ( 0.00%) 1070 ( 0.00%) 107.00
other 3344111 ( 11.88%) 1453254555 ( 10.09%) 434.57
icmp 1719553 ( 6.11%) 169239955 ( 1.17%) 98.42
ipip 319 ( 0.00%) 39494 ( 0.00%) 123.81
ipsec 1045 ( 0.00%) 1025094 ( 0.01%) 980.95
ip6 832 ( 0.00%) 101588 ( 0.00%) 122.10
other 23667 ( 0.08%) 4564255 ( 0.03%) 192.85
frag 1689 ( 0.01%) 1328282 ( 0.01%) 786.43
ip6 17937 ( 0.06%) 2998599 ( 0.02%) 167.17
tcp6 3054 ( 0.01%) 638338 ( 0.00%) 209.02
http(s) 398 ( 0.00%) 326247 ( 0.00%) 819.72
http(c) 1346 ( 0.00%) 136354 ( 0.00%) 101.30
smtp 228 ( 0.00%) 73188 ( 0.00%) 321.00
ftp 31 ( 0.00%) 3219 ( 0.00%) 103.84
bgp 92 ( 0.00%) 10931 ( 0.00%) 118.82
other 959 ( 0.00%) 88399 ( 0.00%) 92.18
udp6 9131 ( 0.03%) 1680869 ( 0.01%) 184.08
dns 8964 ( 0.03%) 1659044 ( 0.01%) 185.08
other 167 ( 0.00%) 21825 ( 0.00%) 130.69
icmp6 5723 ( 0.02%) 675448 ( 0.00%) 118.02
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
tcpdump file: 200801241400.dump.gz (684.62 MB)