Traffic Trace Info
DumpFile: 200801251400.dump
FileSize: 1774.49MB
Id: 200801251400
StartTime: Fri Jan 25 14:00:01 2008
EndTime: Fri Jan 25 14:15:01 2008
TotalTime: 899.93 seconds
TotalCapSize: 1384.45MB CapLen: 96 bytes
# of packets: 25561109 (16717.21MB)
AvgRate: 155.82Mbps stddev:33.80M
IP flow (unique src/dst pair) Information
# of flows: 779554 (avg. 32.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.6% 1.5% 1.4% 1.3% 1.0% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 406584
Top 10 bandwidth usage (bytes/total in %):
5.5% 4.8% 4.4% 4.3% 2.3% 2.3% 2.1% 2.1% 2.0% 2.0%
# of IPv6 addresses: 819
Top 10 bandwidth usage (bytes/total in %):
12.5% 12.5% 10.0% 9.0% 7.0% 7.0% 6.0% 5.5% 4.5% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801251400.pktlen.png)
detailed numbers
[ 32- 63]: 5036124
[ 64- 127]: 7446394
[ 128- 255]: 1025686
[ 256- 511]: 633388
[ 512- 1023]: 556938
[ 1024- 2047]: 10862579
Protocol Breakdown
![[protocol breakdown chart]](200801251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25561109 (100.00%) 17529263129 (100.00%) 685.78
ip 25539628 ( 99.92%) 17526010539 ( 99.98%) 686.23
tcp 20010351 ( 78.28%) 15527300608 ( 88.58%) 775.96
http(s) 8582304 ( 33.58%) 11323044208 ( 64.60%) 1319.35
http(c) 4532594 ( 17.73%) 578208778 ( 3.30%) 127.57
squid 1185375 ( 4.64%) 802442932 ( 4.58%) 676.95
smtp 677683 ( 2.65%) 178283276 ( 1.02%) 263.08
nntp 72 ( 0.00%) 5488 ( 0.00%) 76.22
ftp 76747 ( 0.30%) 30898986 ( 0.18%) 402.61
pop3 11894 ( 0.05%) 7155134 ( 0.04%) 601.58
imap 15672 ( 0.06%) 2968816 ( 0.02%) 189.43
telnet 720 ( 0.00%) 75129 ( 0.00%) 104.35
ssh 220788 ( 0.86%) 33127290 ( 0.19%) 150.04
dns 2415 ( 0.01%) 183004 ( 0.00%) 75.78
bgp 201 ( 0.00%) 60234 ( 0.00%) 299.67
napster 101 ( 0.00%) 39073 ( 0.00%) 386.86
realaud 62 ( 0.00%) 8650 ( 0.00%) 139.52
rtsp 19350 ( 0.08%) 15001940 ( 0.09%) 775.29
icecast 7174 ( 0.03%) 3582212 ( 0.02%) 499.33
hotline 15 ( 0.00%) 2149 ( 0.00%) 143.27
other 4677180 ( 18.30%) 2552213069 ( 14.56%) 545.67
udp 4903889 ( 19.18%) 1860024530 ( 10.61%) 379.30
dns 1805855 ( 7.06%) 216602827 ( 1.24%) 119.94
realaud 934 ( 0.00%) 64730 ( 0.00%) 69.30
halflif 23 ( 0.00%) 2985 ( 0.00%) 129.78
starcra 7538 ( 0.03%) 506221 ( 0.00%) 67.16
everque 88 ( 0.00%) 15034 ( 0.00%) 170.84
unreal 25 ( 0.00%) 4210 ( 0.00%) 168.40
quake 16 ( 0.00%) 1685 ( 0.00%) 105.31
cuseeme 6 ( 0.00%) 550 ( 0.00%) 91.67
other 3089402 ( 12.09%) 1642826111 ( 9.37%) 531.76
icmp 437624 ( 1.71%) 43889831 ( 0.25%) 100.29
ipip 343 ( 0.00%) 41098 ( 0.00%) 119.82
ipsec 3361 ( 0.01%) 3673094 ( 0.02%) 1092.86
ip6 851 ( 0.00%) 104791 ( 0.00%) 123.14
other 183209 ( 0.72%) 90976587 ( 0.52%) 496.57
frag 1290 ( 0.01%) 1040689 ( 0.01%) 806.74
ip6 21481 ( 0.08%) 3252590 ( 0.02%) 151.42
tcp6 6742 ( 0.03%) 966463 ( 0.01%) 143.35
http(s) 144 ( 0.00%) 163853 ( 0.00%) 1137.87
http(c) 421 ( 0.00%) 35356 ( 0.00%) 83.98
smtp 655 ( 0.00%) 239946 ( 0.00%) 366.33
ssh 29 ( 0.00%) 2874 ( 0.00%) 99.10
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 5431 ( 0.02%) 517998 ( 0.00%) 95.38
udp6 9505 ( 0.04%) 1704477 ( 0.01%) 179.32
dns 9330 ( 0.04%) 1682943 ( 0.01%) 180.38
other 175 ( 0.00%) 21534 ( 0.00%) 123.05
icmp6 5204 ( 0.02%) 577570 ( 0.00%) 110.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801251400.dump.gz (632.92 MB)