Traffic Trace Info
DumpFile: 200801261400.dump
FileSize: 1102.08MB
Id: 200801261400
StartTime: Sat Jan 26 14:00:01 2008
EndTime: Sat Jan 26 14:15:00 2008
TotalTime: 899.30 seconds
TotalCapSize: 863.02MB CapLen: 96 bytes
# of packets: 15665963 (9430.40MB)
AvgRate: 87.96Mbps stddev:18.34M
IP flow (unique src/dst pair) Information
# of flows: 859769 (avg. 18.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.4% 1.4% 1.3% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 470586
Top 10 bandwidth usage (bytes/total in %):
6.0% 4.4% 3.9% 3.6% 3.6% 3.4% 3.4% 2.4% 2.2% 2.2%
# of IPv6 addresses: 755
Top 10 bandwidth usage (bytes/total in %):
10.9% 10.1% 10.0% 8.7% 8.3% 7.0% 6.4% 5.7% 5.4% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801261400.pktlen.png)
detailed numbers
[ 32- 63]: 3434247
[ 64- 127]: 4670196
[ 128- 255]: 605405
[ 256- 511]: 792958
[ 512- 1023]: 264874
[ 1024- 2047]: 5898283
Protocol Breakdown
![[protocol breakdown chart]](200801261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15665963 (100.00%) 9888494393 (100.00%) 631.21
ip 15651777 ( 99.91%) 9886170062 ( 99.98%) 631.63
tcp 12800506 ( 81.71%) 9259672397 ( 93.64%) 723.38
http(s) 4694793 ( 29.97%) 6300887979 ( 63.72%) 1342.10
http(c) 2636860 ( 16.83%) 395126630 ( 4.00%) 149.85
squid 870717 ( 5.56%) 696317429 ( 7.04%) 799.71
smtp 563863 ( 3.60%) 106958320 ( 1.08%) 189.69
ftp 83360 ( 0.53%) 19056709 ( 0.19%) 228.61
pop3 6035 ( 0.04%) 3445261 ( 0.03%) 570.88
imap 23920 ( 0.15%) 2586492 ( 0.03%) 108.13
telnet 359 ( 0.00%) 33812 ( 0.00%) 94.18
ssh 5861 ( 0.04%) 1198677 ( 0.01%) 204.52
dns 2471 ( 0.02%) 278866 ( 0.00%) 112.86
bgp 250 ( 0.00%) 100509 ( 0.00%) 402.04
napster 7 ( 0.00%) 1460 ( 0.00%) 208.57
realaud 76 ( 0.00%) 8658 ( 0.00%) 113.92
rtsp 13032 ( 0.08%) 855762 ( 0.01%) 65.67
icecast 17886 ( 0.11%) 15636408 ( 0.16%) 874.23
other 3881015 ( 24.77%) 1717179365 ( 17.37%) 442.46
udp 2398872 ( 15.31%) 573380308 ( 5.80%) 239.02
dns 1417416 ( 9.05%) 170245171 ( 1.72%) 120.11
realaud 161165 ( 1.03%) 124846082 ( 1.26%) 774.65
halflif 23 ( 0.00%) 2209 ( 0.00%) 96.04
starcra 20 ( 0.00%) 4769 ( 0.00%) 238.45
everque 58 ( 0.00%) 9739 ( 0.00%) 167.91
unreal 1726 ( 0.01%) 633738 ( 0.01%) 367.17
quake 26 ( 0.00%) 3962 ( 0.00%) 152.38
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 818391 ( 5.22%) 277628057 ( 2.81%) 339.24
icmp 381998 ( 2.44%) 39609747 ( 0.40%) 103.69
ipip 324 ( 0.00%) 38772 ( 0.00%) 119.67
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 864 ( 0.01%) 106557 ( 0.00%) 123.33
other 69033 ( 0.44%) 13342481 ( 0.13%) 193.28
frag 155768 ( 0.99%) 124006050 ( 1.25%) 796.09
ip6 14186 ( 0.09%) 2324331 ( 0.02%) 163.85
tcp6 2357 ( 0.02%) 382921 ( 0.00%) 162.46
http(s) 57 ( 0.00%) 58435 ( 0.00%) 1025.18
http(c) 55 ( 0.00%) 6096 ( 0.00%) 110.84
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 298 ( 0.00%) 114173 ( 0.00%) 383.13
ssh 29 ( 0.00%) 2926 ( 0.00%) 100.90
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1853 ( 0.01%) 194633 ( 0.00%) 105.04
udp6 7541 ( 0.05%) 1425512 ( 0.01%) 189.03
dns 7381 ( 0.05%) 1405507 ( 0.01%) 190.42
other 160 ( 0.00%) 20005 ( 0.00%) 125.03
icmp6 4258 ( 0.03%) 511818 ( 0.01%) 120.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801261400.dump.gz (400.70 MB)