Traffic Trace Info
DumpFile: 200801271400.dump
FileSize: 898.36MB
Id: 200801271400
StartTime: Sun Jan 27 14:00:01 2008
EndTime: Sun Jan 27 14:15:01 2008
TotalTime: 899.89 seconds
TotalCapSize: 702.68MB CapLen: 96 bytes
# of packets: 12823134 (6793.41MB)
AvgRate: 63.33Mbps stddev:11.06M
IP flow (unique src/dst pair) Information
# of flows: 698753 (avg. 18.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.2% 1.7% 1.5% 1.5% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 359805
Top 10 bandwidth usage (bytes/total in %):
11.9% 5.5% 5.3% 4.9% 4.2% 3.8% 3.7% 3.3% 3.1% 2.2%
# of IPv6 addresses: 797
Top 10 bandwidth usage (bytes/total in %):
16.6% 16.6% 10.2% 8.3% 8.3% 8.1% 7.7% 6.9% 5.3% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801271400.pktlen.png)
detailed numbers
[ 32- 63]: 2411291
[ 64- 127]: 4091708
[ 128- 255]: 1394679
[ 256- 511]: 586108
[ 512- 1023]: 232442
[ 1024- 2047]: 4106906
Protocol Breakdown
![[protocol breakdown chart]](200801271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12823134 (100.00%) 7123402556 (100.00%) 555.51
ip 12808509 ( 99.89%) 7120807892 ( 99.96%) 555.94
tcp 9493728 ( 74.04%) 6588498064 ( 92.49%) 693.98
http(s) 2774429 ( 21.64%) 3699102091 ( 51.93%) 1333.28
http(c) 1765283 ( 13.77%) 190151027 ( 2.67%) 107.72
squid 532688 ( 4.15%) 362231975 ( 5.09%) 680.01
smtp 431056 ( 3.36%) 106952424 ( 1.50%) 248.12
ftp 21586 ( 0.17%) 2584867 ( 0.04%) 119.75
pop3 6600 ( 0.05%) 3697555 ( 0.05%) 560.24
imap 2099 ( 0.02%) 531106 ( 0.01%) 253.03
telnet 78 ( 0.00%) 6027 ( 0.00%) 77.27
ssh 203473 ( 1.59%) 30826932 ( 0.43%) 151.50
dns 3912 ( 0.03%) 350353 ( 0.00%) 89.56
bgp 206 ( 0.00%) 65647 ( 0.00%) 318.67
napster 40 ( 0.00%) 2980 ( 0.00%) 74.50
realaud 876 ( 0.01%) 555565 ( 0.01%) 634.21
rtsp 91926 ( 0.72%) 125585049 ( 1.76%) 1366.15
icecast 13603 ( 0.11%) 15306405 ( 0.21%) 1125.22
hotline 1 ( 0.00%) 1038 ( 0.00%) 1038.00
other 3645869 ( 28.43%) 2050546843 ( 28.79%) 562.43
udp 2894607 ( 22.57%) 486118895 ( 6.82%) 167.94
dns 1457189 ( 11.36%) 181259524 ( 2.54%) 124.39
realaud 16160 ( 0.13%) 5928950 ( 0.08%) 366.89
halflif 17 ( 0.00%) 2594 ( 0.00%) 152.59
starcra 35 ( 0.00%) 5243 ( 0.00%) 149.80
everque 59 ( 0.00%) 10919 ( 0.00%) 185.07
unreal 19 ( 0.00%) 2604 ( 0.00%) 137.05
quake 42 ( 0.00%) 5610 ( 0.00%) 133.57
cuseeme 4 ( 0.00%) 602 ( 0.00%) 150.50
other 1421031 ( 11.08%) 298871870 ( 4.20%) 210.32
icmp 368652 ( 2.87%) 38246426 ( 0.54%) 103.75
ipip 355 ( 0.00%) 42270 ( 0.00%) 119.07
ipsec 794 ( 0.01%) 140916 ( 0.00%) 177.48
ip6 839 ( 0.01%) 103179 ( 0.00%) 122.98
other 49534 ( 0.39%) 7658142 ( 0.11%) 154.60
frag 14559 ( 0.11%) 12357713 ( 0.17%) 848.80
ip6 14625 ( 0.11%) 2594664 ( 0.04%) 177.41
tcp6 2710 ( 0.02%) 693887 ( 0.01%) 256.05
http(s) 380 ( 0.00%) 436987 ( 0.01%) 1149.97
http(c) 198 ( 0.00%) 20343 ( 0.00%) 102.74
smtp 130 ( 0.00%) 28487 ( 0.00%) 219.13
bgp 74 ( 0.00%) 8348 ( 0.00%) 112.81
other 1928 ( 0.02%) 199722 ( 0.00%) 103.59
udp6 7489 ( 0.06%) 1363992 ( 0.02%) 182.13
dns 7130 ( 0.06%) 1318148 ( 0.02%) 184.87
other 359 ( 0.00%) 45844 ( 0.00%) 127.70
icmp6 4396 ( 0.03%) 532705 ( 0.01%) 121.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801271400.dump.gz (328.09 MB)