Traffic Trace Info
DumpFile: 200801281400.dump
FileSize: 1651.97MB
Id: 200801281400
StartTime: Mon Jan 28 14:00:00 2008
EndTime: Mon Jan 28 14:15:00 2008
TotalTime: 900.04 seconds
TotalCapSize: 1294.97MB CapLen: 96 bytes
# of packets: 23395867 (15756.30MB)
AvgRate: 146.85Mbps stddev:25.79M
IP flow (unique src/dst pair) Information
# of flows: 692022 (avg. 33.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.4% 2.0% 1.9% 1.8% 1.3% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 375346
Top 10 bandwidth usage (bytes/total in %):
8.6% 6.2% 5.5% 5.2% 3.6% 3.4% 3.4% 3.0% 2.7% 2.4%
# of IPv6 addresses: 802
Top 10 bandwidth usage (bytes/total in %):
14.1% 14.1% 9.6% 7.9% 7.2% 7.2% 6.6% 5.1% 5.1% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801281400.pktlen.png)
detailed numbers
[ 32- 63]: 4370623
[ 64- 127]: 6916840
[ 128- 255]: 766605
[ 256- 511]: 554508
[ 512- 1023]: 552180
[ 1024- 2047]: 10235111
Protocol Breakdown
![[protocol breakdown chart]](200801281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23395867 (100.00%) 16521682550 (100.00%) 706.18
ip 23378928 ( 99.93%) 16518434207 ( 99.98%) 706.55
tcp 19752898 ( 84.43%) 15849103948 ( 95.93%) 802.37
http(s) 8392677 ( 35.87%) 11244196679 ( 68.06%) 1339.76
http(c) 4653188 ( 19.89%) 572691128 ( 3.47%) 123.08
squid 611198 ( 2.61%) 505964667 ( 3.06%) 827.82
smtp 453284 ( 1.94%) 91629424 ( 0.55%) 202.15
ftp 50711 ( 0.22%) 4687514 ( 0.03%) 92.44
pop3 6422 ( 0.03%) 2311529 ( 0.01%) 359.94
imap 4821 ( 0.02%) 935081 ( 0.01%) 193.96
telnet 61 ( 0.00%) 16297 ( 0.00%) 267.16
ssh 399098 ( 1.71%) 61364348 ( 0.37%) 153.76
dns 4520 ( 0.02%) 392207 ( 0.00%) 86.77
bgp 204 ( 0.00%) 61001 ( 0.00%) 299.02
napster 71 ( 0.00%) 4688 ( 0.00%) 66.03
realaud 243 ( 0.00%) 20692 ( 0.00%) 85.15
rtsp 78275 ( 0.33%) 70309559 ( 0.43%) 898.24
icecast 28774 ( 0.12%) 30892047 ( 0.19%) 1073.61
hotline 47 ( 0.00%) 3110 ( 0.00%) 66.17
other 5069301 ( 21.67%) 3263623797 ( 19.75%) 643.80
udp 3066101 ( 13.11%) 600696263 ( 3.64%) 195.92
dns 1599327 ( 6.84%) 207653185 ( 1.26%) 129.84
realaud 23583 ( 0.10%) 10293062 ( 0.06%) 436.46
halflif 27 ( 0.00%) 2804 ( 0.00%) 103.85
starcra 32 ( 0.00%) 5287 ( 0.00%) 165.22
everque 43 ( 0.00%) 8852 ( 0.00%) 205.86
unreal 34 ( 0.00%) 3718 ( 0.00%) 109.35
quake 37 ( 0.00%) 3790 ( 0.00%) 102.43
cuseeme 6 ( 0.00%) 519 ( 0.00%) 86.50
other 1442988 ( 6.17%) 382714876 ( 2.32%) 265.22
icmp 467523 ( 2.00%) 47821843 ( 0.29%) 102.29
ipip 360 ( 0.00%) 44336 ( 0.00%) 123.16
ipsec 3717 ( 0.02%) 4382086 ( 0.03%) 1178.93
ip6 878 ( 0.00%) 107918 ( 0.00%) 122.91
other 87451 ( 0.37%) 16277813 ( 0.10%) 186.14
frag 13882 ( 0.06%) 11949347 ( 0.07%) 860.78
ip6 16939 ( 0.07%) 3248343 ( 0.02%) 191.77
tcp6 2603 ( 0.01%) 934682 ( 0.01%) 359.08
http(s) 454 ( 0.00%) 560557 ( 0.00%) 1234.71
http(c) 52 ( 0.00%) 5693 ( 0.00%) 109.48
smtp 424 ( 0.00%) 203839 ( 0.00%) 480.75
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 64 ( 0.00%) 6643 ( 0.00%) 103.80
other 1602 ( 0.01%) 157315 ( 0.00%) 98.20
udp6 10001 ( 0.04%) 1791835 ( 0.01%) 179.17
dns 9814 ( 0.04%) 1768415 ( 0.01%) 180.19
other 187 ( 0.00%) 23420 ( 0.00%) 125.24
icmp6 4305 ( 0.02%) 517746 ( 0.00%) 120.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801281400.dump.gz (583.27 MB)