Traffic Trace Info
DumpFile: 200801291400.dump
FileSize: 1407.51MB
Id: 200801291400
StartTime: Tue Jan 29 14:00:01 2008
EndTime: Tue Jan 29 14:15:01 2008
TotalTime: 900.23 seconds
TotalCapSize: 1106.01MB CapLen: 96 bytes
# of packets: 19758325 (13224.47MB)
AvgRate: 123.23Mbps stddev:22.11M
IP flow (unique src/dst pair) Information
# of flows: 728469 (avg. 27.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.7% 1.9% 1.7% 1.5% 1.4% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 388911
Top 10 bandwidth usage (bytes/total in %):
7.2% 4.6% 4.0% 4.0% 3.1% 2.9% 2.7% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1005
Top 10 bandwidth usage (bytes/total in %):
36.2% 36.1% 7.4% 6.5% 5.7% 5.7% 5.1% 4.7% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801291400.pktlen.png)
detailed numbers
[ 32- 63]: 3713436
[ 64- 127]: 5550832
[ 128- 255]: 815904
[ 256- 511]: 664202
[ 512- 1023]: 537417
[ 1024- 2047]: 8476534
Protocol Breakdown
![[protocol breakdown chart]](200801291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19758325 (100.00%) 13866865772 (100.00%) 701.82
ip 19725732 ( 99.84%) 13862906887 ( 99.97%) 702.78
tcp 16557091 ( 83.80%) 13321828960 ( 96.07%) 804.60
http(s) 8030240 ( 40.64%) 10609563762 ( 76.51%) 1321.20
http(c) 3857891 ( 19.53%) 471444398 ( 3.40%) 122.20
squid 728885 ( 3.69%) 507385630 ( 3.66%) 696.11
smtp 502305 ( 2.54%) 83993362 ( 0.61%) 167.22
ftp 34611 ( 0.18%) 3618647 ( 0.03%) 104.55
pop3 6022 ( 0.03%) 2092051 ( 0.02%) 347.40
imap 8235 ( 0.04%) 4058109 ( 0.03%) 492.79
telnet 261 ( 0.00%) 21670 ( 0.00%) 83.03
ssh 35710 ( 0.18%) 4718599 ( 0.03%) 132.14
dns 4609 ( 0.02%) 380190 ( 0.00%) 82.49
bgp 193 ( 0.00%) 54623 ( 0.00%) 283.02
realaud 17 ( 0.00%) 2442 ( 0.00%) 143.65
rtsp 110015 ( 0.56%) 156907663 ( 1.13%) 1426.24
icecast 37741 ( 0.19%) 34813733 ( 0.25%) 922.44
other 3200349 ( 16.20%) 1442773661 ( 10.40%) 450.82
udp 2615267 ( 13.24%) 475499047 ( 3.43%) 181.82
dns 1681392 ( 8.51%) 208530167 ( 1.50%) 124.02
realaud 948 ( 0.00%) 59035 ( 0.00%) 62.27
halflif 21 ( 0.00%) 2245 ( 0.00%) 106.90
starcra 33 ( 0.00%) 4328 ( 0.00%) 131.15
everque 102 ( 0.00%) 16155 ( 0.00%) 158.38
unreal 22 ( 0.00%) 3588 ( 0.00%) 163.09
quake 31 ( 0.00%) 5028 ( 0.00%) 162.19
cuseeme 16 ( 0.00%) 1643 ( 0.00%) 102.69
other 932643 ( 4.72%) 266845156 ( 1.92%) 286.12
icmp 493201 ( 2.50%) 50542919 ( 0.36%) 102.48
ipip 341 ( 0.00%) 41950 ( 0.00%) 123.02
ipsec 5761 ( 0.03%) 6359286 ( 0.05%) 1103.85
ip6 854 ( 0.00%) 103177 ( 0.00%) 120.82
other 53217 ( 0.27%) 8531548 ( 0.06%) 160.32
frag 14393 ( 0.07%) 12586183 ( 0.09%) 874.47
ip6 32593 ( 0.16%) 3958885 ( 0.03%) 121.46
tcp6 18521 ( 0.09%) 1682663 ( 0.01%) 90.85
http(s) 15 ( 0.00%) 4136 ( 0.00%) 275.73
http(c) 710 ( 0.00%) 204276 ( 0.00%) 287.71
smtp 117 ( 0.00%) 35772 ( 0.00%) 305.74
bgp 103 ( 0.00%) 12608 ( 0.00%) 122.41
other 17576 ( 0.09%) 1425871 ( 0.01%) 81.13
udp6 9795 ( 0.05%) 1763028 ( 0.01%) 179.99
dns 9269 ( 0.05%) 1634458 ( 0.01%) 176.34
starcra 1 ( 0.00%) 142 ( 0.00%) 142.00
other 525 ( 0.00%) 128428 ( 0.00%) 244.62
icmp6 4247 ( 0.02%) 509114 ( 0.00%) 119.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801291400.dump.gz (501.42 MB)