Traffic Trace Info
DumpFile: 200801301400.dump
FileSize: 1399.40MB
Id: 200801301400
StartTime: Wed Jan 30 14:00:00 2008
EndTime: Wed Jan 30 14:15:01 2008
TotalTime: 900.65 seconds
TotalCapSize: 1097.88MB CapLen: 96 bytes
# of packets: 19759682 (11787.30MB)
AvgRate: 109.78Mbps stddev:17.01M
IP flow (unique src/dst pair) Information
# of flows: 685273 (avg. 28.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.7% 1.8% 1.8% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 378593
Top 10 bandwidth usage (bytes/total in %):
5.5% 3.4% 3.3% 3.3% 3.0% 2.9% 2.8% 2.7% 2.7% 2.4%
# of IPv6 addresses: 839
Top 10 bandwidth usage (bytes/total in %):
78.6% 78.6% 3.1% 2.7% 2.0% 2.0% 1.8% 1.7% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200801301400.pktlen.png)
detailed numbers
[ 32- 63]: 4124044
[ 64- 127]: 5472222
[ 128- 255]: 754733
[ 256- 511]: 1786464
[ 512- 1023]: 479607
[ 1024- 2047]: 7142612
Protocol Breakdown
![[protocol breakdown chart]](200801301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19759682 (100.00%) 12359875744 (100.00%) 625.51
ip 19571797 ( 99.05%) 12344128772 ( 99.87%) 630.71
tcp 16536355 ( 83.69%) 11883843370 ( 96.15%) 718.65
http(s) 6018593 ( 30.46%) 7441583548 ( 60.21%) 1236.43
http(c) 3272317 ( 16.56%) 383682427 ( 3.10%) 117.25
squid 601074 ( 3.04%) 433590055 ( 3.51%) 721.36
smtp 407975 ( 2.06%) 79078634 ( 0.64%) 193.83
ftp 39914 ( 0.20%) 4295837 ( 0.03%) 107.63
pop3 10307 ( 0.05%) 6145936 ( 0.05%) 596.29
imap 9134 ( 0.05%) 4538512 ( 0.04%) 496.88
telnet 679 ( 0.00%) 43522 ( 0.00%) 64.10
ssh 574935 ( 2.91%) 84952036 ( 0.69%) 147.76
dns 4606 ( 0.02%) 369701 ( 0.00%) 80.27
bgp 212 ( 0.00%) 72705 ( 0.00%) 342.95
napster 110 ( 0.00%) 56648 ( 0.00%) 514.98
realaud 12 ( 0.00%) 1352 ( 0.00%) 112.67
rtsp 311034 ( 1.57%) 415804333 ( 3.36%) 1336.85
icecast 34847 ( 0.18%) 31174156 ( 0.25%) 894.60
other 5250604 ( 26.57%) 2998453848 ( 24.26%) 571.07
udp 2240752 ( 11.34%) 384242736 ( 3.11%) 171.48
dns 1601475 ( 8.10%) 211876515 ( 1.71%) 132.30
realaud 1997 ( 0.01%) 129916 ( 0.00%) 65.06
halflif 31 ( 0.00%) 3876 ( 0.00%) 125.03
starcra 15 ( 0.00%) 2238 ( 0.00%) 149.20
everque 42 ( 0.00%) 6924 ( 0.00%) 164.86
unreal 16 ( 0.00%) 2814 ( 0.00%) 175.88
quake 25 ( 0.00%) 2512 ( 0.00%) 100.48
cuseeme 4 ( 0.00%) 315 ( 0.00%) 78.75
other 637104 ( 3.22%) 172193732 ( 1.39%) 270.28
icmp 769549 ( 3.89%) 67551397 ( 0.55%) 87.78
ipip 321 ( 0.00%) 38786 ( 0.00%) 120.83
ipsec 4081 ( 0.02%) 4950694 ( 0.04%) 1213.11
ip6 828 ( 0.00%) 100433 ( 0.00%) 121.30
other 19911 ( 0.10%) 3401356 ( 0.03%) 170.83
frag 13193 ( 0.07%) 11439465 ( 0.09%) 867.09
ip6 187885 ( 0.95%) 15746972 ( 0.13%) 83.81
tcp6 170332 ( 0.86%) 13134332 ( 0.11%) 77.11
http(s) 250 ( 0.00%) 318899 ( 0.00%) 1275.60
http(c) 168041 ( 0.85%) 12557173 ( 0.10%) 74.73
smtp 131 ( 0.00%) 55014 ( 0.00%) 419.95
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1848 ( 0.01%) 196810 ( 0.00%) 106.50
udp6 13186 ( 0.07%) 2083665 ( 0.02%) 158.02
dns 12990 ( 0.07%) 2059008 ( 0.02%) 158.51
other 196 ( 0.00%) 24657 ( 0.00%) 125.80
icmp6 4337 ( 0.02%) 524895 ( 0.00%) 121.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200801301400.dump.gz (492.49 MB)