Traffic Trace Info
DumpFile: 200802011400.dump
FileSize: 1398.43MB
Id: 200802011400
StartTime: Fri Feb 1 14:00:00 2008
EndTime: Fri Feb 1 14:15:00 2008
TotalTime: 900.11 seconds
TotalCapSize: 1098.78MB CapLen: 96 bytes
# of packets: 19637085 (11859.92MB)
AvgRate: 110.54Mbps stddev:21.38M
IP flow (unique src/dst pair) Information
# of flows: 731712 (avg. 26.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.5% 2.0% 1.8% 1.4% 1.2% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 399306
Top 10 bandwidth usage (bytes/total in %):
6.5% 6.5% 4.9% 4.3% 4.1% 3.4% 3.3% 3.2% 3.1% 2.5%
# of IPv6 addresses: 809
Top 10 bandwidth usage (bytes/total in %):
11.4% 10.1% 9.8% 9.3% 9.3% 7.9% 6.0% 5.3% 5.2% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802011400.pktlen.png)
detailed numbers
[ 32- 63]: 3523736
[ 64- 127]: 7004049
[ 128- 255]: 817698
[ 256- 511]: 419636
[ 512- 1023]: 451938
[ 1024- 2047]: 7420028
Protocol Breakdown
![[protocol breakdown chart]](200802011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19637085 (100.00%) 12436022756 (100.00%) 633.29
ip 19620873 ( 99.92%) 12433481681 ( 99.98%) 633.69
tcp 16031362 ( 81.64%) 11671322400 ( 93.85%) 728.03
http(s) 6319060 ( 32.18%) 8461295813 ( 68.04%) 1339.01
http(c) 3252471 ( 16.56%) 325960190 ( 2.62%) 100.22
squid 613770 ( 3.13%) 462493467 ( 3.72%) 753.53
smtp 415013 ( 2.11%) 75728479 ( 0.61%) 182.47
ftp 40684 ( 0.21%) 4037815 ( 0.03%) 99.25
pop3 5286 ( 0.03%) 1927672 ( 0.02%) 364.67
imap 9560 ( 0.05%) 1137097 ( 0.01%) 118.94
telnet 1136 ( 0.01%) 89855 ( 0.00%) 79.10
ssh 1135336 ( 5.78%) 163460856 ( 1.31%) 143.98
dns 3132 ( 0.02%) 270966 ( 0.00%) 86.52
bgp 218 ( 0.00%) 82687 ( 0.00%) 379.30
napster 14 ( 0.00%) 893 ( 0.00%) 63.79
realaud 39 ( 0.00%) 2822 ( 0.00%) 72.36
rtsp 36164 ( 0.18%) 13441550 ( 0.11%) 371.68
icecast 23514 ( 0.12%) 16243121 ( 0.13%) 690.79
other 4175957 ( 21.27%) 2145148637 ( 17.25%) 513.69
udp 2594395 ( 13.21%) 665193223 ( 5.35%) 256.40
dns 1443310 ( 7.35%) 188582983 ( 1.52%) 130.66
realaud 7323 ( 0.04%) 4848726 ( 0.04%) 662.12
halflif 34 ( 0.00%) 3182 ( 0.00%) 93.59
starcra 70 ( 0.00%) 8817 ( 0.00%) 125.96
everque 72 ( 0.00%) 10667 ( 0.00%) 148.15
unreal 17 ( 0.00%) 2782 ( 0.00%) 163.65
quake 30 ( 0.00%) 3194 ( 0.00%) 106.47
cuseeme 9 ( 0.00%) 2530 ( 0.00%) 281.11
other 1143321 ( 5.82%) 471669662 ( 3.79%) 412.54
icmp 900070 ( 4.58%) 79964529 ( 0.64%) 88.84
ipip 347 ( 0.00%) 43229 ( 0.00%) 124.58
ipsec 562 ( 0.00%) 467412 ( 0.00%) 831.69
ip6 848 ( 0.00%) 102963 ( 0.00%) 121.42
other 93289 ( 0.48%) 16387925 ( 0.13%) 175.67
frag 13086 ( 0.07%) 11186349 ( 0.09%) 854.83
ip6 16212 ( 0.08%) 2541075 ( 0.02%) 156.74
tcp6 2491 ( 0.01%) 322174 ( 0.00%) 129.34
http(s) 16 ( 0.00%) 1504 ( 0.00%) 94.00
http(c) 234 ( 0.00%) 42616 ( 0.00%) 182.12
smtp 220 ( 0.00%) 65522 ( 0.00%) 297.83
ftp 6 ( 0.00%) 468 ( 0.00%) 78.00
pop3 17 ( 0.00%) 1975 ( 0.00%) 116.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 106 ( 0.00%) 13273 ( 0.00%) 125.22
other 1885 ( 0.01%) 196181 ( 0.00%) 104.07
udp6 9428 ( 0.05%) 1678151 ( 0.01%) 178.00
dns 9252 ( 0.05%) 1656455 ( 0.01%) 179.04
other 176 ( 0.00%) 21696 ( 0.00%) 123.27
icmp6 4245 ( 0.02%) 512874 ( 0.00%) 120.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 23796 ( 0.00%) 1322.00
tcpdump file: 200802011400.dump.gz (492.34 MB)