Traffic Trace Info
DumpFile: 200802041400.dump
FileSize: 1142.44MB
Id: 200802041400
StartTime: Mon Feb 4 14:00:00 2008
EndTime: Mon Feb 4 14:15:01 2008
TotalTime: 900.35 seconds
TotalCapSize: 897.07MB CapLen: 96 bytes
# of packets: 16079780 (9664.20MB)
AvgRate: 90.05Mbps stddev:27.26M
IP flow (unique src/dst pair) Information
# of flows: 646435 (avg. 24.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.6% 1.6% 1.5% 1.4% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 344979
Top 10 bandwidth usage (bytes/total in %):
3.8% 3.6% 3.4% 3.4% 2.7% 2.5% 2.5% 2.4% 2.1% 1.9%
# of IPv6 addresses: 800
Top 10 bandwidth usage (bytes/total in %):
17.7% 13.3% 8.7% 8.3% 7.6% 7.6% 6.6% 4.9% 4.8% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802041400.pktlen.png)
detailed numbers
[ 32- 63]: 3072710
[ 64- 127]: 5130626
[ 128- 255]: 936353
[ 256- 511]: 488195
[ 512- 1023]: 465674
[ 1024- 2047]: 5986222
Protocol Breakdown
![[protocol breakdown chart]](200802041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16079780 (100.00%) 10133645435 (100.00%) 630.21
ip 16059077 ( 99.87%) 10130589825 ( 99.97%) 630.83
tcp 13206537 ( 82.13%) 9561078722 ( 94.35%) 723.97
http(s) 5536329 ( 34.43%) 7301015765 ( 72.05%) 1318.75
http(c) 2719500 ( 16.91%) 341018477 ( 3.37%) 125.40
squid 612808 ( 3.81%) 446110563 ( 4.40%) 727.98
smtp 491848 ( 3.06%) 134397457 ( 1.33%) 273.25
ftp 262448 ( 1.63%) 164765032 ( 1.63%) 627.80
pop3 5076 ( 0.03%) 2166241 ( 0.02%) 426.76
imap 6885 ( 0.04%) 1803564 ( 0.02%) 261.96
telnet 41 ( 0.00%) 15124 ( 0.00%) 368.88
ssh 1699034 ( 10.57%) 253771833 ( 2.50%) 149.36
dns 2996 ( 0.02%) 229312 ( 0.00%) 76.54
bgp 186 ( 0.00%) 46497 ( 0.00%) 249.98
napster 27 ( 0.00%) 3315 ( 0.00%) 122.78
realaud 13 ( 0.00%) 890 ( 0.00%) 68.46
rtsp 24169 ( 0.15%) 16279371 ( 0.16%) 673.56
icecast 49795 ( 0.31%) 42543079 ( 0.42%) 854.36
hotline 2 ( 0.00%) 126 ( 0.00%) 63.00
other 1795367 ( 11.17%) 856911296 ( 8.46%) 477.29
udp 2339031 ( 14.55%) 506097929 ( 4.99%) 216.37
dns 1517531 ( 9.44%) 198138026 ( 1.96%) 130.57
realaud 66 ( 0.00%) 7251 ( 0.00%) 109.86
halflif 20 ( 0.00%) 1925 ( 0.00%) 96.25
starcra 55 ( 0.00%) 10724 ( 0.00%) 194.98
everque 78 ( 0.00%) 11646 ( 0.00%) 149.31
unreal 22 ( 0.00%) 3738 ( 0.00%) 169.91
quake 16 ( 0.00%) 1429 ( 0.00%) 89.31
cuseeme 6 ( 0.00%) 945 ( 0.00%) 157.50
other 821211 ( 5.11%) 307894817 ( 3.04%) 374.93
icmp 413192 ( 2.57%) 40635296 ( 0.40%) 98.34
ipip 318 ( 0.00%) 39704 ( 0.00%) 124.86
ip6 838 ( 0.01%) 102852 ( 0.00%) 122.74
other 99161 ( 0.62%) 22635322 ( 0.22%) 228.27
frag 1603 ( 0.01%) 1303053 ( 0.01%) 812.88
ip6 20703 ( 0.13%) 3055610 ( 0.03%) 147.59
tcp6 3062 ( 0.02%) 490960 ( 0.00%) 160.34
http(s) 84 ( 0.00%) 83042 ( 0.00%) 988.60
http(c) 360 ( 0.00%) 44038 ( 0.00%) 122.33
smtp 118 ( 0.00%) 53899 ( 0.00%) 456.77
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 2437 ( 0.02%) 303432 ( 0.00%) 124.51
udp6 13287 ( 0.08%) 2044558 ( 0.02%) 153.88
dns 13154 ( 0.08%) 2027767 ( 0.02%) 154.16
other 133 ( 0.00%) 16791 ( 0.00%) 126.25
icmp6 4323 ( 0.03%) 515876 ( 0.01%) 119.33
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200802041400.dump.gz (422.27 MB)