Traffic Trace Info
DumpFile: 200802051400.dump
FileSize: 1227.86MB
Id: 200802051400
StartTime: Tue Feb 5 14:00:01 2008
EndTime: Tue Feb 5 14:15:00 2008
TotalTime: 899.62 seconds
TotalCapSize: 953.02MB CapLen: 96 bytes
# of packets: 18010804 (11016.79MB)
AvgRate: 102.75Mbps stddev:18.95M
IP flow (unique src/dst pair) Information
# of flows: 702756 (avg. 25.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.6% 1.4% 1.3% 1.1% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 365531
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.8% 3.7% 3.5% 2.9% 2.6% 2.4% 2.1% 2.1% 1.8%
# of IPv6 addresses: 824
Top 10 bandwidth usage (bytes/total in %):
45.3% 45.3% 39.7% 33.0% 8.8% 1.7% 1.4% 1.1% 1.1% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802051400.pktlen.png)
detailed numbers
[ 32- 63]: 3132028
[ 64- 127]: 6013548
[ 128- 255]: 808403
[ 256- 511]: 559891
[ 512- 1023]: 578653
[ 1024- 2047]: 6918281
Protocol Breakdown
![[protocol breakdown chart]](200802051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18010804 (100.00%) 11551941722 (100.00%) 641.39
ip 17843343 ( 99.07%) 11526070706 ( 99.78%) 645.96
tcp 11881129 ( 65.97%) 9427020669 ( 81.61%) 793.44
http(s) 5184427 ( 28.79%) 6706989619 ( 58.06%) 1293.68
http(c) 2928703 ( 16.26%) 420418216 ( 3.64%) 143.55
squid 439430 ( 2.44%) 320083568 ( 2.77%) 728.41
smtp 484981 ( 2.69%) 82536219 ( 0.71%) 170.18
nntp 13 ( 0.00%) 1482 ( 0.00%) 114.00
ftp 363155 ( 2.02%) 315103332 ( 2.73%) 867.68
pop3 5989 ( 0.03%) 2838894 ( 0.02%) 474.02
imap 9104 ( 0.05%) 3311916 ( 0.03%) 363.79
telnet 871 ( 0.00%) 59229 ( 0.00%) 68.00
ssh 155644 ( 0.86%) 95335650 ( 0.83%) 612.52
dns 4733 ( 0.03%) 334032 ( 0.00%) 70.58
bgp 240 ( 0.00%) 83483 ( 0.00%) 347.85
napster 8 ( 0.00%) 542 ( 0.00%) 67.75
realaud 12 ( 0.00%) 1752 ( 0.00%) 146.00
rtsp 65081 ( 0.36%) 55968131 ( 0.48%) 859.98
icecast 16509 ( 0.09%) 15456598 ( 0.13%) 936.25
other 2222225 ( 12.34%) 1408497766 ( 12.19%) 633.82
udp 5366734 ( 29.80%) 2029776225 ( 17.57%) 378.21
dns 1805432 ( 10.02%) 230813526 ( 2.00%) 127.84
realaud 29193 ( 0.16%) 13402713 ( 0.12%) 459.11
halflif 12 ( 0.00%) 1326 ( 0.00%) 110.50
starcra 48 ( 0.00%) 8366 ( 0.00%) 174.29
everque 12957 ( 0.07%) 5402408 ( 0.05%) 416.95
unreal 16 ( 0.00%) 1504 ( 0.00%) 94.00
quake 24 ( 0.00%) 6086 ( 0.00%) 253.58
cuseeme 3 ( 0.00%) 247 ( 0.00%) 82.33
other 3518879 ( 19.54%) 1779963894 ( 15.41%) 505.83
icmp 514775 ( 2.86%) 47447317 ( 0.41%) 92.17
ipip 317 ( 0.00%) 37484 ( 0.00%) 118.25
ipsec 34 ( 0.00%) 6140 ( 0.00%) 180.59
ip6 873 ( 0.00%) 110351 ( 0.00%) 126.40
other 79481 ( 0.44%) 21672520 ( 0.19%) 272.68
frag 5152 ( 0.03%) 5796593 ( 0.05%) 1125.12
ip6 167461 ( 0.93%) 25871016 ( 0.22%) 154.49
tcp6 150392 ( 0.84%) 23170165 ( 0.20%) 154.07
http(s) 318 ( 0.00%) 112693 ( 0.00%) 354.38
http(c) 115556 ( 0.64%) 8563518 ( 0.07%) 74.11
smtp 737 ( 0.00%) 345579 ( 0.00%) 468.90
ftp 374 ( 0.00%) 432869 ( 0.00%) 1157.40
bgp 75 ( 0.00%) 8662 ( 0.00%) 115.49
other 33332 ( 0.19%) 13706844 ( 0.12%) 411.22
udp6 12497 ( 0.07%) 2131938 ( 0.02%) 170.60
dns 12446 ( 0.07%) 2126314 ( 0.02%) 170.84
other 51 ( 0.00%) 5624 ( 0.00%) 110.27
icmp6 4542 ( 0.03%) 564833 ( 0.00%) 124.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802051400.dump.gz (445.25 MB)