Traffic Trace Info
DumpFile: 200802071400.dump
FileSize: 1053.89MB
Id: 200802071400
StartTime: Thu Feb 7 14:00:00 2008
EndTime: Thu Feb 7 14:15:01 2008
TotalTime: 900.77 seconds
TotalCapSize: 824.76MB CapLen: 96 bytes
# of packets: 15015476 (10686.58MB)
AvgRate: 99.53Mbps stddev:28.69M
IP flow (unique src/dst pair) Information
# of flows: 593409 (avg. 25.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 3.4% 2.1% 2.0% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 316833
Top 10 bandwidth usage (bytes/total in %):
6.5% 6.5% 4.4% 4.1% 3.7% 3.6% 3.5% 3.5% 3.4% 3.1%
# of IPv6 addresses: 929
Top 10 bandwidth usage (bytes/total in %):
60.6% 53.7% 17.2% 9.0% 6.9% 1.9% 1.9% 1.9% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802071400.pktlen.png)
detailed numbers
[ 32- 63]: 2615153
[ 64- 127]: 3930707
[ 128- 255]: 700133
[ 256- 511]: 506365
[ 512- 1023]: 384824
[ 1024- 2047]: 6878294
Protocol Breakdown
![[protocol breakdown chart]](200802071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15015476 (100.00%) 11205690326 (100.00%) 746.28
ip 14848482 ( 98.89%) 11190546073 ( 99.86%) 753.65
tcp 11829973 ( 78.79%) 10652655524 ( 95.06%) 900.48
http(s) 6010434 ( 40.03%) 8141996265 ( 72.66%) 1354.64
http(c) 2434927 ( 16.22%) 280234160 ( 2.50%) 115.09
squid 580398 ( 3.87%) 458833540 ( 4.09%) 790.55
smtp 505198 ( 3.36%) 99555474 ( 0.89%) 197.06
nntp 32 ( 0.00%) 2280 ( 0.00%) 71.25
ftp 65830 ( 0.44%) 39262111 ( 0.35%) 596.42
pop3 11026 ( 0.07%) 6006038 ( 0.05%) 544.72
imap 44291 ( 0.29%) 3667188 ( 0.03%) 82.80
telnet 41 ( 0.00%) 2872 ( 0.00%) 70.05
ssh 10893 ( 0.07%) 2235011 ( 0.02%) 205.18
dns 4492 ( 0.03%) 309777 ( 0.00%) 68.96
bgp 241 ( 0.00%) 72264 ( 0.00%) 299.85
napster 14 ( 0.00%) 854 ( 0.00%) 61.00
realaud 107 ( 0.00%) 13253 ( 0.00%) 123.86
rtsp 91128 ( 0.61%) 119891626 ( 1.07%) 1315.64
icecast 9627 ( 0.06%) 3267703 ( 0.03%) 339.43
hotline 12 ( 0.00%) 732 ( 0.00%) 61.00
other 2061278 ( 13.73%) 1497304136 ( 13.36%) 726.40
udp 2509338 ( 16.71%) 487102277 ( 4.35%) 194.12
dns 1425243 ( 9.49%) 172028039 ( 1.54%) 120.70
realaud 203 ( 0.00%) 18912 ( 0.00%) 93.16
halflif 19 ( 0.00%) 2509 ( 0.00%) 132.05
starcra 30 ( 0.00%) 4996 ( 0.00%) 166.53
everque 85 ( 0.00%) 15065 ( 0.00%) 177.24
unreal 23 ( 0.00%) 2959 ( 0.00%) 128.65
quake 14 ( 0.00%) 1185 ( 0.00%) 84.64
cuseeme 11 ( 0.00%) 1222 ( 0.00%) 111.09
other 1083654 ( 7.22%) 314998082 ( 2.81%) 290.68
icmp 461208 ( 3.07%) 42792697 ( 0.38%) 92.78
ipip 349 ( 0.00%) 42234 ( 0.00%) 121.01
ip6 865 ( 0.01%) 105782 ( 0.00%) 122.29
other 46749 ( 0.31%) 7847559 ( 0.07%) 167.87
frag 6126 ( 0.04%) 4913843 ( 0.04%) 802.13
ip6 166994 ( 1.11%) 15144253 ( 0.14%) 90.69
tcp6 126901 ( 0.85%) 9890850 ( 0.09%) 77.94
http(s) 85 ( 0.00%) 70105 ( 0.00%) 824.76
http(c) 110412 ( 0.74%) 8195762 ( 0.07%) 74.23
smtp 358 ( 0.00%) 243931 ( 0.00%) 681.37
ftp 57 ( 0.00%) 6960 ( 0.00%) 122.11
bgp 76 ( 0.00%) 9366 ( 0.00%) 123.24
other 15913 ( 0.11%) 1364726 ( 0.01%) 85.76
udp6 35519 ( 0.24%) 4691870 ( 0.04%) 132.09
dns 35360 ( 0.24%) 4659752 ( 0.04%) 131.78
other 159 ( 0.00%) 32118 ( 0.00%) 202.00
icmp6 4541 ( 0.03%) 555413 ( 0.00%) 122.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 1904 ( 0.00%) 952.00
tcpdump file: 200802071400.dump.gz (361.88 MB)