Traffic Trace Info
DumpFile: 200802081400.dump
FileSize: 1400.41MB
Id: 200802081400
StartTime: Fri Feb 8 14:00:01 2008
EndTime: Fri Feb 8 14:15:01 2008
TotalTime: 900.19 seconds
TotalCapSize: 1090.66MB CapLen: 96 bytes
# of packets: 20299275 (15345.59MB)
AvgRate: 142.98Mbps stddev:31.48M
IP flow (unique src/dst pair) Information
# of flows: 576757 (avg. 35.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 2.1% 1.6% 1.4% 1.3% 1.2% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 300723
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.8% 5.6% 5.0% 4.8% 4.2% 3.9% 2.8% 2.6% 2.2%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
65.0% 64.9% 6.1% 5.4% 4.1% 3.6% 3.6% 2.6% 1.9% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802081400.pktlen.png)
detailed numbers
[ 32- 63]: 3946690
[ 64- 127]: 4646579
[ 128- 255]: 579744
[ 256- 511]: 486230
[ 512- 1023]: 611260
[ 1024- 2047]: 10028772
Protocol Breakdown
![[protocol breakdown chart]](200802081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20299275 (100.00%) 16091014434 (100.00%) 792.69
ip 20154041 ( 99.28%) 16076703089 ( 99.91%) 797.69
tcp 16053644 ( 79.08%) 14172815492 ( 88.08%) 882.84
http(s) 8492931 ( 41.84%) 11756705260 ( 73.06%) 1384.29
http(c) 4174419 ( 20.56%) 440126686 ( 2.74%) 105.43
squid 740148 ( 3.65%) 511836835 ( 3.18%) 691.53
smtp 532290 ( 2.62%) 169196429 ( 1.05%) 317.87
ftp 11018 ( 0.05%) 1063113 ( 0.01%) 96.49
pop3 4727 ( 0.02%) 1822271 ( 0.01%) 385.50
imap 6210 ( 0.03%) 1331664 ( 0.01%) 214.44
telnet 322 ( 0.00%) 36662 ( 0.00%) 113.86
ssh 38246 ( 0.19%) 4767940 ( 0.03%) 124.67
dns 5510 ( 0.03%) 376091 ( 0.00%) 68.26
bgp 191 ( 0.00%) 57985 ( 0.00%) 303.59
napster 6 ( 0.00%) 1380 ( 0.00%) 230.00
realaud 195 ( 0.00%) 27935 ( 0.00%) 143.26
rtsp 72265 ( 0.36%) 94523282 ( 0.59%) 1308.01
icecast 25456 ( 0.13%) 22576773 ( 0.14%) 886.89
hotline 6 ( 0.00%) 721 ( 0.00%) 120.17
other 1949698 ( 9.60%) 1168364105 ( 7.26%) 599.25
udp 3582004 ( 17.65%) 1843099572 ( 11.45%) 514.54
dns 782409 ( 3.85%) 122539505 ( 0.76%) 156.62
realaud 758 ( 0.00%) 547190 ( 0.00%) 721.89
halflif 8 ( 0.00%) 1827 ( 0.00%) 228.38
starcra 41 ( 0.00%) 7609 ( 0.00%) 185.59
everque 50 ( 0.00%) 8102 ( 0.00%) 162.04
unreal 15 ( 0.00%) 3022 ( 0.00%) 201.47
quake 16 ( 0.00%) 2178 ( 0.00%) 136.12
cuseeme 4 ( 0.00%) 587 ( 0.00%) 146.75
other 2798272 ( 13.79%) 1719954023 ( 10.69%) 614.65
icmp 440335 ( 2.17%) 40465414 ( 0.25%) 91.90
ipip 356 ( 0.00%) 43290 ( 0.00%) 121.60
ip6 847 ( 0.00%) 102116 ( 0.00%) 120.56
other 76855 ( 0.38%) 20177205 ( 0.13%) 262.54
frag 3578 ( 0.02%) 2541558 ( 0.02%) 710.33
ip6 145234 ( 0.72%) 14311345 ( 0.09%) 98.54
tcp6 128332 ( 0.63%) 10968635 ( 0.07%) 85.47
http(s) 1034 ( 0.01%) 1439096 ( 0.01%) 1391.78
http(c) 125576 ( 0.62%) 9294377 ( 0.06%) 74.01
smtp 331 ( 0.00%) 101911 ( 0.00%) 307.89
ssh 159 ( 0.00%) 13770 ( 0.00%) 86.60
bgp 89 ( 0.00%) 11007 ( 0.00%) 123.67
other 1143 ( 0.01%) 108474 ( 0.00%) 94.90
udp6 12509 ( 0.06%) 2809972 ( 0.02%) 224.64
dns 11914 ( 0.06%) 2597352 ( 0.02%) 218.01
other 595 ( 0.00%) 212620 ( 0.00%) 357.34
icmp6 4356 ( 0.02%) 522792 ( 0.00%) 120.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5730 ( 0.00%) 955.00
tcpdump file: 200802081400.dump.gz (484.09 MB)