Traffic Trace Info
DumpFile: 200802091400.dump
FileSize: 907.85MB
Id: 200802091400
StartTime: Sat Feb 9 14:00:00 2008
EndTime: Sat Feb 9 14:15:00 2008
TotalTime: 900.43 seconds
TotalCapSize: 703.19MB CapLen: 96 bytes
# of packets: 13411978 (8342.28MB)
AvgRate: 77.73Mbps stddev:14.21M
IP flow (unique src/dst pair) Information
# of flows: 492940 (avg. 27.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 270739
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.0% 6.5% 5.4% 4.4% 3.6% 2.8% 2.3% 2.3% 2.0%
# of IPv6 addresses: 661
Top 10 bandwidth usage (bytes/total in %):
15.8% 13.6% 10.0% 8.4% 8.0% 7.8% 7.8% 7.4% 5.0% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802091400.pktlen.png)
detailed numbers
[ 32- 63]: 2878688
[ 64- 127]: 3914333
[ 128- 255]: 476857
[ 256- 511]: 383985
[ 512- 1023]: 373453
[ 1024- 2047]: 5384662
Protocol Breakdown
![[protocol breakdown chart]](200802091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13411978 (100.00%) 8747517585 (100.00%) 652.22
ip 13394872 ( 99.87%) 8744633244 ( 99.97%) 652.83
tcp 9570858 ( 71.36%) 7342067812 ( 83.93%) 767.13
http(s) 4095009 ( 30.53%) 5522124568 ( 63.13%) 1348.50
http(c) 2539902 ( 18.94%) 234552849 ( 2.68%) 92.35
squid 604010 ( 4.50%) 460389102 ( 5.26%) 762.22
smtp 402337 ( 3.00%) 72688948 ( 0.83%) 180.67
nntp 12 ( 0.00%) 1686 ( 0.00%) 140.50
ftp 22538 ( 0.17%) 2052425 ( 0.02%) 91.07
pop3 4655 ( 0.03%) 2381934 ( 0.03%) 511.69
imap 4245 ( 0.03%) 1098655 ( 0.01%) 258.81
telnet 783 ( 0.01%) 64135 ( 0.00%) 81.91
ssh 34083 ( 0.25%) 4734900 ( 0.05%) 138.92
dns 2719 ( 0.02%) 213262 ( 0.00%) 78.43
bgp 196 ( 0.00%) 62867 ( 0.00%) 320.75
napster 1383 ( 0.01%) 240466 ( 0.00%) 173.87
realaud 40 ( 0.00%) 2442 ( 0.00%) 61.05
rtsp 229 ( 0.00%) 60395 ( 0.00%) 263.73
icecast 14060 ( 0.10%) 15407834 ( 0.18%) 1095.86
hotline 25 ( 0.00%) 2995 ( 0.00%) 119.80
other 1844613 ( 13.75%) 1025987209 ( 11.73%) 556.21
udp 3341010 ( 24.91%) 1352355663 ( 15.46%) 404.77
dns 670681 ( 5.00%) 103473576 ( 1.18%) 154.28
realaud 62 ( 0.00%) 10955 ( 0.00%) 176.69
halflif 5 ( 0.00%) 678 ( 0.00%) 135.60
starcra 19 ( 0.00%) 2735 ( 0.00%) 143.95
everque 56 ( 0.00%) 6395 ( 0.00%) 114.20
unreal 92 ( 0.00%) 17095 ( 0.00%) 185.82
quake 2 ( 0.00%) 218 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 2668379 ( 19.90%) 1248726429 ( 14.28%) 467.97
icmp 436399 ( 3.25%) 40344207 ( 0.46%) 92.45
ipip 337 ( 0.00%) 43056 ( 0.00%) 127.76
ipsec 74 ( 0.00%) 14348 ( 0.00%) 193.89
ip6 822 ( 0.01%) 98465 ( 0.00%) 119.79
other 45372 ( 0.34%) 9709693 ( 0.11%) 214.00
frag 6147 ( 0.05%) 3629834 ( 0.04%) 590.50
ip6 17106 ( 0.13%) 2884341 ( 0.03%) 168.62
tcp6 2427 ( 0.02%) 329939 ( 0.00%) 135.95
http(s) 23 ( 0.00%) 8329 ( 0.00%) 362.13
http(c) 169 ( 0.00%) 16481 ( 0.00%) 97.52
smtp 222 ( 0.00%) 76247 ( 0.00%) 343.45
pop3 66 ( 0.00%) 6444 ( 0.00%) 97.64
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 1878 ( 0.01%) 215406 ( 0.00%) 114.70
udp6 10312 ( 0.08%) 2029793 ( 0.02%) 196.84
dns 10162 ( 0.08%) 2010067 ( 0.02%) 197.80
other 150 ( 0.00%) 19726 ( 0.00%) 131.51
icmp6 4336 ( 0.03%) 520393 ( 0.01%) 120.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200802091400.dump.gz (326.89 MB)