Traffic Trace Info
DumpFile: 200802121400.dump
FileSize: 1238.55MB
Id: 200802121400
StartTime: Tue Feb 12 14:00:00 2008
EndTime: Tue Feb 12 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 965.83MB CapLen: 96 bytes
# of packets: 17872400 (12954.78MB)
AvgRate: 120.81Mbps stddev:32.27M
IP flow (unique src/dst pair) Information
# of flows: 716872 (avg. 24.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.9% 2.6% 1.5% 1.4% 1.2% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 377516
Top 10 bandwidth usage (bytes/total in %):
5.9% 5.8% 5.4% 5.3% 4.0% 3.8% 3.4% 3.0% 2.9% 2.9%
# of IPv6 addresses: 730
Top 10 bandwidth usage (bytes/total in %):
67.7% 67.7% 3.8% 3.8% 3.8% 3.8% 2.7% 2.6% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802121400.pktlen.png)
detailed numbers
[ 32- 63]: 3064314
[ 64- 127]: 4577625
[ 128- 255]: 699720
[ 256- 511]: 681054
[ 512- 1023]: 472331
[ 1024- 2047]: 8377356
Protocol Breakdown
![[protocol breakdown chart]](200802121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17872400 (100.00%) 13584067733 (100.00%) 760.06
ip 17739055 ( 99.25%) 13572637930 ( 99.92%) 765.13
tcp 13679611 ( 76.54%) 12051431988 ( 88.72%) 880.98
http(s) 6899946 ( 38.61%) 9141144168 ( 67.29%) 1324.81
http(c) 3076439 ( 17.21%) 443149378 ( 3.26%) 144.05
squid 388855 ( 2.18%) 288176269 ( 2.12%) 741.09
smtp 551663 ( 3.09%) 115157325 ( 0.85%) 208.75
nntp 2664 ( 0.01%) 1872919 ( 0.01%) 703.05
ftp 36647 ( 0.21%) 3564332 ( 0.03%) 97.26
pop3 7159 ( 0.04%) 2668130 ( 0.02%) 372.70
imap 7747 ( 0.04%) 3166888 ( 0.02%) 408.79
telnet 395 ( 0.00%) 41027 ( 0.00%) 103.87
ssh 3554 ( 0.02%) 1117433 ( 0.01%) 314.42
dns 7809 ( 0.04%) 512689 ( 0.00%) 65.65
bgp 208 ( 0.00%) 72575 ( 0.00%) 348.92
napster 13 ( 0.00%) 828 ( 0.00%) 63.69
realaud 19 ( 0.00%) 9876 ( 0.00%) 519.79
rtsp 14772 ( 0.08%) 11169761 ( 0.08%) 756.14
icecast 35739 ( 0.20%) 26777088 ( 0.20%) 749.24
other 2645976 ( 14.80%) 2012830942 ( 14.82%) 760.71
udp 3543768 ( 19.83%) 1464440963 ( 10.78%) 413.24
dns 888501 ( 4.97%) 132056572 ( 0.97%) 148.63
realaud 12541 ( 0.07%) 6721542 ( 0.05%) 535.97
halflif 15 ( 0.00%) 2478 ( 0.00%) 165.20
starcra 59 ( 0.00%) 11910 ( 0.00%) 201.86
everque 51 ( 0.00%) 9430 ( 0.00%) 184.90
unreal 44 ( 0.00%) 8958 ( 0.00%) 203.59
quake 32 ( 0.00%) 3691 ( 0.00%) 115.34
cuseeme 6 ( 0.00%) 948 ( 0.00%) 158.00
other 2642374 ( 14.78%) 1325598499 ( 9.76%) 501.67
icmp 376185 ( 2.10%) 33215648 ( 0.24%) 88.30
ipip 323 ( 0.00%) 38934 ( 0.00%) 120.54
ip6 834 ( 0.00%) 100534 ( 0.00%) 120.54
other 138334 ( 0.77%) 23409863 ( 0.17%) 169.23
frag 4087 ( 0.02%) 3225204 ( 0.02%) 789.14
ip6 133345 ( 0.75%) 11429803 ( 0.08%) 85.72
tcp6 119192 ( 0.67%) 8996284 ( 0.07%) 75.48
http(s) 187 ( 0.00%) 36966 ( 0.00%) 197.68
http(c) 110242 ( 0.62%) 8170886 ( 0.06%) 74.12
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 178 ( 0.00%) 67097 ( 0.00%) 376.95
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 8514 ( 0.05%) 714155 ( 0.01%) 83.88
udp6 9719 ( 0.05%) 1907542 ( 0.01%) 196.27
dns 9633 ( 0.05%) 1896239 ( 0.01%) 196.85
other 86 ( 0.00%) 11303 ( 0.00%) 131.43
icmp6 4403 ( 0.02%) 521761 ( 0.00%) 118.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200802121400.dump.gz (428.64 MB)