Traffic Trace Info
DumpFile: 200802141400.dump
FileSize: 1233.02MB
Id: 200802141400
StartTime: Thu Feb 14 14:00:00 2008
EndTime: Thu Feb 14 14:15:01 2008
TotalTime: 900.40 seconds
TotalCapSize: 968.50MB CapLen: 96 bytes
# of packets: 17335113 (12593.58MB)
AvgRate: 117.33Mbps stddev:26.70M
IP flow (unique src/dst pair) Information
# of flows: 550432 (avg. 31.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.6% 1.9% 1.5% 1.3% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 296512
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.7% 6.6% 5.0% 4.2% 3.6% 3.6% 3.3% 3.1% 3.0%
# of IPv6 addresses: 685
Top 10 bandwidth usage (bytes/total in %):
31.2% 31.2% 12.1% 12.1% 7.7% 6.5% 4.9% 4.7% 4.6% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802141400.pktlen.png)
detailed numbers
[ 32- 63]: 3314082
[ 64- 127]: 4289859
[ 128- 255]: 666886
[ 256- 511]: 486510
[ 512- 1023]: 464834
[ 1024- 2047]: 8112942
Protocol Breakdown
![[protocol breakdown chart]](200802141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17335113 (100.00%) 13205330975 (100.00%) 761.77
ip 17293069 ( 99.76%) 13199232158 ( 99.95%) 763.27
tcp 15192000 ( 87.64%) 12802110545 ( 96.95%) 842.69
http(s) 7457727 ( 43.02%) 10189720799 ( 77.16%) 1366.33
http(c) 3602898 ( 20.78%) 410462646 ( 3.11%) 113.93
squid 675620 ( 3.90%) 496563893 ( 3.76%) 734.98
smtp 607469 ( 3.50%) 116350371 ( 0.88%) 191.53
nntp 4570 ( 0.03%) 4325162 ( 0.03%) 946.42
ftp 147821 ( 0.85%) 42669759 ( 0.32%) 288.66
pop3 6399 ( 0.04%) 2892752 ( 0.02%) 452.06
imap 6204 ( 0.04%) 1334793 ( 0.01%) 215.15
telnet 141 ( 0.00%) 9210 ( 0.00%) 65.32
ssh 34030 ( 0.20%) 5110799 ( 0.04%) 150.19
dns 2397 ( 0.01%) 178675 ( 0.00%) 74.54
bgp 194 ( 0.00%) 60240 ( 0.00%) 310.52
napster 4 ( 0.00%) 252 ( 0.00%) 63.00
realaud 33 ( 0.00%) 4259 ( 0.00%) 129.06
rtsp 6395 ( 0.04%) 432548 ( 0.00%) 67.64
icecast 4882 ( 0.03%) 662306 ( 0.01%) 135.66
other 2635211 ( 15.20%) 1531331781 ( 11.60%) 581.10
udp 1675148 ( 9.66%) 347955794 ( 2.63%) 207.72
dns 857595 ( 4.95%) 129737011 ( 0.98%) 151.28
realaud 11 ( 0.00%) 1013 ( 0.00%) 92.09
halflif 4 ( 0.00%) 585 ( 0.00%) 146.25
starcra 43 ( 0.00%) 7730 ( 0.00%) 179.77
everque 50 ( 0.00%) 11972 ( 0.00%) 239.44
unreal 11 ( 0.00%) 1701 ( 0.00%) 154.64
quake 11 ( 0.00%) 899 ( 0.00%) 81.73
cuseeme 1 ( 0.00%) 143 ( 0.00%) 143.00
other 817401 ( 4.72%) 218173779 ( 1.65%) 266.91
icmp 349559 ( 2.02%) 34068964 ( 0.26%) 97.46
ipip 319 ( 0.00%) 42028 ( 0.00%) 131.75
ip6 842 ( 0.00%) 102489 ( 0.00%) 121.72
other 75201 ( 0.43%) 14952338 ( 0.11%) 198.83
frag 1494 ( 0.01%) 1211187 ( 0.01%) 810.70
ip6 42044 ( 0.24%) 6098817 ( 0.05%) 145.06
tcp6 26381 ( 0.15%) 3354668 ( 0.03%) 127.16
http(s) 697 ( 0.00%) 933613 ( 0.01%) 1339.47
http(c) 22395 ( 0.13%) 1943330 ( 0.01%) 86.78
smtp 485 ( 0.00%) 196658 ( 0.00%) 405.48
ftp 10 ( 0.00%) 1057 ( 0.00%) 105.70
bgp 69 ( 0.00%) 7463 ( 0.00%) 108.16
other 2725 ( 0.02%) 272547 ( 0.00%) 100.02
udp6 11426 ( 0.07%) 2230789 ( 0.02%) 195.24
dns 11404 ( 0.07%) 2228369 ( 0.02%) 195.40
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 4206 ( 0.02%) 509144 ( 0.00%) 121.05
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200802141400.dump.gz (416.80 MB)