Traffic Trace Info
DumpFile: 200802151400.dump
FileSize: 1466.47MB
Id: 200802151400
StartTime: Fri Feb 15 14:00:00 2008
EndTime: Fri Feb 15 14:15:01 2008
TotalTime: 900.45 seconds
TotalCapSize: 1153.93MB CapLen: 96 bytes
# of packets: 20481861 (13773.12MB)
AvgRate: 128.31Mbps stddev:28.83M
IP flow (unique src/dst pair) Information
# of flows: 660378 (avg. 31.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.9% 2.1% 1.8% 1.6% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 391335
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.1% 5.8% 5.7% 4.2% 3.6% 3.3% 3.3% 3.0% 3.0%
# of IPv6 addresses: 915
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.9% 8.9% 8.4% 8.0% 8.0% 6.5% 6.5% 6.1% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802151400.pktlen.png)
detailed numbers
[ 32- 63]: 3917914
[ 64- 127]: 5589706
[ 128- 255]: 892745
[ 256- 511]: 775796
[ 512- 1023]: 526185
[ 1024- 2047]: 8779515
Protocol Breakdown
![[protocol breakdown chart]](200802151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20481861 (100.00%) 14442159925 (100.00%) 705.12
ip 20461290 ( 99.90%) 14438467214 ( 99.97%) 705.65
tcp 18219505 ( 88.95%) 13815171653 ( 95.66%) 758.26
http(s) 7196713 ( 35.14%) 9404248235 ( 65.12%) 1306.74
http(c) 3710686 ( 18.12%) 634197652 ( 4.39%) 170.91
squid 955266 ( 4.66%) 504899915 ( 3.50%) 528.54
smtp 554945 ( 2.71%) 104158900 ( 0.72%) 187.69
nntp 2670 ( 0.01%) 1697152 ( 0.01%) 635.64
ftp 80304 ( 0.39%) 57608762 ( 0.40%) 717.38
pop3 10429 ( 0.05%) 8112048 ( 0.06%) 777.84
imap 44625 ( 0.22%) 5427617 ( 0.04%) 121.63
telnet 403 ( 0.00%) 26022 ( 0.00%) 64.57
ssh 1701378 ( 8.31%) 256176738 ( 1.77%) 150.57
dns 2630 ( 0.01%) 219926 ( 0.00%) 83.62
bgp 197 ( 0.00%) 53845 ( 0.00%) 273.32
napster 16 ( 0.00%) 1632 ( 0.00%) 102.00
realaud 40 ( 0.00%) 5293 ( 0.00%) 132.32
rtsp 63009 ( 0.31%) 57750954 ( 0.40%) 916.55
icecast 36345 ( 0.18%) 31761698 ( 0.22%) 873.89
hotline 32 ( 0.00%) 5191 ( 0.00%) 162.22
other 3859791 ( 18.84%) 2748814993 ( 19.03%) 712.17
udp 1829191 ( 8.93%) 579725440 ( 4.01%) 316.93
dns 809270 ( 3.95%) 146803536 ( 1.02%) 181.40
realaud 162 ( 0.00%) 18216 ( 0.00%) 112.44
halflif 10 ( 0.00%) 1641 ( 0.00%) 164.10
starcra 31 ( 0.00%) 5723 ( 0.00%) 184.61
everque 22 ( 0.00%) 3186 ( 0.00%) 144.82
unreal 10 ( 0.00%) 1123 ( 0.00%) 112.30
quake 47 ( 0.00%) 10383 ( 0.00%) 220.91
cuseeme 6 ( 0.00%) 793 ( 0.00%) 132.17
other 1019567 ( 4.98%) 432840370 ( 3.00%) 424.53
icmp 339121 ( 1.66%) 33488106 ( 0.23%) 98.75
ipip 326 ( 0.00%) 38629 ( 0.00%) 118.49
ipsec 944 ( 0.00%) 187192 ( 0.00%) 198.30
ip6 840 ( 0.00%) 101648 ( 0.00%) 121.01
other 71363 ( 0.35%) 9754546 ( 0.07%) 136.69
frag 2121 ( 0.01%) 1763441 ( 0.01%) 831.42
ip6 20571 ( 0.10%) 3692711 ( 0.03%) 179.51
tcp6 3448 ( 0.02%) 878559 ( 0.01%) 254.80
http(s) 587 ( 0.00%) 500870 ( 0.00%) 853.27
http(c) 159 ( 0.00%) 17294 ( 0.00%) 108.77
squid 6 ( 0.00%) 444 ( 0.00%) 74.00
smtp 333 ( 0.00%) 130715 ( 0.00%) 392.54
ftp 33 ( 0.00%) 2571 ( 0.00%) 77.91
ssh 58 ( 0.00%) 9788 ( 0.00%) 168.76
bgp 66 ( 0.00%) 7045 ( 0.00%) 106.74
icecast 3 ( 0.00%) 222 ( 0.00%) 74.00
other 2203 ( 0.01%) 209610 ( 0.00%) 95.15
udp6 12302 ( 0.06%) 2277407 ( 0.02%) 185.12
dns 11889 ( 0.06%) 2189220 ( 0.02%) 184.14
other 413 ( 0.00%) 88187 ( 0.00%) 213.53
icmp6 4789 ( 0.02%) 530773 ( 0.00%) 110.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1892 ( 0.00%) 946.00
tcpdump file: 200802151400.dump.gz (529.30 MB)