Traffic Trace Info
DumpFile: 200802161400.dump
FileSize: 867.79MB
Id: 200802161400
StartTime: Sat Feb 16 14:00:00 2008
EndTime: Sat Feb 16 14:15:01 2008
TotalTime: 900.56 seconds
TotalCapSize: 678.62MB CapLen: 96 bytes
# of packets: 12396893 (7885.58MB)
AvgRate: 73.45Mbps stddev:23.16M
IP flow (unique src/dst pair) Information
# of flows: 564381 (avg. 21.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.4% 2.8% 2.5% 1.9% 1.8% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 319116
Top 10 bandwidth usage (bytes/total in %):
15.1% 10.1% 7.9% 7.2% 5.7% 4.6% 4.3% 3.5% 2.9% 2.7%
# of IPv6 addresses: 578
Top 10 bandwidth usage (bytes/total in %):
14.7% 10.7% 8.9% 8.9% 8.7% 8.1% 7.8% 5.5% 5.5% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802161400.pktlen.png)
detailed numbers
[ 32- 63]: 2243372
[ 64- 127]: 3816953
[ 128- 255]: 637532
[ 256- 511]: 370384
[ 512- 1023]: 282013
[ 1024- 2047]: 5046639
Protocol Breakdown
![[protocol breakdown chart]](200802161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12396893 (100.00%) 8268627054 (100.00%) 666.99
ip 12382327 ( 99.88%) 8266185536 ( 99.97%) 667.58
tcp 9781798 ( 78.91%) 7763426502 ( 93.89%) 793.66
http(s) 3720980 ( 30.02%) 4975223638 ( 60.17%) 1337.07
http(c) 1785060 ( 14.40%) 172053215 ( 2.08%) 96.39
squid 498101 ( 4.02%) 365152951 ( 4.42%) 733.09
smtp 628357 ( 5.07%) 104367964 ( 1.26%) 166.10
nntp 2481 ( 0.02%) 1182072 ( 0.01%) 476.45
ftp 47313 ( 0.38%) 11467116 ( 0.14%) 242.37
pop3 4681 ( 0.04%) 1783004 ( 0.02%) 380.90
imap 15297 ( 0.12%) 11017670 ( 0.13%) 720.25
telnet 228 ( 0.00%) 15344 ( 0.00%) 67.30
ssh 523514 ( 4.22%) 79698040 ( 0.96%) 152.24
dns 2400 ( 0.02%) 172128 ( 0.00%) 71.72
bgp 180 ( 0.00%) 45115 ( 0.00%) 250.64
napster 19 ( 0.00%) 2248 ( 0.00%) 118.32
realaud 366 ( 0.00%) 128995 ( 0.00%) 352.45
rtsp 3123 ( 0.03%) 316435 ( 0.00%) 101.32
icecast 1083 ( 0.01%) 285165 ( 0.00%) 263.31
other 2548602 ( 20.56%) 2040514622 ( 24.68%) 800.64
udp 2199088 ( 17.74%) 463370314 ( 5.60%) 210.71
dns 888780 ( 7.17%) 129585095 ( 1.57%) 145.80
realaud 17036 ( 0.14%) 9553678 ( 0.12%) 560.79
halflif 4 ( 0.00%) 305 ( 0.00%) 76.25
starcra 45 ( 0.00%) 8502 ( 0.00%) 188.93
everque 30 ( 0.00%) 5521 ( 0.00%) 184.03
unreal 27 ( 0.00%) 5135 ( 0.00%) 190.19
quake 9 ( 0.00%) 1034 ( 0.00%) 114.89
cuseeme 7 ( 0.00%) 514 ( 0.00%) 73.43
other 1293135 ( 10.43%) 324196073 ( 3.92%) 250.71
icmp 381689 ( 3.08%) 36634207 ( 0.44%) 95.98
ipip 333 ( 0.00%) 42166 ( 0.00%) 126.62
ip6 864 ( 0.01%) 105687 ( 0.00%) 122.32
other 18555 ( 0.15%) 2606660 ( 0.03%) 140.48
frag 6597 ( 0.05%) 5195955 ( 0.06%) 787.62
ip6 14564 ( 0.12%) 2441398 ( 0.03%) 167.63
tcp6 1200 ( 0.01%) 270135 ( 0.00%) 225.11
http(s) 81 ( 0.00%) 94170 ( 0.00%) 1162.59
http(c) 78 ( 0.00%) 8741 ( 0.00%) 112.06
smtp 254 ( 0.00%) 90608 ( 0.00%) 356.72
bgp 68 ( 0.00%) 7076 ( 0.00%) 104.06
other 719 ( 0.01%) 69540 ( 0.00%) 96.72
udp6 9359 ( 0.08%) 1694523 ( 0.02%) 181.06
dns 9337 ( 0.08%) 1692103 ( 0.02%) 181.23
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 3975 ( 0.03%) 472660 ( 0.01%) 118.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802161400.dump.gz (311.85 MB)