Traffic Trace Info
DumpFile: 200802181400.dump
FileSize: 1639.82MB
Id: 200802181400
StartTime: Mon Feb 18 14:00:00 2008
EndTime: Mon Feb 18 14:15:01 2008
TotalTime: 900.36 seconds
TotalCapSize: 1296.42MB CapLen: 96 bytes
# of packets: 22504226 (14562.02MB)
AvgRate: 135.67Mbps stddev:28.99M
IP flow (unique src/dst pair) Information
# of flows: 626226 (avg. 35.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 7.7% 2.8% 2.4% 1.4% 1.3% 1.2% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 341372
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.1% 8.1% 7.9% 3.0% 2.8% 2.8% 2.5% 2.4% 2.4%
# of IPv6 addresses: 689
Top 10 bandwidth usage (bytes/total in %):
67.4% 66.8% 4.7% 4.7% 3.3% 2.6% 2.4% 2.2% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802181400.pktlen.png)
detailed numbers
[ 32- 63]: 3966352
[ 64- 127]: 6932204
[ 128- 255]: 1033258
[ 256- 511]: 696412
[ 512- 1023]: 607982
[ 1024- 2047]: 9268018
Protocol Breakdown
![[protocol breakdown chart]](200802181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22504226 (100.00%) 15269386419 (100.00%) 678.51
ip 22367730 ( 99.39%) 15256457290 ( 99.92%) 682.07
tcp 20230804 ( 89.90%) 14837966176 ( 97.17%) 733.43
http(s) 8369014 ( 37.19%) 11319560584 ( 74.13%) 1352.56
http(c) 4050947 ( 18.00%) 452368522 ( 2.96%) 111.67
squid 931535 ( 4.14%) 463621893 ( 3.04%) 497.70
smtp 586672 ( 2.61%) 107466834 ( 0.70%) 183.18
nntp 2531 ( 0.01%) 1454109 ( 0.01%) 574.52
ftp 44990 ( 0.20%) 3553079 ( 0.02%) 78.97
pop3 5400 ( 0.02%) 2772399 ( 0.02%) 513.41
imap 11362 ( 0.05%) 6636806 ( 0.04%) 584.12
telnet 852 ( 0.00%) 125182 ( 0.00%) 146.93
ssh 1291381 ( 5.74%) 191061830 ( 1.25%) 147.95
dns 2737 ( 0.01%) 202841 ( 0.00%) 74.11
bgp 174 ( 0.00%) 40027 ( 0.00%) 230.04
napster 103 ( 0.00%) 11697 ( 0.00%) 113.56
realaud 2339 ( 0.01%) 145692 ( 0.00%) 62.29
rtsp 25440 ( 0.11%) 15660031 ( 0.10%) 615.57
icecast 16753 ( 0.07%) 9056591 ( 0.06%) 540.60
hotline 18 ( 0.00%) 2078 ( 0.00%) 115.44
other 4888552 ( 21.72%) 2264225741 ( 14.83%) 463.17
udp 1669403 ( 7.42%) 359849464 ( 2.36%) 215.56
dns 870414 ( 3.87%) 132270762 ( 0.87%) 151.96
realaud 19025 ( 0.08%) 10612523 ( 0.07%) 557.82
halflif 14 ( 0.00%) 2268 ( 0.00%) 162.00
starcra 46 ( 0.00%) 8683 ( 0.00%) 188.76
everque 33 ( 0.00%) 6593 ( 0.00%) 199.79
unreal 19 ( 0.00%) 4290 ( 0.00%) 225.79
quake 8 ( 0.00%) 1180 ( 0.00%) 147.50
cuseeme 3 ( 0.00%) 768 ( 0.00%) 256.00
other 779829 ( 3.47%) 216933662 ( 1.42%) 278.18
icmp 332857 ( 1.48%) 32253473 ( 0.21%) 96.90
ipip 332 ( 0.00%) 42209 ( 0.00%) 127.14
ip6 900 ( 0.00%) 109965 ( 0.00%) 122.18
other 133434 ( 0.59%) 26236003 ( 0.17%) 196.62
frag 1104 ( 0.00%) 906404 ( 0.01%) 821.02
ip6 136494 ( 0.61%) 12929009 ( 0.08%) 94.72
tcp6 120160 ( 0.53%) 10205537 ( 0.07%) 84.93
http(s) 730 ( 0.00%) 876066 ( 0.01%) 1200.09
http(c) 117020 ( 0.52%) 8724679 ( 0.06%) 74.56
smtp 810 ( 0.00%) 415447 ( 0.00%) 512.90
ftp 10 ( 0.00%) 1181 ( 0.00%) 118.10
ssh 700 ( 0.00%) 104005 ( 0.00%) 148.58
bgp 79 ( 0.00%) 9059 ( 0.00%) 114.67
other 811 ( 0.00%) 75100 ( 0.00%) 92.60
udp6 11799 ( 0.05%) 2196008 ( 0.01%) 186.12
dns 11777 ( 0.05%) 2193588 ( 0.01%) 186.26
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 4505 ( 0.02%) 523384 ( 0.00%) 116.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802181400.dump.gz (594.32 MB)