Traffic Trace Info
DumpFile: 200802201400.dump
FileSize: 1096.18MB
Id: 200802201400
StartTime: Wed Feb 20 14:00:01 2008
EndTime: Wed Feb 20 14:15:01 2008
TotalTime: 899.93 seconds
TotalCapSize: 860.23MB CapLen: 96 bytes
# of packets: 15462195 (10218.56MB)
AvgRate: 95.25Mbps stddev:24.15M
IP flow (unique src/dst pair) Information
# of flows: 698483 (avg. 22.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.9% 2.4% 1.6% 1.2% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 370404
Top 10 bandwidth usage (bytes/total in %):
4.3% 4.3% 4.0% 3.8% 3.5% 3.3% 3.1% 2.9% 2.9% 2.9%
# of IPv6 addresses: 760
Top 10 bandwidth usage (bytes/total in %):
23.6% 23.6% 8.5% 8.5% 7.3% 7.1% 5.5% 4.6% 4.6% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802201400.pktlen.png)
detailed numbers
[ 32- 63]: 3118646
[ 64- 127]: 3888899
[ 128- 255]: 1073788
[ 256- 511]: 509969
[ 512- 1023]: 374530
[ 1024- 2047]: 6496363
Protocol Breakdown
![[protocol breakdown chart]](200802201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15462195 (100.00%) 10714932301 (100.00%) 692.98
ip 15435233 ( 99.83%) 10709754955 ( 99.95%) 693.85
tcp 12985396 ( 83.98%) 10322584107 ( 96.34%) 794.94
http(s) 5975091 ( 38.64%) 7708990466 ( 71.95%) 1290.19
http(c) 3247759 ( 21.00%) 445105335 ( 4.15%) 137.05
squid 658546 ( 4.26%) 512378608 ( 4.78%) 778.05
smtp 599562 ( 3.88%) 127726865 ( 1.19%) 213.03
nntp 10 ( 0.00%) 1580 ( 0.00%) 158.00
ftp 108391 ( 0.70%) 42030848 ( 0.39%) 387.77
pop3 13237 ( 0.09%) 12237843 ( 0.11%) 924.52
imap 7544 ( 0.05%) 2564141 ( 0.02%) 339.89
telnet 670 ( 0.00%) 43093 ( 0.00%) 64.32
ssh 20217 ( 0.13%) 4162986 ( 0.04%) 205.92
dns 3042 ( 0.02%) 232877 ( 0.00%) 76.55
bgp 176 ( 0.00%) 44851 ( 0.00%) 254.84
napster 73 ( 0.00%) 5982 ( 0.00%) 81.95
realaud 1927 ( 0.01%) 933827 ( 0.01%) 484.60
rtsp 54519 ( 0.35%) 48979986 ( 0.46%) 898.40
icecast 23311 ( 0.15%) 15919465 ( 0.15%) 682.92
hotline 15 ( 0.00%) 3923 ( 0.00%) 261.53
other 2271306 ( 14.69%) 1401221431 ( 13.08%) 616.92
udp 1724272 ( 11.15%) 305069683 ( 2.85%) 176.93
dns 967092 ( 6.25%) 142866674 ( 1.33%) 147.73
realaud 1982 ( 0.01%) 126168 ( 0.00%) 63.66
halflif 18 ( 0.00%) 3494 ( 0.00%) 194.11
starcra 63 ( 0.00%) 11500 ( 0.00%) 182.54
everque 57 ( 0.00%) 9285 ( 0.00%) 162.89
unreal 86 ( 0.00%) 12377 ( 0.00%) 143.92
quake 24 ( 0.00%) 4418 ( 0.00%) 184.08
cuseeme 3 ( 0.00%) 233 ( 0.00%) 77.67
other 754911 ( 4.88%) 161995762 ( 1.51%) 214.59
icmp 476337 ( 3.08%) 43259446 ( 0.40%) 90.82
ipip 331 ( 0.00%) 40498 ( 0.00%) 122.35
ip6 832 ( 0.01%) 102280 ( 0.00%) 122.93
other 248065 ( 1.60%) 38698941 ( 0.36%) 156.00
frag 2364 ( 0.02%) 1928551 ( 0.02%) 815.80
ip6 26962 ( 0.17%) 5177346 ( 0.05%) 192.02
tcp6 11326 ( 0.07%) 2305648 ( 0.02%) 203.57
http(s) 18 ( 0.00%) 5418 ( 0.00%) 301.00
http(c) 5630 ( 0.04%) 515006 ( 0.00%) 91.48
smtp 501 ( 0.00%) 190875 ( 0.00%) 380.99
bgp 89 ( 0.00%) 11565 ( 0.00%) 129.94
other 5088 ( 0.03%) 1582784 ( 0.01%) 311.08
udp6 11184 ( 0.07%) 2325292 ( 0.02%) 207.91
dns 10936 ( 0.07%) 2278180 ( 0.02%) 208.32
other 248 ( 0.00%) 47112 ( 0.00%) 189.97
icmp6 4421 ( 0.03%) 542190 ( 0.01%) 122.64
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200802201400.dump.gz (385.66 MB)