Traffic Trace Info
DumpFile: 200802211400.dump
FileSize: 1104.10MB
Id: 200802211400
StartTime: Thu Feb 21 14:00:00 2008
EndTime: Thu Feb 21 14:15:00 2008
TotalTime: 900.36 seconds
TotalCapSize: 862.67MB CapLen: 96 bytes
# of packets: 15821386 (9257.02MB)
AvgRate: 86.25Mbps stddev:16.42M
IP flow (unique src/dst pair) Information
# of flows: 672854 (avg. 23.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.6% 1.2% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 380613
Top 10 bandwidth usage (bytes/total in %):
5.9% 5.1% 4.5% 4.3% 4.1% 3.6% 3.2% 2.7% 2.7% 2.6%
# of IPv6 addresses: 597
Top 10 bandwidth usage (bytes/total in %):
16.0% 12.9% 12.2% 8.2% 6.1% 6.1% 5.7% 4.7% 4.5% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802211400.pktlen.png)
detailed numbers
[ 32- 63]: 3614799
[ 64- 127]: 4003264
[ 128- 255]: 1445717
[ 256- 511]: 611364
[ 512- 1023]: 482695
[ 1024- 2047]: 5663547
Protocol Breakdown
![[protocol breakdown chart]](200802211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15821386 (100.00%) 9706690269 (100.00%) 613.52
ip 15799437 ( 99.86%) 9703023092 ( 99.96%) 614.14
tcp 13205785 ( 83.47%) 9229444589 ( 95.08%) 698.89
http(s) 4573079 ( 28.90%) 5771974829 ( 59.46%) 1262.16
http(c) 3092573 ( 19.55%) 603872330 ( 6.22%) 195.27
squid 587382 ( 3.71%) 292215657 ( 3.01%) 497.49
smtp 548352 ( 3.47%) 98222809 ( 1.01%) 179.12
ftp 97704 ( 0.62%) 20963049 ( 0.22%) 214.56
pop3 5760 ( 0.04%) 2615818 ( 0.03%) 454.14
imap 7211 ( 0.05%) 2709873 ( 0.03%) 375.80
telnet 23 ( 0.00%) 1380 ( 0.00%) 60.00
ssh 571281 ( 3.61%) 62866338 ( 0.65%) 110.04
dns 2377 ( 0.02%) 177961 ( 0.00%) 74.87
bgp 196 ( 0.00%) 49181 ( 0.00%) 250.92
napster 10 ( 0.00%) 696 ( 0.00%) 69.60
realaud 1929 ( 0.01%) 982741 ( 0.01%) 509.46
rtsp 15089 ( 0.10%) 14155629 ( 0.15%) 938.14
icecast 26331 ( 0.17%) 24422931 ( 0.25%) 927.54
other 3676480 ( 23.24%) 2334212887 ( 24.05%) 634.90
udp 2131080 ( 13.47%) 390903648 ( 4.03%) 183.43
dns 894006 ( 5.65%) 135067804 ( 1.39%) 151.08
realaud 17 ( 0.00%) 2401 ( 0.00%) 141.24
halflif 22 ( 0.00%) 3448 ( 0.00%) 156.73
starcra 41 ( 0.00%) 8460 ( 0.00%) 206.34
everque 55 ( 0.00%) 9343 ( 0.00%) 169.87
unreal 10 ( 0.00%) 1419 ( 0.00%) 141.90
quake 13 ( 0.00%) 1470 ( 0.00%) 113.08
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1236885 ( 7.82%) 255796326 ( 2.64%) 206.81
icmp 351323 ( 2.22%) 35826828 ( 0.37%) 101.98
ipip 354 ( 0.00%) 43728 ( 0.00%) 123.53
ip6 921 ( 0.01%) 117462 ( 0.00%) 127.54
other 109974 ( 0.70%) 46686837 ( 0.48%) 424.53
frag 2622 ( 0.02%) 2199673 ( 0.02%) 838.93
ip6 21949 ( 0.14%) 3667177 ( 0.04%) 167.08
tcp6 5051 ( 0.03%) 669095 ( 0.01%) 132.47
http(s) 85 ( 0.00%) 103927 ( 0.00%) 1222.67
http(c) 1969 ( 0.01%) 191758 ( 0.00%) 97.39
smtp 143 ( 0.00%) 62702 ( 0.00%) 438.48
bgp 67 ( 0.00%) 7226 ( 0.00%) 107.85
other 2787 ( 0.02%) 303482 ( 0.00%) 108.89
udp6 12150 ( 0.08%) 2414760 ( 0.02%) 198.75
dns 12129 ( 0.08%) 2412450 ( 0.02%) 198.90
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 4718 ( 0.03%) 579242 ( 0.01%) 122.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802211400.dump.gz (405.27 MB)