Traffic Trace Info
DumpFile: 200802221400.dump
FileSize: 1231.27MB
Id: 200802221400
StartTime: Fri Feb 22 14:00:00 2008
EndTime: Fri Feb 22 14:15:00 2008
TotalTime: 899.93 seconds
TotalCapSize: 967.53MB CapLen: 96 bytes
# of packets: 17284236 (13117.76MB)
AvgRate: 122.27Mbps stddev:44.43M
IP flow (unique src/dst pair) Information
# of flows: 763755 (avg. 22.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 6.8% 3.0% 2.6% 2.1% 1.8% 1.8% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 446099
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.9% 7.5% 6.8% 5.6% 3.0% 3.0% 3.0% 2.9% 2.8%
# of IPv6 addresses: 997
Top 10 bandwidth usage (bytes/total in %):
14.7% 8.3% 7.4% 6.1% 6.1% 6.0% 5.9% 4.6% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802221400.pktlen.png)
detailed numbers
[ 32- 63]: 3226444
[ 64- 127]: 3818306
[ 128- 255]: 774738
[ 256- 511]: 536152
[ 512- 1023]: 448561
[ 1024- 2047]: 8480035
Protocol Breakdown
![[protocol breakdown chart]](200802221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17284236 (100.00%) 13754964558 (100.00%) 795.81
ip 17252782 ( 99.82%) 13749434472 ( 99.96%) 796.94
tcp 14912456 ( 86.28%) 13321674110 ( 96.85%) 893.33
http(s) 7728002 ( 44.71%) 10518211847 ( 76.47%) 1361.05
http(c) 3053083 ( 17.66%) 370201969 ( 2.69%) 121.26
squid 536772 ( 3.11%) 318662140 ( 2.32%) 593.66
smtp 578542 ( 3.35%) 97143404 ( 0.71%) 167.91
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 227361 ( 1.32%) 104778349 ( 0.76%) 460.85
pop3 5860 ( 0.03%) 2560662 ( 0.02%) 436.97
imap 6093 ( 0.04%) 1347116 ( 0.01%) 221.09
telnet 859 ( 0.00%) 57662 ( 0.00%) 67.13
ssh 6283 ( 0.04%) 1288367 ( 0.01%) 205.06
dns 2386 ( 0.01%) 181658 ( 0.00%) 76.13
bgp 195 ( 0.00%) 50503 ( 0.00%) 258.99
napster 18 ( 0.00%) 2373 ( 0.00%) 131.83
realaud 1765 ( 0.01%) 916500 ( 0.01%) 519.26
rtsp 364996 ( 2.11%) 484546773 ( 3.52%) 1327.54
icecast 252 ( 0.00%) 26116 ( 0.00%) 103.63
hotline 22 ( 0.00%) 2710 ( 0.00%) 123.18
other 2399962 ( 13.89%) 1421695661 ( 10.34%) 592.38
udp 1876685 ( 10.86%) 372745814 ( 2.71%) 198.62
dns 906989 ( 5.25%) 135606358 ( 0.99%) 149.51
realaud 11041 ( 0.06%) 7905562 ( 0.06%) 716.02
halflif 15 ( 0.00%) 2447 ( 0.00%) 163.13
starcra 63 ( 0.00%) 11979 ( 0.00%) 190.14
everque 58 ( 0.00%) 10044 ( 0.00%) 173.17
unreal 32 ( 0.00%) 4389 ( 0.00%) 137.16
quake 17 ( 0.00%) 2749 ( 0.00%) 161.71
cuseeme 7 ( 0.00%) 942 ( 0.00%) 134.57
other 958419 ( 5.55%) 229190272 ( 1.67%) 239.13
icmp 357192 ( 2.07%) 35726223 ( 0.26%) 100.02
ipip 339 ( 0.00%) 41862 ( 0.00%) 123.49
ipsec 205 ( 0.00%) 40694 ( 0.00%) 198.51
ip6 863 ( 0.00%) 105879 ( 0.00%) 122.69
other 105042 ( 0.61%) 19099890 ( 0.14%) 181.83
frag 1680 ( 0.01%) 1366209 ( 0.01%) 813.22
ip6 31454 ( 0.18%) 5530086 ( 0.04%) 175.82
tcp6 6192 ( 0.04%) 1214232 ( 0.01%) 196.10
http(s) 637 ( 0.00%) 564609 ( 0.00%) 886.36
http(c) 3442 ( 0.02%) 349178 ( 0.00%) 101.45
smtp 198 ( 0.00%) 61106 ( 0.00%) 308.62
bgp 149 ( 0.00%) 27085 ( 0.00%) 181.78
other 1766 ( 0.01%) 212254 ( 0.00%) 120.19
udp6 18377 ( 0.11%) 3462332 ( 0.03%) 188.41
dns 17542 ( 0.10%) 3189038 ( 0.02%) 181.79
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
other 834 ( 0.00%) 273178 ( 0.00%) 327.55
icmp6 6853 ( 0.04%) 847875 ( 0.01%) 123.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1567 ( 0.00%) 783.50
tcpdump file: 200802221400.dump.gz (418.94 MB)