Traffic Trace Info
DumpFile: 200802251400.dump
FileSize: 1248.94MB
Id: 200802251400
StartTime: Mon Feb 25 14:00:01 2008
EndTime: Mon Feb 25 14:15:00 2008
TotalTime: 899.15 seconds
TotalCapSize: 976.01MB CapLen: 96 bytes
# of packets: 17885888 (11963.05MB)
AvgRate: 111.57Mbps stddev:51.92M
IP flow (unique src/dst pair) Information
# of flows: 746855 (avg. 23.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.0% 4.6% 2.2% 2.0% 1.4% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 449311
Top 10 bandwidth usage (bytes/total in %):
19.2% 19.2% 6.2% 4.8% 4.7% 3.8% 2.9% 2.8% 2.8% 2.6%
# of IPv6 addresses: 619
Top 10 bandwidth usage (bytes/total in %):
56.0% 47.7% 10.4% 9.9% 9.5% 5.8% 3.1% 2.4% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802251400.pktlen.png)
detailed numbers
[ 32- 63]: 4442649
[ 64- 127]: 4028158
[ 128- 255]: 906890
[ 256- 511]: 464057
[ 512- 1023]: 416901
[ 1024- 2047]: 7627233
Protocol Breakdown
![[protocol breakdown chart]](200802251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17885888 (100.00%) 12544170849 (100.00%) 701.34
ip 17842026 ( 99.75%) 12532031959 ( 99.90%) 702.39
tcp 15491051 ( 86.61%) 12147463957 ( 96.84%) 784.16
http(s) 6814824 ( 38.10%) 9037361645 ( 72.04%) 1326.13
http(c) 4013711 ( 22.44%) 722467953 ( 5.76%) 180.00
squid 417413 ( 2.33%) 230200019 ( 1.84%) 551.49
smtp 549013 ( 3.07%) 105965540 ( 0.84%) 193.01
ftp 31444 ( 0.18%) 3292703 ( 0.03%) 104.72
pop3 8208 ( 0.05%) 4853570 ( 0.04%) 591.32
imap 4120 ( 0.02%) 942700 ( 0.01%) 228.81
telnet 437 ( 0.00%) 43839 ( 0.00%) 100.32
ssh 878753 ( 4.91%) 107646384 ( 0.86%) 122.50
dns 132857 ( 0.74%) 7998453 ( 0.06%) 60.20
bgp 199 ( 0.00%) 59248 ( 0.00%) 297.73
napster 65 ( 0.00%) 15666 ( 0.00%) 241.02
realaud 24 ( 0.00%) 3749 ( 0.00%) 156.21
rtsp 15828 ( 0.09%) 14258035 ( 0.11%) 900.81
icecast 1147 ( 0.01%) 849097 ( 0.01%) 740.28
hotline 9 ( 0.00%) 744 ( 0.00%) 82.67
other 2622995 ( 14.67%) 1911504276 ( 15.24%) 728.75
udp 1877477 ( 10.50%) 326928706 ( 2.61%) 174.13
dns 1062559 ( 5.94%) 152496734 ( 1.22%) 143.52
realaud 1023 ( 0.01%) 65521 ( 0.00%) 64.05
halflif 32 ( 0.00%) 4277 ( 0.00%) 133.66
starcra 21 ( 0.00%) 3412 ( 0.00%) 162.48
everque 42 ( 0.00%) 8161 ( 0.00%) 194.31
unreal 28 ( 0.00%) 3510 ( 0.00%) 125.36
quake 20 ( 0.00%) 2477 ( 0.00%) 123.85
cuseeme 1 ( 0.00%) 418 ( 0.00%) 418.00
other 813724 ( 4.55%) 174330593 ( 1.39%) 214.24
icmp 342914 ( 1.92%) 33203511 ( 0.26%) 96.83
ipip 354 ( 0.00%) 42612 ( 0.00%) 120.37
ip6 905 ( 0.01%) 112090 ( 0.00%) 123.86
other 129325 ( 0.72%) 24281083 ( 0.19%) 187.75
frag 1423 ( 0.01%) 1191523 ( 0.01%) 837.33
ip6 43862 ( 0.25%) 12138890 ( 0.10%) 276.75
tcp6 27621 ( 0.15%) 9095307 ( 0.07%) 329.29
http(s) 4796 ( 0.03%) 7023214 ( 0.06%) 1464.39
http(c) 19007 ( 0.11%) 1619144 ( 0.01%) 85.19
smtp 361 ( 0.00%) 167369 ( 0.00%) 463.63
ftp 15 ( 0.00%) 1407 ( 0.00%) 93.80
bgp 75 ( 0.00%) 8485 ( 0.00%) 113.13
other 3367 ( 0.02%) 275688 ( 0.00%) 81.88
udp6 11846 ( 0.07%) 2472682 ( 0.02%) 208.74
dns 11792 ( 0.07%) 2465951 ( 0.02%) 209.12
other 54 ( 0.00%) 6731 ( 0.00%) 124.65
icmp6 4348 ( 0.02%) 553338 ( 0.00%) 127.26
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 16 ( 0.00%) 13347 ( 0.00%) 834.19
tcpdump file: 200802251400.dump.gz (433.06 MB)