Traffic Trace Info
DumpFile: 200802261400.dump
FileSize: 1128.29MB
Id: 200802261400
StartTime: Tue Feb 26 14:00:01 2008
EndTime: Tue Feb 26 14:15:00 2008
TotalTime: 899.36 seconds
TotalCapSize: 882.51MB CapLen: 96 bytes
# of packets: 16106400 (10605.19MB)
AvgRate: 98.93Mbps stddev:20.44M
IP flow (unique src/dst pair) Information
# of flows: 747050 (avg. 21.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.2% 1.8% 1.6% 1.5% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 395171
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.0% 5.3% 4.0% 3.8% 3.6% 3.5% 3.2% 3.0% 2.7%
# of IPv6 addresses: 1231
Top 10 bandwidth usage (bytes/total in %):
25.1% 12.3% 11.8% 8.9% 7.9% 6.1% 4.5% 4.5% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802261400.pktlen.png)
detailed numbers
[ 32- 63]: 3859383
[ 64- 127]: 3886406
[ 128- 255]: 743188
[ 256- 511]: 443034
[ 512- 1023]: 364392
[ 1024- 2047]: 6809997
Protocol Breakdown
![[protocol breakdown chart]](200802261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16106400 (100.00%) 11120350386 (100.00%) 690.43
ip 16074238 ( 99.80%) 11115092950 ( 99.95%) 691.48
tcp 13784250 ( 85.58%) 10656723405 ( 95.83%) 773.11
http(s) 5707786 ( 35.44%) 7501006727 ( 67.45%) 1314.17
http(c) 3874391 ( 24.05%) 570352378 ( 5.13%) 147.21
squid 390698 ( 2.43%) 233100787 ( 2.10%) 596.63
smtp 519383 ( 3.22%) 93449994 ( 0.84%) 179.93
ftp 27445 ( 0.17%) 2724507 ( 0.02%) 99.27
pop3 10779 ( 0.07%) 6577657 ( 0.06%) 610.23
imap 6119 ( 0.04%) 1854223 ( 0.02%) 303.03
telnet 436 ( 0.00%) 31213 ( 0.00%) 71.59
ssh 39704 ( 0.25%) 8377929 ( 0.08%) 211.01
dns 1779 ( 0.01%) 134148 ( 0.00%) 75.41
bgp 197 ( 0.00%) 66818 ( 0.00%) 339.18
napster 30 ( 0.00%) 2987 ( 0.00%) 99.57
realaud 34 ( 0.00%) 9317 ( 0.00%) 274.03
rtsp 36346 ( 0.23%) 49817649 ( 0.45%) 1370.65
icecast 16705 ( 0.10%) 15454925 ( 0.14%) 925.17
hotline 14 ( 0.00%) 2218 ( 0.00%) 158.43
other 3152403 ( 19.57%) 2173759868 ( 19.55%) 689.56
udp 1785996 ( 11.09%) 399238974 ( 3.59%) 223.54
dns 949021 ( 5.89%) 140882538 ( 1.27%) 148.45
realaud 14095 ( 0.09%) 9345961 ( 0.08%) 663.07
halflif 7 ( 0.00%) 873 ( 0.00%) 124.71
starcra 19 ( 0.00%) 3600 ( 0.00%) 189.47
everque 36 ( 0.00%) 5120 ( 0.00%) 142.22
unreal 41 ( 0.00%) 6830 ( 0.00%) 166.59
quake 14 ( 0.00%) 1370 ( 0.00%) 97.86
cuseeme 15 ( 0.00%) 1678 ( 0.00%) 111.87
other 822737 ( 5.11%) 248982392 ( 2.24%) 302.63
icmp 414028 ( 2.57%) 39020101 ( 0.35%) 94.25
ipip 342 ( 0.00%) 40908 ( 0.00%) 119.61
ip6 1066 ( 0.01%) 131337 ( 0.00%) 123.21
other 88556 ( 0.55%) 19938225 ( 0.18%) 225.15
frag 1196 ( 0.01%) 1006753 ( 0.01%) 841.77
ip6 32162 ( 0.20%) 5257436 ( 0.05%) 163.47
tcp6 7523 ( 0.05%) 1055028 ( 0.01%) 140.24
http(s) 280 ( 0.00%) 237302 ( 0.00%) 847.51
http(c) 5047 ( 0.03%) 485894 ( 0.00%) 96.27
smtp 229 ( 0.00%) 91180 ( 0.00%) 398.17
ssh 359 ( 0.00%) 43450 ( 0.00%) 121.03
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 96 ( 0.00%) 11569 ( 0.00%) 120.51
other 1505 ( 0.01%) 184998 ( 0.00%) 122.92
udp6 14476 ( 0.09%) 2936748 ( 0.03%) 202.87
dns 13383 ( 0.08%) 2540576 ( 0.02%) 189.84
unreal 2 ( 0.00%) 642 ( 0.00%) 321.00
other 1091 ( 0.01%) 395530 ( 0.00%) 362.54
icmp6 10130 ( 0.06%) 1261400 ( 0.01%) 124.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 180 ( 0.00%) 60.00
tcpdump file: 200802261400.dump.gz (397.95 MB)