Traffic Trace Info
DumpFile: 200802271400.dump
FileSize: 1240.38MB
Id: 200802271400
StartTime: Wed Feb 27 14:00:00 2008
EndTime: Wed Feb 27 14:15:00 2008
TotalTime: 900.00 seconds
TotalCapSize: 973.42MB CapLen: 96 bytes
# of packets: 17495024 (11643.96MB)
AvgRate: 108.56Mbps stddev:28.24M
IP flow (unique src/dst pair) Information
# of flows: 647549 (avg. 27.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 2.2% 2.1% 2.1% 1.5% 1.3% 1.1% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 350759
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.5% 7.1% 5.7% 4.5% 3.4% 3.1% 2.9% 2.8% 2.2%
# of IPv6 addresses: 753
Top 10 bandwidth usage (bytes/total in %):
61.3% 60.5% 10.2% 5.3% 4.4% 4.3% 4.3% 1.9% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802271400.pktlen.png)
detailed numbers
[ 32- 63]: 4508676
[ 64- 127]: 3865545
[ 128- 255]: 756205
[ 256- 511]: 518780
[ 512- 1023]: 350551
[ 1024- 2047]: 7495267
Protocol Breakdown
![[protocol breakdown chart]](200802271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17495024 (100.00%) 12209575121 (100.00%) 697.89
ip 17353490 ( 99.19%) 12196405042 ( 99.89%) 702.82
tcp 15355972 ( 87.77%) 11822907115 ( 96.83%) 769.92
http(s) 6757729 ( 38.63%) 8920186685 ( 73.06%) 1320.00
http(c) 4063264 ( 23.23%) 498395586 ( 4.08%) 122.66
squid 697928 ( 3.99%) 501850210 ( 4.11%) 719.06
smtp 596513 ( 3.41%) 129729328 ( 1.06%) 217.48
ftp 86469 ( 0.49%) 7910933 ( 0.06%) 91.49
pop3 7858 ( 0.04%) 3331177 ( 0.03%) 423.92
imap 9679 ( 0.06%) 3304183 ( 0.03%) 341.38
telnet 383 ( 0.00%) 29012 ( 0.00%) 75.75
ssh 6120 ( 0.03%) 2847456 ( 0.02%) 465.27
dns 1984 ( 0.01%) 157301 ( 0.00%) 79.28
bgp 201 ( 0.00%) 61439 ( 0.00%) 305.67
rtsp 138903 ( 0.79%) 190524787 ( 1.56%) 1371.64
icecast 352 ( 0.00%) 45142 ( 0.00%) 128.24
hotline 5 ( 0.00%) 318 ( 0.00%) 63.60
other 2988582 ( 17.08%) 1564533438 ( 12.81%) 523.50
udp 1623152 ( 9.28%) 326976739 ( 2.68%) 201.45
dns 947277 ( 5.41%) 140081913 ( 1.15%) 147.88
realaud 25 ( 0.00%) 3352 ( 0.00%) 134.08
halflif 9 ( 0.00%) 2324 ( 0.00%) 258.22
starcra 32 ( 0.00%) 5780 ( 0.00%) 180.62
everque 55 ( 0.00%) 8392 ( 0.00%) 152.58
unreal 32 ( 0.00%) 3748 ( 0.00%) 117.12
quake 16 ( 0.00%) 1780 ( 0.00%) 111.25
cuseeme 4 ( 0.00%) 601 ( 0.00%) 150.25
other 675263 ( 3.86%) 186818916 ( 1.53%) 276.66
icmp 292904 ( 1.67%) 29683002 ( 0.24%) 101.34
ipip 330 ( 0.00%) 39630 ( 0.00%) 120.09
ip6 874 ( 0.00%) 107175 ( 0.00%) 122.63
other 80258 ( 0.46%) 16691381 ( 0.14%) 207.97
frag 2843 ( 0.02%) 2005920 ( 0.02%) 705.56
ip6 141534 ( 0.81%) 13170079 ( 0.11%) 93.05
tcp6 116253 ( 0.66%) 9064926 ( 0.07%) 77.98
http(s) 283 ( 0.00%) 240489 ( 0.00%) 849.78
http(c) 112788 ( 0.64%) 8458971 ( 0.07%) 75.00
smtp 213 ( 0.00%) 58075 ( 0.00%) 272.65
ssh 15 ( 0.00%) 1850 ( 0.00%) 123.33
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 79 ( 0.00%) 8907 ( 0.00%) 112.75
other 2868 ( 0.02%) 295999 ( 0.00%) 103.21
udp6 15057 ( 0.09%) 2854175 ( 0.02%) 189.56
dns 15026 ( 0.09%) 2850765 ( 0.02%) 189.72
other 31 ( 0.00%) 3410 ( 0.00%) 110.00
icmp6 10190 ( 0.06%) 1244336 ( 0.01%) 122.11
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3 ( 0.00%) 2426 ( 0.00%) 808.67
tcpdump file: 200802271400.dump.gz (429.44 MB)