Traffic Trace Info
DumpFile: 200802281400.dump
FileSize: 1599.64MB
Id: 200802281400
StartTime: Thu Feb 28 14:00:01 2008
EndTime: Thu Feb 28 14:15:01 2008
TotalTime: 899.94 seconds
TotalCapSize: 1237.15MB CapLen: 96 bytes
# of packets: 23755514 (13778.03MB)
AvgRate: 128.43Mbps stddev:14.96M
IP flow (unique src/dst pair) Information
# of flows: 630443 (avg. 37.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.2% 1.5% 1.3% 1.3% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 360008
Top 10 bandwidth usage (bytes/total in %):
17.3% 14.2% 14.2% 4.8% 4.6% 3.6% 3.2% 3.1% 2.7% 2.0%
# of IPv6 addresses: 758
Top 10 bandwidth usage (bytes/total in %):
31.3% 12.1% 8.8% 6.2% 5.2% 5.1% 4.7% 4.3% 4.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802281400.pktlen.png)
detailed numbers
[ 32- 63]: 3825438
[ 64- 127]: 5544210
[ 128- 255]: 661082
[ 256- 511]: 5716485
[ 512- 1023]: 483417
[ 1024- 2047]: 7524882
Protocol Breakdown
![[protocol breakdown chart]](200802281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23755514 (100.00%) 14447315713 (100.00%) 608.17
ip 23723406 ( 99.86%) 14442610907 ( 99.97%) 608.79
tcp 15613586 ( 65.73%) 11469553007 ( 79.39%) 734.59
http(s) 4457511 ( 18.76%) 5841465720 ( 40.43%) 1310.48
http(c) 4024242 ( 16.94%) 547321800 ( 3.79%) 136.01
squid 721521 ( 3.04%) 493064634 ( 3.41%) 683.37
smtp 629294 ( 2.65%) 151968116 ( 1.05%) 241.49
nntp 82 ( 0.00%) 5408 ( 0.00%) 65.95
ftp 140139 ( 0.59%) 82449666 ( 0.57%) 588.34
pop3 17972 ( 0.08%) 19789547 ( 0.14%) 1101.13
imap 7847 ( 0.03%) 4385660 ( 0.03%) 558.90
telnet 723 ( 0.00%) 49904 ( 0.00%) 69.02
ssh 44182 ( 0.19%) 7048998 ( 0.05%) 159.54
dns 2484 ( 0.01%) 189948 ( 0.00%) 76.47
bgp 228 ( 0.00%) 76305 ( 0.00%) 334.67
napster 39 ( 0.00%) 3631 ( 0.00%) 93.10
realaud 13293 ( 0.06%) 14413580 ( 0.10%) 1084.30
rtsp 143828 ( 0.61%) 187841229 ( 1.30%) 1306.01
icecast 39085 ( 0.16%) 27718975 ( 0.19%) 709.20
hotline 207 ( 0.00%) 13670 ( 0.00%) 66.04
other 5370907 ( 22.61%) 4091746096 ( 28.32%) 761.84
udp 7571833 ( 31.87%) 2912979673 ( 20.16%) 384.71
dns 908295 ( 3.82%) 133629262 ( 0.92%) 147.12
realaud 52 ( 0.00%) 4870 ( 0.00%) 93.65
halflif 5 ( 0.00%) 391 ( 0.00%) 78.20
starcra 15 ( 0.00%) 3558 ( 0.00%) 237.20
everque 68 ( 0.00%) 9221 ( 0.00%) 135.60
unreal 19 ( 0.00%) 3417 ( 0.00%) 179.84
quake 23 ( 0.00%) 4154 ( 0.00%) 180.61
cuseeme 2 ( 0.00%) 166 ( 0.00%) 83.00
other 6661976 ( 28.04%) 2779170722 ( 19.24%) 417.17
icmp 383546 ( 1.61%) 36327361 ( 0.25%) 94.71
ipip 375 ( 0.00%) 46634 ( 0.00%) 124.36
ip6 850 ( 0.00%) 104061 ( 0.00%) 122.42
other 153216 ( 0.64%) 23600171 ( 0.16%) 154.03
frag 9082 ( 0.04%) 7071114 ( 0.05%) 778.59
ip6 32108 ( 0.14%) 4704806 ( 0.03%) 146.53
tcp6 8907 ( 0.04%) 1033987 ( 0.01%) 116.09
http(s) 260 ( 0.00%) 127893 ( 0.00%) 491.90
http(c) 5982 ( 0.03%) 560299 ( 0.00%) 93.66
smtp 175 ( 0.00%) 50584 ( 0.00%) 289.05
ftp 69 ( 0.00%) 6435 ( 0.00%) 93.26
bgp 81 ( 0.00%) 9456 ( 0.00%) 116.74
other 2340 ( 0.01%) 279320 ( 0.00%) 119.37
udp6 11943 ( 0.05%) 2272139 ( 0.02%) 190.25
dns 11904 ( 0.05%) 2253641 ( 0.02%) 189.32
other 39 ( 0.00%) 18498 ( 0.00%) 474.31
icmp6 11228 ( 0.05%) 1394600 ( 0.01%) 124.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802281400.dump.gz (533.43 MB)