Traffic Trace Info
DumpFile: 200802291400.dump
FileSize: 1100.96MB
Id: 200802291400
StartTime: Fri Feb 29 14:00:00 2008
EndTime: Fri Feb 29 14:15:00 2008
TotalTime: 900.05 seconds
TotalCapSize: 856.77MB CapLen: 96 bytes
# of packets: 16002507 (10510.60MB)
AvgRate: 97.99Mbps stddev:35.83M
IP flow (unique src/dst pair) Information
# of flows: 657313 (avg. 24.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.4% 7.8% 2.4% 1.9% 1.7% 1.6% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 358532
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.6% 8.5% 7.9% 7.6% 5.2% 3.7% 3.1% 3.1% 2.6%
# of IPv6 addresses: 760
Top 10 bandwidth usage (bytes/total in %):
33.9% 32.1% 11.4% 6.6% 6.6% 5.8% 4.1% 3.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200802291400.pktlen.png)
detailed numbers
[ 32- 63]: 3332508
[ 64- 127]: 4172355
[ 128- 255]: 968338
[ 256- 511]: 543040
[ 512- 1023]: 277802
[ 1024- 2047]: 6708464
Protocol Breakdown
![[protocol breakdown chart]](200802291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16002507 (100.00%) 11021158748 (100.00%) 688.71
ip 15949336 ( 99.67%) 11014435894 ( 99.94%) 690.59
tcp 11811178 ( 73.81%) 8964220775 ( 81.34%) 758.96
http(s) 4139193 ( 25.87%) 5409506510 ( 49.08%) 1306.90
http(c) 2597541 ( 16.23%) 331807388 ( 3.01%) 127.74
squid 554141 ( 3.46%) 333858886 ( 3.03%) 602.48
smtp 584701 ( 3.65%) 104279416 ( 0.95%) 178.35
nntp 211 ( 0.00%) 14152 ( 0.00%) 67.07
ftp 178744 ( 1.12%) 126388625 ( 1.15%) 707.09
pop3 6415 ( 0.04%) 2657296 ( 0.02%) 414.23
imap 17566 ( 0.11%) 3255691 ( 0.03%) 185.34
telnet 195 ( 0.00%) 14608 ( 0.00%) 74.91
ssh 117736 ( 0.74%) 26604767 ( 0.24%) 225.97
dns 2185 ( 0.01%) 164169 ( 0.00%) 75.13
bgp 210 ( 0.00%) 61125 ( 0.00%) 291.07
napster 14 ( 0.00%) 1384 ( 0.00%) 98.86
rtsp 26180 ( 0.16%) 15859300 ( 0.14%) 605.78
icecast 8201 ( 0.05%) 3826373 ( 0.03%) 466.57
other 3577942 ( 22.36%) 2605920905 ( 23.64%) 728.33
udp 2178755 ( 13.62%) 551993472 ( 5.01%) 253.35
dns 1057323 ( 6.61%) 147869920 ( 1.34%) 139.85
realaud 39 ( 0.00%) 4061 ( 0.00%) 104.13
halflif 2 ( 0.00%) 401 ( 0.00%) 200.50
starcra 35 ( 0.00%) 6873 ( 0.00%) 196.37
everque 40 ( 0.00%) 6510 ( 0.00%) 162.75
unreal 82 ( 0.00%) 13977 ( 0.00%) 170.45
quake 7 ( 0.00%) 591 ( 0.00%) 84.43
cuseeme 5 ( 0.00%) 783 ( 0.00%) 156.60
other 1121006 ( 7.01%) 404052927 ( 3.67%) 360.44
icmp 313460 ( 1.96%) 31396689 ( 0.28%) 100.16
ipip 101486 ( 0.63%) 50625021 ( 0.46%) 498.84
ipsec 1363268 ( 8.52%) 1391341898 ( 12.62%) 1020.59
ip6 8377 ( 0.05%) 1780951 ( 0.02%) 212.60
other 172812 ( 1.08%) 23077088 ( 0.21%) 133.54
frag 3261 ( 0.02%) 2568099 ( 0.02%) 787.52
ip6 53171 ( 0.33%) 6722854 ( 0.06%) 126.44
tcp6 37196 ( 0.23%) 3867794 ( 0.04%) 103.98
http(s) 518 ( 0.00%) 478336 ( 0.00%) 923.43
http(c) 7357 ( 0.05%) 701634 ( 0.01%) 95.37
smtp 191 ( 0.00%) 35907 ( 0.00%) 187.99
dns 6 ( 0.00%) 715 ( 0.00%) 119.17
bgp 68 ( 0.00%) 7376 ( 0.00%) 108.47
other 29056 ( 0.18%) 2643826 ( 0.02%) 90.99
udp6 11211 ( 0.07%) 2218795 ( 0.02%) 197.91
dns 11154 ( 0.07%) 2212525 ( 0.02%) 198.36
other 57 ( 0.00%) 6270 ( 0.00%) 110.00
icmp6 4731 ( 0.03%) 631781 ( 0.01%) 133.54
ip6 3 ( 0.00%) 404 ( 0.00%) 134.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200802291400.dump.gz (382.04 MB)