Traffic Trace Info
DumpFile: 200803011400.dump
FileSize: 956.51MB
Id: 200803011400
StartTime: Sat Mar 1 14:00:00 2008
EndTime: Sat Mar 1 14:15:01 2008
TotalTime: 900.42 seconds
TotalCapSize: 748.15MB CapLen: 96 bytes
# of packets: 13653988 (8474.95MB)
AvgRate: 78.95Mbps stddev:12.21M
IP flow (unique src/dst pair) Information
# of flows: 534418 (avg. 25.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.8% 2.3% 1.9% 1.6% 1.5% 1.4% 1.4% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 290398
Top 10 bandwidth usage (bytes/total in %):
9.7% 7.5% 5.9% 5.0% 4.8% 4.8% 4.5% 4.5% 4.5% 3.8%
# of IPv6 addresses: 745
Top 10 bandwidth usage (bytes/total in %):
21.7% 11.5% 9.6% 7.7% 5.3% 5.3% 5.0% 4.2% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803011400.pktlen.png)
detailed numbers
[ 32- 63]: 3220343
[ 64- 127]: 3647082
[ 128- 255]: 737154
[ 256- 511]: 367074
[ 512- 1023]: 278673
[ 1024- 2047]: 5403662
Protocol Breakdown
![[protocol breakdown chart]](200803011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13653988 (100.00%) 8886626203 (100.00%) 650.84
ip 13624871 ( 99.79%) 8882352580 ( 99.95%) 651.92
tcp 10940625 ( 80.13%) 8160546379 ( 91.83%) 745.89
http(s) 3497394 ( 25.61%) 4697523918 ( 52.86%) 1343.15
http(c) 2957083 ( 21.66%) 361757713 ( 4.07%) 122.34
squid 359271 ( 2.63%) 218850822 ( 2.46%) 609.15
smtp 596195 ( 4.37%) 91697413 ( 1.03%) 153.80
nntp 233 ( 0.00%) 15562 ( 0.00%) 66.79
ftp 59847 ( 0.44%) 20783856 ( 0.23%) 347.28
pop3 20563 ( 0.15%) 20191841 ( 0.23%) 981.95
imap 1963 ( 0.01%) 468460 ( 0.01%) 238.64
telnet 319 ( 0.00%) 20412 ( 0.00%) 63.99
ssh 5242 ( 0.04%) 1092850 ( 0.01%) 208.48
dns 1833 ( 0.01%) 273065 ( 0.00%) 148.97
bgp 368 ( 0.00%) 182991 ( 0.00%) 497.26
napster 2205 ( 0.02%) 668462 ( 0.01%) 303.16
realaud 4 ( 0.00%) 634 ( 0.00%) 158.50
rtsp 8728 ( 0.06%) 6625924 ( 0.07%) 759.16
icecast 5814 ( 0.04%) 5360229 ( 0.06%) 921.95
hotline 13 ( 0.00%) 1097 ( 0.00%) 84.38
other 3423549 ( 25.07%) 2735031070 ( 30.78%) 798.89
udp 2077320 ( 15.21%) 667247605 ( 7.51%) 321.21
dns 930014 ( 6.81%) 137796698 ( 1.55%) 148.17
realaud 2890 ( 0.02%) 1498804 ( 0.02%) 518.62
halflif 21 ( 0.00%) 2311 ( 0.00%) 110.05
starcra 29 ( 0.00%) 6597 ( 0.00%) 227.48
everque 35 ( 0.00%) 5850 ( 0.00%) 167.14
unreal 12 ( 0.00%) 2472 ( 0.00%) 206.00
quake 9 ( 0.00%) 711 ( 0.00%) 79.00
cuseeme 2 ( 0.00%) 455 ( 0.00%) 227.50
other 1144284 ( 8.38%) 527916428 ( 5.94%) 461.35
icmp 568235 ( 4.16%) 48934749 ( 0.55%) 86.12
ipip 339 ( 0.00%) 40306 ( 0.00%) 118.90
ip6 755 ( 0.01%) 92819 ( 0.00%) 122.94
other 37597 ( 0.28%) 5490722 ( 0.06%) 146.04
frag 6486 ( 0.05%) 5209782 ( 0.06%) 803.23
ip6 29117 ( 0.21%) 4273623 ( 0.05%) 146.77
tcp6 10220 ( 0.07%) 1207382 ( 0.01%) 118.14
http(c) 4471 ( 0.03%) 422965 ( 0.00%) 94.60
smtp 563 ( 0.00%) 264695 ( 0.00%) 470.15
pop3 17 ( 0.00%) 1931 ( 0.00%) 113.59
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 120 ( 0.00%) 20738 ( 0.00%) 172.82
other 5042 ( 0.04%) 496418 ( 0.01%) 98.46
udp6 11279 ( 0.08%) 2162740 ( 0.02%) 191.75
dns 11217 ( 0.08%) 2155920 ( 0.02%) 192.20
other 62 ( 0.00%) 6820 ( 0.00%) 110.00
icmp6 7583 ( 0.06%) 895402 ( 0.01%) 118.08
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3883 ( 0.00%) 970.75
tcpdump file: 200803011400.dump.gz (333.29 MB)