Traffic Trace Info
DumpFile: 200803041400.dump
FileSize: 1166.21MB
Id: 200803041400
StartTime: Tue Mar 4 14:00:01 2008
EndTime: Tue Mar 4 14:15:00 2008
TotalTime: 899.13 seconds
TotalCapSize: 917.47MB CapLen: 96 bytes
# of packets: 16300888 (9432.30MB)
AvgRate: 88.01Mbps stddev:13.61M
IP flow (unique src/dst pair) Information
# of flows: 677003 (avg. 24.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.9% 1.7% 1.7% 1.5% 1.3% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 383888
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.5% 6.0% 4.1% 3.8% 3.5% 2.5% 2.5% 2.4% 2.1%
# of IPv6 addresses: 794
Top 10 bandwidth usage (bytes/total in %):
14.6% 9.2% 7.8% 7.4% 6.8% 5.2% 5.0% 4.9% 4.9% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803041400.pktlen.png)
detailed numbers
[ 32- 63]: 3255157
[ 64- 127]: 5154991
[ 128- 255]: 1043245
[ 256- 511]: 522249
[ 512- 1023]: 519441
[ 1024- 2047]: 5805805
Protocol Breakdown
![[protocol breakdown chart]](200803041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16300888 (100.00%) 9890480313 (100.00%) 606.74
ip 16274474 ( 99.84%) 9886161312 ( 99.96%) 607.46
tcp 13994637 ( 85.85%) 9357791137 ( 94.61%) 668.67
http(s) 4405342 ( 27.03%) 5737823101 ( 58.01%) 1302.47
http(c) 3222793 ( 19.77%) 441660920 ( 4.47%) 137.04
squid 648552 ( 3.98%) 371324590 ( 3.75%) 572.54
smtp 657680 ( 4.03%) 125251782 ( 1.27%) 190.44
nntp 190 ( 0.00%) 12084 ( 0.00%) 63.60
ftp 79154 ( 0.49%) 7285878 ( 0.07%) 92.05
pop3 8645 ( 0.05%) 4424715 ( 0.04%) 511.82
imap 9534 ( 0.06%) 4379543 ( 0.04%) 459.36
telnet 1202 ( 0.01%) 88674 ( 0.00%) 73.77
ssh 1520985 ( 9.33%) 229371764 ( 2.32%) 150.80
dns 3531 ( 0.02%) 254753 ( 0.00%) 72.15
bgp 206 ( 0.00%) 67965 ( 0.00%) 329.93
napster 78 ( 0.00%) 17469 ( 0.00%) 223.96
realaud 26 ( 0.00%) 2884 ( 0.00%) 110.92
rtsp 113433 ( 0.70%) 133069222 ( 1.35%) 1173.11
icecast 9731 ( 0.06%) 7838196 ( 0.08%) 805.49
other 3313553 ( 20.33%) 2294917477 ( 23.20%) 692.59
udp 1841949 ( 11.30%) 475062659 ( 4.80%) 257.91
dns 908688 ( 5.57%) 134494270 ( 1.36%) 148.01
realaud 11723 ( 0.07%) 8503960 ( 0.09%) 725.41
halflif 8 ( 0.00%) 1318 ( 0.00%) 164.75
starcra 40 ( 0.00%) 6600 ( 0.00%) 165.00
everque 55 ( 0.00%) 9220 ( 0.00%) 167.64
unreal 38 ( 0.00%) 5747 ( 0.00%) 151.24
quake 10 ( 0.00%) 1592 ( 0.00%) 159.20
cuseeme 5 ( 0.00%) 694 ( 0.00%) 138.80
other 921336 ( 5.65%) 331994391 ( 3.36%) 360.34
icmp 274664 ( 1.68%) 28362722 ( 0.29%) 103.26
ipip 339 ( 0.00%) 40890 ( 0.00%) 120.62
ip6 653 ( 0.00%) 80963 ( 0.00%) 123.99
other 162232 ( 1.00%) 24822941 ( 0.25%) 153.01
frag 1707 ( 0.01%) 1503648 ( 0.02%) 880.87
ip6 26414 ( 0.16%) 4319001 ( 0.04%) 163.51
tcp6 10028 ( 0.06%) 1557884 ( 0.02%) 155.35
http(s) 365 ( 0.00%) 489509 ( 0.00%) 1341.12
http(c) 4259 ( 0.03%) 410497 ( 0.00%) 96.38
smtp 139 ( 0.00%) 34460 ( 0.00%) 247.91
pop3 34 ( 0.00%) 3134 ( 0.00%) 92.18
ssh 150 ( 0.00%) 105376 ( 0.00%) 702.51
bgp 66 ( 0.00%) 7046 ( 0.00%) 106.76
other 5015 ( 0.03%) 507862 ( 0.01%) 101.27
udp6 11462 ( 0.07%) 2117258 ( 0.02%) 184.72
dns 11412 ( 0.07%) 2111758 ( 0.02%) 185.05
other 50 ( 0.00%) 5500 ( 0.00%) 110.00
icmp6 4894 ( 0.03%) 639779 ( 0.01%) 130.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803041400.dump.gz (436.83 MB)