Traffic Trace Info
DumpFile: 200803051400.dump
FileSize: 1062.19MB
Id: 200803051400
StartTime: Wed Mar 5 14:00:01 2008
EndTime: Wed Mar 5 14:15:01 2008
TotalTime: 900.02 seconds
TotalCapSize: 834.88MB CapLen: 96 bytes
# of packets: 14896300 (8988.92MB)
AvgRate: 83.79Mbps stddev:13.27M
IP flow (unique src/dst pair) Information
# of flows: 697751 (avg. 21.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.9% 1.6% 1.6% 1.5% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 383503
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.2% 5.1% 4.4% 4.0% 3.4% 3.3% 2.4% 2.4% 2.2%
# of IPv6 addresses: 838
Top 10 bandwidth usage (bytes/total in %):
35.1% 23.4% 10.1% 7.3% 6.9% 4.9% 4.3% 4.1% 4.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803051400.pktlen.png)
detailed numbers
[ 32- 63]: 3173800
[ 64- 127]: 4358961
[ 128- 255]: 844940
[ 256- 511]: 460193
[ 512- 1023]: 434133
[ 1024- 2047]: 5624273
Protocol Breakdown
![[protocol breakdown chart]](200803051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14896300 (100.00%) 9425568356 (100.00%) 632.75
ip 14869076 ( 99.82%) 9420132607 ( 99.94%) 633.54
tcp 12529809 ( 84.11%) 8770165179 ( 93.05%) 699.94
http(s) 4219039 ( 28.32%) 5423278235 ( 57.54%) 1285.43
http(c) 2967989 ( 19.92%) 510704182 ( 5.42%) 172.07
squid 731709 ( 4.91%) 444695837 ( 4.72%) 607.75
smtp 530441 ( 3.56%) 131758003 ( 1.40%) 248.39
nntp 162 ( 0.00%) 11066 ( 0.00%) 68.31
ftp 60887 ( 0.41%) 39522785 ( 0.42%) 649.12
pop3 8089 ( 0.05%) 4952799 ( 0.05%) 612.29
imap 11140 ( 0.07%) 6163632 ( 0.07%) 553.29
telnet 1739 ( 0.01%) 124497 ( 0.00%) 71.59
ssh 829397 ( 5.57%) 120964351 ( 1.28%) 145.85
dns 1489 ( 0.01%) 110315 ( 0.00%) 74.09
bgp 219 ( 0.00%) 79558 ( 0.00%) 363.28
napster 19 ( 0.00%) 1358 ( 0.00%) 71.47
realaud 112 ( 0.00%) 16011 ( 0.00%) 142.96
rtsp 30714 ( 0.21%) 35010391 ( 0.37%) 1139.88
icecast 188 ( 0.00%) 12431 ( 0.00%) 66.12
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 3136473 ( 21.06%) 2052759520 ( 21.78%) 654.48
udp 1908491 ( 12.81%) 595515426 ( 6.32%) 312.03
dns 952785 ( 6.40%) 144936185 ( 1.54%) 152.12
realaud 18030 ( 0.12%) 8257803 ( 0.09%) 458.00
halflif 20 ( 0.00%) 2453 ( 0.00%) 122.65
starcra 32 ( 0.00%) 4811 ( 0.00%) 150.34
everque 70 ( 0.00%) 10167 ( 0.00%) 145.24
unreal 12 ( 0.00%) 1847 ( 0.00%) 153.92
quake 10 ( 0.00%) 1206 ( 0.00%) 120.60
cuseeme 1 ( 0.00%) 74 ( 0.00%) 74.00
other 937497 ( 6.29%) 442264968 ( 4.69%) 471.75
icmp 323083 ( 2.17%) 32076008 ( 0.34%) 99.28
ipip 341 ( 0.00%) 41472 ( 0.00%) 121.62
ip6 640 ( 0.00%) 80148 ( 0.00%) 125.23
other 106712 ( 0.72%) 22254374 ( 0.24%) 208.55
frag 1521 ( 0.01%) 1372005 ( 0.01%) 902.04
ip6 27224 ( 0.18%) 5435749 ( 0.06%) 199.67
tcp6 10315 ( 0.07%) 1420806 ( 0.02%) 137.74
http(s) 193 ( 0.00%) 144020 ( 0.00%) 746.22
http(c) 4093 ( 0.03%) 388540 ( 0.00%) 94.93
smtp 431 ( 0.00%) 175501 ( 0.00%) 407.19
imap 329 ( 0.00%) 147224 ( 0.00%) 447.49
ssh 121 ( 0.00%) 32874 ( 0.00%) 271.69
bgp 91 ( 0.00%) 11302 ( 0.00%) 124.20
other 5057 ( 0.03%) 521345 ( 0.01%) 103.09
udp6 10853 ( 0.07%) 2059996 ( 0.02%) 189.81
dns 10794 ( 0.07%) 2053095 ( 0.02%) 190.21
other 59 ( 0.00%) 6901 ( 0.00%) 116.97
icmp6 6026 ( 0.04%) 1950867 ( 0.02%) 323.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803051400.dump.gz (391.43 MB)