Traffic Trace Info
DumpFile: 200803061400.dump
FileSize: 902.42MB
Id: 200803061400
StartTime: Thu Mar 6 14:00:00 2008
EndTime: Thu Mar 6 14:15:00 2008
TotalTime: 899.95 seconds
TotalCapSize: 703.87MB CapLen: 96 bytes
# of packets: 13011776 (8203.26MB)
AvgRate: 76.44Mbps stddev:16.17M
IP flow (unique src/dst pair) Information
# of flows: 589687 (avg. 22.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 2.3% 1.7% 1.3% 1.3% 1.1% 1.1% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 323738
Top 10 bandwidth usage (bytes/total in %):
13.8% 13.8% 4.3% 4.2% 4.1% 3.8% 3.5% 2.6% 2.3% 2.3%
# of IPv6 addresses: 852
Top 10 bandwidth usage (bytes/total in %):
67.8% 62.1% 5.8% 3.9% 3.3% 2.9% 2.4% 1.9% 1.9% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803061400.pktlen.png)
detailed numbers
[ 32- 63]: 3062769
[ 64- 127]: 3190226
[ 128- 255]: 781322
[ 256- 511]: 455121
[ 512- 1023]: 348319
[ 1024- 2047]: 5174019
Protocol Breakdown
![[protocol breakdown chart]](200803061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13011776 (100.00%) 8601741396 (100.00%) 661.07
ip 12975047 ( 99.72%) 8589655194 ( 99.86%) 662.01
tcp 10417302 ( 80.06%) 7971835774 ( 92.68%) 765.25
http(s) 4266400 ( 32.79%) 5619411481 ( 65.33%) 1317.13
http(c) 2688497 ( 20.66%) 445336738 ( 5.18%) 165.65
squid 572531 ( 4.40%) 394452517 ( 4.59%) 688.96
smtp 592797 ( 4.56%) 132070298 ( 1.54%) 222.79
ftp 29229 ( 0.22%) 2845245 ( 0.03%) 97.34
pop3 22332 ( 0.17%) 20073051 ( 0.23%) 898.85
imap 8095 ( 0.06%) 1404245 ( 0.02%) 173.47
telnet 759 ( 0.01%) 53556 ( 0.00%) 70.56
ssh 8470 ( 0.07%) 1607090 ( 0.02%) 189.74
dns 2281 ( 0.02%) 186593 ( 0.00%) 81.80
bgp 313 ( 0.00%) 138565 ( 0.00%) 442.70
napster 12 ( 0.00%) 1953 ( 0.00%) 162.75
realaud 5 ( 0.00%) 370 ( 0.00%) 74.00
rtsp 7019 ( 0.05%) 2288626 ( 0.03%) 326.06
icecast 914 ( 0.01%) 72889 ( 0.00%) 79.75
other 2217638 ( 17.04%) 1351891957 ( 15.72%) 609.61
udp 2077230 ( 15.96%) 568950906 ( 6.61%) 273.90
dns 927363 ( 7.13%) 136001329 ( 1.58%) 146.65
realaud 26655 ( 0.20%) 11537768 ( 0.13%) 432.86
halflif 8 ( 0.00%) 1285 ( 0.00%) 160.62
starcra 30 ( 0.00%) 4816 ( 0.00%) 160.53
everque 74 ( 0.00%) 11749 ( 0.00%) 158.77
unreal 11 ( 0.00%) 3538 ( 0.00%) 321.64
quake 8 ( 0.00%) 1326 ( 0.00%) 165.75
cuseeme 4 ( 0.00%) 908 ( 0.00%) 227.00
other 1123048 ( 8.63%) 421362026 ( 4.90%) 375.20
icmp 394930 ( 3.04%) 37014714 ( 0.43%) 93.72
ipip 376 ( 0.00%) 44140 ( 0.00%) 117.39
ipsec 83 ( 0.00%) 15194 ( 0.00%) 183.06
ip6 722 ( 0.01%) 94553 ( 0.00%) 130.96
other 84404 ( 0.65%) 11699913 ( 0.14%) 138.62
frag 1809 ( 0.01%) 1548527 ( 0.02%) 856.01
ip6 36729 ( 0.28%) 12086202 ( 0.14%) 329.06
tcp6 11867 ( 0.09%) 1324105 ( 0.02%) 111.58
http(s) 43 ( 0.00%) 57093 ( 0.00%) 1327.74
http(c) 4947 ( 0.04%) 469247 ( 0.01%) 94.85
smtp 209 ( 0.00%) 123097 ( 0.00%) 588.98
ftp 34 ( 0.00%) 3144 ( 0.00%) 92.47
pop3 36 ( 0.00%) 3318 ( 0.00%) 92.17
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 81 ( 0.00%) 9313 ( 0.00%) 114.98
other 6516 ( 0.05%) 658819 ( 0.01%) 101.11
udp6 13584 ( 0.10%) 2613442 ( 0.03%) 192.39
dns 13554 ( 0.10%) 2610142 ( 0.03%) 192.57
other 30 ( 0.00%) 3300 ( 0.00%) 110.00
icmp6 5030 ( 0.04%) 646107 ( 0.01%) 128.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6218 ( 0.05%) 7498468 ( 0.09%) 1205.93
tcpdump file: 200803061400.dump.gz (328.02 MB)