Traffic Trace Info
DumpFile: 200803071400.dump
FileSize: 826.69MB
Id: 200803071400
StartTime: Fri Mar 7 14:00:00 2008
EndTime: Fri Mar 7 14:15:00 2008
TotalTime: 899.89 seconds
TotalCapSize: 648.14MB CapLen: 96 bytes
# of packets: 11700856 (7029.95MB)
AvgRate: 65.54Mbps stddev:12.25M
IP flow (unique src/dst pair) Information
# of flows: 571110 (avg. 20.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.3% 3.1% 2.3% 2.2% 1.6% 1.4% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 309988
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.7% 6.7% 6.1% 4.2% 4.2% 3.4% 3.1% 3.1% 2.9%
# of IPv6 addresses: 1302
Top 10 bandwidth usage (bytes/total in %):
70.6% 68.2% 4.1% 3.6% 2.8% 2.0% 2.0% 1.7% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803071400.pktlen.png)
detailed numbers
[ 32- 63]: 2829170
[ 64- 127]: 3152349
[ 128- 255]: 590305
[ 256- 511]: 427111
[ 512- 1023]: 249708
[ 1024- 2047]: 4452213
Protocol Breakdown
![[protocol breakdown chart]](200803071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11700856 (100.00%) 7371436420 (100.00%) 629.99
ip 11673612 ( 99.77%) 7360298757 ( 99.85%) 630.51
tcp 9936007 ( 84.92%) 7087854641 ( 96.15%) 713.35
http(s) 3628300 ( 31.01%) 4693260321 ( 63.67%) 1293.51
http(c) 2814857 ( 24.06%) 449393411 ( 6.10%) 159.65
squid 601500 ( 5.14%) 339226343 ( 4.60%) 563.97
smtp 523603 ( 4.47%) 153502637 ( 2.08%) 293.17
nntp 9 ( 0.00%) 564 ( 0.00%) 62.67
ftp 13725 ( 0.12%) 1464759 ( 0.02%) 106.72
pop3 8844 ( 0.08%) 8759969 ( 0.12%) 990.50
imap 8458 ( 0.07%) 3915452 ( 0.05%) 462.93
telnet 593 ( 0.01%) 37903 ( 0.00%) 63.92
ssh 187759 ( 1.60%) 218954294 ( 2.97%) 1166.15
dns 2295 ( 0.02%) 170159 ( 0.00%) 74.14
bgp 197 ( 0.00%) 62771 ( 0.00%) 318.63
napster 28 ( 0.00%) 2544 ( 0.00%) 90.86
realaud 18 ( 0.00%) 3720 ( 0.00%) 206.67
rtsp 158802 ( 1.36%) 226744193 ( 3.08%) 1427.84
icecast 276 ( 0.00%) 20216 ( 0.00%) 73.25
hotline 11 ( 0.00%) 1918 ( 0.00%) 174.36
other 1986732 ( 16.98%) 992333467 ( 13.46%) 499.48
udp 1390529 ( 11.88%) 236281933 ( 3.21%) 169.92
dns 878247 ( 7.51%) 132520656 ( 1.80%) 150.89
realaud 22 ( 0.00%) 2093 ( 0.00%) 95.14
halflif 7 ( 0.00%) 835 ( 0.00%) 119.29
starcra 37 ( 0.00%) 13646 ( 0.00%) 368.81
everque 34 ( 0.00%) 5872 ( 0.00%) 172.71
unreal 7 ( 0.00%) 1027 ( 0.00%) 146.71
quake 18 ( 0.00%) 2124 ( 0.00%) 118.00
cuseeme 3 ( 0.00%) 237 ( 0.00%) 79.00
other 512110 ( 4.38%) 103709592 ( 1.41%) 202.51
icmp 328540 ( 2.81%) 32461266 ( 0.44%) 98.80
ipip 364 ( 0.00%) 43468 ( 0.00%) 119.42
ip6 650 ( 0.01%) 80881 ( 0.00%) 124.43
other 17522 ( 0.15%) 3576568 ( 0.05%) 204.12
frag 2934 ( 0.03%) 2365283 ( 0.03%) 806.16
ip6 27244 ( 0.23%) 11137663 ( 0.15%) 408.81
tcp6 3534 ( 0.03%) 465414 ( 0.01%) 131.70
http(s) 40 ( 0.00%) 54872 ( 0.00%) 1371.80
http(c) 1464 ( 0.01%) 141779 ( 0.00%) 96.84
smtp 137 ( 0.00%) 29278 ( 0.00%) 213.71
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 75 ( 0.00%) 8420 ( 0.00%) 112.27
other 1778 ( 0.02%) 227388 ( 0.00%) 127.89
udp6 12189 ( 0.10%) 2435795 ( 0.03%) 199.84
dns 11319 ( 0.10%) 2136357 ( 0.03%) 188.74
other 870 ( 0.01%) 299438 ( 0.00%) 344.18
icmp6 5189 ( 0.04%) 633424 ( 0.01%) 122.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6302 ( 0.05%) 7598950 ( 0.10%) 1205.80
tcpdump file: 200803071400.dump.gz (295.51 MB)