Traffic Trace Info
DumpFile: 200803081400.dump
FileSize: 677.68MB
Id: 200803081400
StartTime: Sat Mar 8 14:00:00 2008
EndTime: Sat Mar 8 14:15:00 2008
TotalTime: 899.92 seconds
TotalCapSize: 529.42MB CapLen: 96 bytes
# of packets: 9715297 (5922.46MB)
AvgRate: 55.21Mbps stddev:11.74M
IP flow (unique src/dst pair) Information
# of flows: 483602 (avg. 20.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 3.3% 2.3% 2.1% 2.0% 1.9% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 258030
Top 10 bandwidth usage (bytes/total in %):
21.3% 14.2% 7.9% 6.6% 5.3% 3.3% 2.9% 2.4% 2.3% 2.1%
# of IPv6 addresses: 1098
Top 10 bandwidth usage (bytes/total in %):
78.4% 64.5% 11.7% 1.7% 1.7% 1.7% 1.6% 1.5% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803081400.pktlen.png)
detailed numbers
[ 32- 63]: 2268797
[ 64- 127]: 2469763
[ 128- 255]: 675625
[ 256- 511]: 348639
[ 512- 1023]: 215023
[ 1024- 2047]: 3737450
Protocol Breakdown
![[protocol breakdown chart]](200803081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9715297 (100.00%) 6210144197 (100.00%) 639.21
ip 9691003 ( 99.75%) 6198396297 ( 99.81%) 639.60
tcp 7855381 ( 80.86%) 5903922686 ( 95.07%) 751.58
http(s) 3243821 ( 33.39%) 4325865375 ( 69.66%) 1333.57
http(c) 2178043 ( 22.42%) 330073377 ( 5.32%) 151.55
squid 425437 ( 4.38%) 268301566 ( 4.32%) 630.65
smtp 570805 ( 5.88%) 80207278 ( 1.29%) 140.52
ftp 48520 ( 0.50%) 38931594 ( 0.63%) 802.38
pop3 4314 ( 0.04%) 1595321 ( 0.03%) 369.80
imap 1986 ( 0.02%) 255287 ( 0.00%) 128.54
telnet 684 ( 0.01%) 45021 ( 0.00%) 65.82
ssh 117571 ( 1.21%) 54236977 ( 0.87%) 461.31
dns 1564 ( 0.02%) 118162 ( 0.00%) 75.55
bgp 192 ( 0.00%) 60792 ( 0.00%) 316.62
napster 18 ( 0.00%) 1706 ( 0.00%) 94.78
realaud 24 ( 0.00%) 3635 ( 0.00%) 151.46
rtsp 103 ( 0.00%) 14441 ( 0.00%) 140.20
icecast 10892 ( 0.11%) 7981270 ( 0.13%) 732.76
other 1251405 ( 12.88%) 796230764 ( 12.82%) 636.27
udp 1511317 ( 15.56%) 256093952 ( 4.12%) 169.45
dns 927779 ( 9.55%) 138039905 ( 2.22%) 148.79
realaud 71 ( 0.00%) 6815 ( 0.00%) 95.99
halflif 7 ( 0.00%) 2676 ( 0.00%) 382.29
starcra 12 ( 0.00%) 2174 ( 0.00%) 181.17
everque 52 ( 0.00%) 9649 ( 0.00%) 185.56
unreal 6 ( 0.00%) 516 ( 0.00%) 86.00
quake 7 ( 0.00%) 580 ( 0.00%) 82.86
cuseeme 4 ( 0.00%) 592 ( 0.00%) 148.00
other 583346 ( 6.00%) 118001521 ( 1.90%) 202.28
icmp 265316 ( 2.73%) 27245445 ( 0.44%) 102.69
ipip 346 ( 0.00%) 42844 ( 0.00%) 123.83
ip6 661 ( 0.01%) 82255 ( 0.00%) 124.44
other 57982 ( 0.60%) 11009115 ( 0.18%) 189.87
frag 1163 ( 0.01%) 1003049 ( 0.02%) 862.47
ip6 24294 ( 0.25%) 11747900 ( 0.19%) 483.57
tcp6 2777 ( 0.03%) 419666 ( 0.01%) 151.12
http(c) 1064 ( 0.01%) 100913 ( 0.00%) 94.84
smtp 508 ( 0.01%) 174918 ( 0.00%) 344.33
pop3 70 ( 0.00%) 6806 ( 0.00%) 97.23
bgp 85 ( 0.00%) 10148 ( 0.00%) 119.39
other 1050 ( 0.01%) 126881 ( 0.00%) 120.84
udp6 8960 ( 0.09%) 1790548 ( 0.03%) 199.84
dns 8359 ( 0.09%) 1644832 ( 0.03%) 196.77
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 600 ( 0.01%) 145579 ( 0.00%) 242.63
icmp6 4514 ( 0.05%) 575992 ( 0.01%) 127.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8013 ( 0.08%) 8957614 ( 0.14%) 1117.89
tcpdump file: 200803081400.dump.gz (239.30 MB)