Traffic Trace Info
DumpFile: 200803091400.dump
FileSize: 603.01MB
Id: 200803091400
StartTime: Sun Mar 9 14:00:01 2008
EndTime: Sun Mar 9 14:15:01 2008
TotalTime: 900.17 seconds
TotalCapSize: 473.20MB CapLen: 96 bytes
# of packets: 8504567 (4723.45MB)
AvgRate: 44.02Mbps stddev:7.70M
IP flow (unique src/dst pair) Information
# of flows: 539114 (avg. 15.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 5.6% 5.0% 2.9% 2.2% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 319356
Top 10 bandwidth usage (bytes/total in %):
18.1% 12.2% 7.8% 6.9% 6.3% 5.6% 4.9% 3.0% 2.6% 2.5%
# of IPv6 addresses: 1249
Top 10 bandwidth usage (bytes/total in %):
77.0% 62.3% 11.2% 2.6% 1.8% 1.8% 1.7% 1.4% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803091400.pktlen.png)
detailed numbers
[ 32- 63]: 1938651
[ 64- 127]: 2581191
[ 128- 255]: 509478
[ 256- 511]: 267917
[ 512- 1023]: 353179
[ 1024- 2047]: 2854151
Protocol Breakdown
![[protocol breakdown chart]](200803091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8504567 (100.00%) 4952892504 (100.00%) 582.38
ip 8476670 ( 99.67%) 4940694886 ( 99.75%) 582.86
tcp 6667414 ( 78.40%) 4571806700 ( 92.31%) 685.69
http(s) 1843059 ( 21.67%) 2427910422 ( 49.02%) 1317.33
http(c) 1380501 ( 16.23%) 125351483 ( 2.53%) 90.80
squid 462007 ( 5.43%) 361412119 ( 7.30%) 782.27
smtp 479093 ( 5.63%) 72799178 ( 1.47%) 151.95
nntp 31 ( 0.00%) 3382 ( 0.00%) 109.10
ftp 211809 ( 2.49%) 14468511 ( 0.29%) 68.31
pop3 4083 ( 0.05%) 2012612 ( 0.04%) 492.92
imap 2435 ( 0.03%) 899145 ( 0.02%) 369.26
telnet 639 ( 0.01%) 41476 ( 0.00%) 64.91
ssh 8546 ( 0.10%) 1733347 ( 0.03%) 202.83
dns 2698 ( 0.03%) 204929 ( 0.00%) 75.96
bgp 201 ( 0.00%) 44964 ( 0.00%) 223.70
napster 4 ( 0.00%) 248 ( 0.00%) 62.00
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 64 ( 0.00%) 11898 ( 0.00%) 185.91
icecast 1566 ( 0.02%) 384337 ( 0.01%) 245.43
hotline 5 ( 0.00%) 507 ( 0.00%) 101.40
other 2270672 ( 26.70%) 1564528080 ( 31.59%) 689.02
udp 1406080 ( 16.53%) 330771272 ( 6.68%) 235.24
dns 987338 ( 11.61%) 235356904 ( 4.75%) 238.38
realaud 38 ( 0.00%) 3649 ( 0.00%) 96.03
halflif 5 ( 0.00%) 637 ( 0.00%) 127.40
starcra 13 ( 0.00%) 4152 ( 0.00%) 319.38
everque 34 ( 0.00%) 5400 ( 0.00%) 158.82
unreal 5 ( 0.00%) 592 ( 0.00%) 118.40
quake 15 ( 0.00%) 2662 ( 0.00%) 177.47
other 418588 ( 4.92%) 95364241 ( 1.93%) 227.82
icmp 394095 ( 4.63%) 36832896 ( 0.74%) 93.46
ipip 337 ( 0.00%) 41026 ( 0.00%) 121.74
ip6 651 ( 0.01%) 80943 ( 0.00%) 124.34
other 8093 ( 0.10%) 1162049 ( 0.02%) 143.59
frag 11652 ( 0.14%) 11027215 ( 0.22%) 946.38
ip6 27897 ( 0.33%) 12197618 ( 0.25%) 437.24
tcp6 4873 ( 0.06%) 600660 ( 0.01%) 123.26
http(c) 2332 ( 0.03%) 213264 ( 0.00%) 91.45
smtp 781 ( 0.01%) 158811 ( 0.00%) 203.34
pop3 31 ( 0.00%) 3259 ( 0.00%) 105.13
bgp 86 ( 0.00%) 13242 ( 0.00%) 153.98
other 1643 ( 0.02%) 212084 ( 0.00%) 129.08
udp6 9048 ( 0.11%) 1861716 ( 0.04%) 205.76
dns 8067 ( 0.09%) 1561314 ( 0.03%) 193.54
realaud 1 ( 0.00%) 530 ( 0.00%) 530.00
other 980 ( 0.01%) 299872 ( 0.01%) 305.99
icmp6 5941 ( 0.07%) 773272 ( 0.02%) 130.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8005 ( 0.09%) 8957890 ( 0.18%) 1119.04
tcpdump file: 200803091400.dump.gz (211.27 MB)