Traffic Trace Info
DumpFile: 200803101400.dump
FileSize: 1152.20MB
Id: 200803101400
StartTime: Mon Mar 10 14:00:01 2008
EndTime: Mon Mar 10 14:15:01 2008
TotalTime: 900.01 seconds
TotalCapSize: 906.12MB CapLen: 96 bytes
# of packets: 16126255 (9923.88MB)
AvgRate: 92.49Mbps stddev:15.89M
IP flow (unique src/dst pair) Information
# of flows: 615117 (avg. 26.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 2.3% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 332846
Top 10 bandwidth usage (bytes/total in %):
15.2% 10.6% 4.4% 3.8% 3.7% 3.6% 3.6% 2.6% 2.5% 2.3%
# of IPv6 addresses: 1429
Top 10 bandwidth usage (bytes/total in %):
73.1% 62.3% 9.0% 3.0% 1.9% 1.9% 1.9% 1.4% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803101400.pktlen.png)
detailed numbers
[ 32- 63]: 3320569
[ 64- 127]: 4724796
[ 128- 255]: 820605
[ 256- 511]: 450899
[ 512- 1023]: 693168
[ 1024- 2047]: 6116218
Protocol Breakdown
![[protocol breakdown chart]](200803101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16126255 (100.00%) 10405944955 (100.00%) 645.28
ip 16099089 ( 99.83%) 10393782349 ( 99.88%) 645.61
tcp 13585505 ( 84.24%) 9842920664 ( 94.59%) 724.52
http(s) 3858701 ( 23.93%) 5037846040 ( 48.41%) 1305.58
http(c) 2806383 ( 17.40%) 441114200 ( 4.24%) 157.18
squid 659064 ( 4.09%) 492561034 ( 4.73%) 747.36
smtp 569168 ( 3.53%) 104312618 ( 1.00%) 183.27
ftp 49925 ( 0.31%) 4224142 ( 0.04%) 84.61
pop3 187620 ( 1.16%) 13967884 ( 0.13%) 74.45
imap 8257 ( 0.05%) 5408824 ( 0.05%) 655.06
telnet 460 ( 0.00%) 29712 ( 0.00%) 64.59
ssh 552306 ( 3.42%) 80737265 ( 0.78%) 146.18
dns 2624 ( 0.02%) 209951 ( 0.00%) 80.01
bgp 220 ( 0.00%) 71345 ( 0.00%) 324.30
napster 34 ( 0.00%) 2070 ( 0.00%) 60.88
realaud 42 ( 0.00%) 6356 ( 0.00%) 151.33
rtsp 10863 ( 0.07%) 3400704 ( 0.03%) 313.05
icecast 13523 ( 0.08%) 15328298 ( 0.15%) 1133.50
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 4866309 ( 30.18%) 3643699855 ( 35.02%) 748.76
udp 1937853 ( 12.02%) 490462494 ( 4.71%) 253.10
dns 1209610 ( 7.50%) 296321153 ( 2.85%) 244.97
realaud 8636 ( 0.05%) 5403334 ( 0.05%) 625.68
halflif 15 ( 0.00%) 2527 ( 0.00%) 168.47
starcra 42 ( 0.00%) 7593 ( 0.00%) 180.79
everque 55 ( 0.00%) 9423 ( 0.00%) 171.33
unreal 11 ( 0.00%) 1818 ( 0.00%) 165.27
quake 141 ( 0.00%) 13952 ( 0.00%) 98.95
cuseeme 3 ( 0.00%) 562 ( 0.00%) 187.33
other 719303 ( 4.46%) 188679172 ( 1.81%) 262.31
icmp 507015 ( 3.14%) 45209898 ( 0.43%) 89.17
ipip 338 ( 0.00%) 40032 ( 0.00%) 118.44
ip6 605 ( 0.00%) 74368 ( 0.00%) 122.92
other 67773 ( 0.42%) 15074893 ( 0.14%) 222.43
frag 11578 ( 0.07%) 10943569 ( 0.11%) 945.20
ip6 27166 ( 0.17%) 12162606 ( 0.12%) 447.71
tcp6 3747 ( 0.02%) 593831 ( 0.01%) 158.48
http(s) 137 ( 0.00%) 171494 ( 0.00%) 1251.78
http(c) 1518 ( 0.01%) 155421 ( 0.00%) 102.39
smtp 223 ( 0.00%) 44903 ( 0.00%) 201.36
ftp 15 ( 0.00%) 1407 ( 0.00%) 93.80
pop3 38 ( 0.00%) 3466 ( 0.00%) 91.21
telnet 10 ( 0.00%) 743 ( 0.00%) 74.30
dns 1 ( 0.00%) 86 ( 0.00%) 86.00
bgp 97 ( 0.00%) 14219 ( 0.00%) 146.59
other 1708 ( 0.01%) 202092 ( 0.00%) 118.32
udp6 10349 ( 0.06%) 2171118 ( 0.02%) 209.79
dns 9177 ( 0.06%) 1828900 ( 0.02%) 199.29
other 1172 ( 0.01%) 342218 ( 0.00%) 291.99
icmp6 5388 ( 0.03%) 718339 ( 0.01%) 133.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7652 ( 0.05%) 8675238 ( 0.08%) 1133.72
tcpdump file: 200803101400.dump.gz (406.18 MB)