Traffic Trace Info
DumpFile: 200803121400.dump
FileSize: 1092.65MB
Id: 200803121400
StartTime: Wed Mar 12 14:00:01 2008
EndTime: Wed Mar 12 14:15:01 2008
TotalTime: 900.40 seconds
TotalCapSize: 852.81MB CapLen: 96 bytes
# of packets: 15717773 (10699.57MB)
AvgRate: 99.71Mbps stddev:28.36M
IP flow (unique src/dst pair) Information
# of flows: 647708 (avg. 24.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.7% 1.2% 1.2% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 377287
Top 10 bandwidth usage (bytes/total in %):
6.8% 3.6% 3.3% 3.3% 2.9% 2.7% 2.7% 1.8% 1.7% 1.6%
# of IPv6 addresses: 1314
Top 10 bandwidth usage (bytes/total in %):
24.7% 24.6% 7.4% 7.3% 4.6% 4.2% 4.2% 4.2% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803121400.pktlen.png)
detailed numbers
[ 32- 63]: 4010627
[ 64- 127]: 3283820
[ 128- 255]: 761829
[ 256- 511]: 445946
[ 512- 1023]: 320940
[ 1024- 2047]: 6894611
Protocol Breakdown
![[protocol breakdown chart]](200803121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15717773 (100.00%) 11219316853 (100.00%) 713.80
ip 15665480 ( 99.67%) 11211798196 ( 99.93%) 715.70
tcp 13244427 ( 84.26%) 10786417468 ( 96.14%) 814.41
http(s) 6202350 ( 39.46%) 8355312819 ( 74.47%) 1347.12
http(c) 3509882 ( 22.33%) 376797408 ( 3.36%) 107.35
squid 682768 ( 4.34%) 448186756 ( 3.99%) 656.43
smtp 536254 ( 3.41%) 91212803 ( 0.81%) 170.09
nntp 29 ( 0.00%) 2170 ( 0.00%) 74.83
ftp 30383 ( 0.19%) 3115678 ( 0.03%) 102.55
pop3 19843 ( 0.13%) 18319385 ( 0.16%) 923.22
imap 6688 ( 0.04%) 2944648 ( 0.03%) 440.29
telnet 145 ( 0.00%) 9564 ( 0.00%) 65.96
ssh 33381 ( 0.21%) 6588642 ( 0.06%) 197.38
dns 2135 ( 0.01%) 177248 ( 0.00%) 83.02
bgp 216 ( 0.00%) 74553 ( 0.00%) 345.15
napster 1 ( 0.00%) 78 ( 0.00%) 78.00
realaud 13 ( 0.00%) 1712 ( 0.00%) 131.69
rtsp 55365 ( 0.35%) 35192010 ( 0.31%) 635.64
icecast 12528 ( 0.08%) 15224153 ( 0.14%) 1215.21
other 2152441 ( 13.69%) 1433257541 ( 12.77%) 665.88
udp 1661858 ( 10.57%) 341855170 ( 3.05%) 205.71
dns 1030198 ( 6.55%) 151808007 ( 1.35%) 147.36
realaud 8985 ( 0.06%) 3024134 ( 0.03%) 336.58
halflif 6 ( 0.00%) 785 ( 0.00%) 130.83
starcra 28 ( 0.00%) 4757 ( 0.00%) 169.89
everque 33 ( 0.00%) 5771 ( 0.00%) 174.88
unreal 9 ( 0.00%) 1334 ( 0.00%) 148.22
quake 8 ( 0.00%) 987 ( 0.00%) 123.38
cuseeme 4 ( 0.00%) 1648 ( 0.00%) 412.00
other 622509 ( 3.96%) 186955373 ( 1.67%) 300.33
icmp 730231 ( 4.65%) 66960349 ( 0.60%) 91.70
ipip 407 ( 0.00%) 53898 ( 0.00%) 132.43
ip6 954 ( 0.01%) 141437 ( 0.00%) 148.26
other 27603 ( 0.18%) 16369874 ( 0.15%) 593.05
frag 12577 ( 0.08%) 11959455 ( 0.11%) 950.90
ip6 52293 ( 0.33%) 7518657 ( 0.07%) 143.78
tcp6 33428 ( 0.21%) 3447363 ( 0.03%) 103.13
http(s) 388 ( 0.00%) 292804 ( 0.00%) 754.65
http(c) 29457 ( 0.19%) 2593010 ( 0.02%) 88.03
smtp 486 ( 0.00%) 200520 ( 0.00%) 412.59
ftp 7 ( 0.00%) 703 ( 0.00%) 100.43
pop3 35 ( 0.00%) 3238 ( 0.00%) 92.51
ssh 1155 ( 0.01%) 134022 ( 0.00%) 116.04
bgp 88 ( 0.00%) 11051 ( 0.00%) 125.58
other 1812 ( 0.01%) 212015 ( 0.00%) 117.01
udp6 14497 ( 0.09%) 3485165 ( 0.03%) 240.41
dns 13538 ( 0.09%) 3266575 ( 0.03%) 241.29
other 959 ( 0.01%) 218590 ( 0.00%) 227.94
icmp6 4337 ( 0.03%) 581890 ( 0.01%) 134.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 159 ( 0.00%) 159.00
tcpdump file: 200803121400.dump.gz (373.41 MB)