Traffic Trace Info
DumpFile: 200803131400.dump
FileSize: 1033.88MB
Id: 200803131400
StartTime: Thu Mar 13 14:00:00 2008
EndTime: Thu Mar 13 14:15:00 2008
TotalTime: 900.44 seconds
TotalCapSize: 806.27MB CapLen: 96 bytes
# of packets: 14916033 (9928.10MB)
AvgRate: 92.51Mbps stddev:30.46M
IP flow (unique src/dst pair) Information
# of flows: 514121 (avg. 29.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 2.8% 2.3% 2.0% 1.5% 1.3% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 272206
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.6% 8.9% 3.4% 3.4% 2.9% 2.8% 2.7% 2.5% 2.4%
# of IPv6 addresses: 1545
Top 10 bandwidth usage (bytes/total in %):
12.0% 10.8% 9.0% 6.3% 5.5% 5.5% 5.4% 4.9% 4.5% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803131400.pktlen.png)
detailed numbers
[ 32- 63]: 2989140
[ 64- 127]: 4021730
[ 128- 255]: 706571
[ 256- 511]: 362148
[ 512- 1023]: 463254
[ 1024- 2047]: 6373190
Protocol Breakdown
![[protocol breakdown chart]](200803131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14916033 (100.00%) 10410371132 (100.00%) 697.93
ip 14895062 ( 99.86%) 10406511255 ( 99.96%) 698.66
tcp 11886326 ( 79.69%) 9755239707 ( 93.71%) 820.71
http(s) 3989986 ( 26.75%) 5083324665 ( 48.83%) 1274.02
http(c) 2629657 ( 17.63%) 420735973 ( 4.04%) 160.00
squid 663366 ( 4.45%) 506100887 ( 4.86%) 762.93
smtp 554305 ( 3.72%) 126872409 ( 1.22%) 228.89
nntp 22 ( 0.00%) 1786 ( 0.00%) 81.18
ftp 50832 ( 0.34%) 4434085 ( 0.04%) 87.23
pop3 12439 ( 0.08%) 7934435 ( 0.08%) 637.87
imap 7977 ( 0.05%) 2986195 ( 0.03%) 374.35
telnet 412 ( 0.00%) 25792 ( 0.00%) 62.60
ssh 17608 ( 0.12%) 3392175 ( 0.03%) 192.65
dns 4015 ( 0.03%) 316021 ( 0.00%) 78.71
bgp 207 ( 0.00%) 71819 ( 0.00%) 346.95
napster 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 35 ( 0.00%) 4103 ( 0.00%) 117.23
rtsp 540346 ( 3.62%) 456394959 ( 4.38%) 844.63
icecast 12798 ( 0.09%) 15245172 ( 0.15%) 1191.22
other 3402285 ( 22.81%) 3127396779 ( 30.04%) 919.20
udp 1977203 ( 13.26%) 543527718 ( 5.22%) 274.90
dns 958706 ( 6.43%) 142658637 ( 1.37%) 148.80
realaud 1910 ( 0.01%) 119991 ( 0.00%) 62.82
halflif 10 ( 0.00%) 1153 ( 0.00%) 115.30
starcra 13 ( 0.00%) 2097 ( 0.00%) 161.31
everque 67 ( 0.00%) 11263 ( 0.00%) 168.10
unreal 25 ( 0.00%) 4058 ( 0.00%) 162.32
quake 14 ( 0.00%) 1839 ( 0.00%) 131.36
cuseeme 2 ( 0.00%) 236 ( 0.00%) 118.00
other 1016390 ( 6.81%) 400697719 ( 3.85%) 394.24
icmp 937950 ( 6.29%) 82811242 ( 0.80%) 88.29
ipip 332 ( 0.00%) 39836 ( 0.00%) 119.99
ip6 1633 ( 0.01%) 228027 ( 0.00%) 139.64
other 91618 ( 0.61%) 24664725 ( 0.24%) 269.21
frag 12540 ( 0.08%) 11742248 ( 0.11%) 936.38
ip6 20971 ( 0.14%) 3859877 ( 0.04%) 184.06
tcp6 3842 ( 0.03%) 496693 ( 0.00%) 129.28
http(c) 1249 ( 0.01%) 124057 ( 0.00%) 99.33
smtp 299 ( 0.00%) 89695 ( 0.00%) 299.98
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 66 ( 0.00%) 6953 ( 0.00%) 105.35
other 2188 ( 0.01%) 272311 ( 0.00%) 124.46
udp6 13250 ( 0.09%) 2839780 ( 0.03%) 214.32
dns 11949 ( 0.08%) 2494704 ( 0.02%) 208.78
other 1301 ( 0.01%) 345076 ( 0.00%) 265.24
icmp6 3849 ( 0.03%) 519324 ( 0.00%) 134.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803131400.dump.gz (358.09 MB)