Traffic Trace Info
DumpFile: 200803141400.dump
FileSize: 1057.23MB
Id: 200803141400
StartTime: Fri Mar 14 14:00:01 2008
EndTime: Fri Mar 14 14:15:00 2008
TotalTime: 899.33 seconds
TotalCapSize: 827.26MB CapLen: 96 bytes
# of packets: 15071190 (9050.35MB)
AvgRate: 84.42Mbps stddev:14.82M
IP flow (unique src/dst pair) Information
# of flows: 504871 (avg. 29.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.8% 2.7% 2.1% 2.0% 1.5% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 252377
Top 10 bandwidth usage (bytes/total in %):
6.9% 6.6% 5.1% 5.0% 4.2% 3.6% 3.6% 3.4% 3.3% 3.2%
# of IPv6 addresses: 1598
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.2% 7.2% 6.9% 6.6% 5.3% 5.1% 4.8% 4.8% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803141400.pktlen.png)
detailed numbers
[ 32- 63]: 3440913
[ 64- 127]: 3918576
[ 128- 255]: 1214532
[ 256- 511]: 454856
[ 512- 1023]: 366931
[ 1024- 2047]: 5675382
Protocol Breakdown
![[protocol breakdown chart]](200803141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15071190 (100.00%) 9489976591 (100.00%) 629.68
ip 15042941 ( 99.81%) 9485435703 ( 99.95%) 630.56
tcp 12154202 ( 80.65%) 8975356424 ( 94.58%) 738.46
http(s) 4304238 ( 28.56%) 5566306779 ( 58.65%) 1293.22
http(c) 2934397 ( 19.47%) 317377226 ( 3.34%) 108.16
squid 576664 ( 3.83%) 374129664 ( 3.94%) 648.78
smtp 645709 ( 4.28%) 144274976 ( 1.52%) 223.44
nntp 1 ( 0.00%) 74 ( 0.00%) 74.00
ftp 109954 ( 0.73%) 76012129 ( 0.80%) 691.31
pop3 12052 ( 0.08%) 5523955 ( 0.06%) 458.34
imap 6452 ( 0.04%) 3302811 ( 0.03%) 511.90
telnet 209 ( 0.00%) 13728 ( 0.00%) 65.68
ssh 76159 ( 0.51%) 22434842 ( 0.24%) 294.58
dns 2352 ( 0.02%) 195910 ( 0.00%) 83.30
bgp 204 ( 0.00%) 66525 ( 0.00%) 326.10
napster 6 ( 0.00%) 366 ( 0.00%) 61.00
realaud 25 ( 0.00%) 3957 ( 0.00%) 158.28
rtsp 306076 ( 2.03%) 299731217 ( 3.16%) 979.27
icecast 513 ( 0.00%) 52303 ( 0.00%) 101.96
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 3179181 ( 21.09%) 2165928135 ( 22.82%) 681.28
udp 2406301 ( 15.97%) 454616839 ( 4.79%) 188.93
dns 1804466 ( 11.97%) 238502479 ( 2.51%) 132.17
realaud 49741 ( 0.33%) 36185573 ( 0.38%) 727.48
halflif 16 ( 0.00%) 2108 ( 0.00%) 131.75
starcra 21 ( 0.00%) 3508 ( 0.00%) 167.05
everque 35 ( 0.00%) 4814 ( 0.00%) 137.54
unreal 8 ( 0.00%) 830 ( 0.00%) 103.75
quake 20 ( 0.00%) 2861 ( 0.00%) 143.05
cuseeme 2 ( 0.00%) 152 ( 0.00%) 76.00
other 551705 ( 3.66%) 179842484 ( 1.90%) 325.98
icmp 369443 ( 2.45%) 35864414 ( 0.38%) 97.08
ipip 352 ( 0.00%) 44348 ( 0.00%) 125.99
ip6 1042 ( 0.01%) 142139 ( 0.00%) 136.41
other 111601 ( 0.74%) 19411539 ( 0.20%) 173.94
frag 22185 ( 0.15%) 19703237 ( 0.21%) 888.13
ip6 28249 ( 0.19%) 4540888 ( 0.05%) 160.75
tcp6 8728 ( 0.06%) 997161 ( 0.01%) 114.25
http(s) 43 ( 0.00%) 56840 ( 0.00%) 1321.86
http(c) 5444 ( 0.04%) 491184 ( 0.01%) 90.22
smtp 381 ( 0.00%) 120614 ( 0.00%) 316.57
pop3 22 ( 0.00%) 2028 ( 0.00%) 92.18
dns 13 ( 0.00%) 3228 ( 0.00%) 248.31
bgp 75 ( 0.00%) 8483 ( 0.00%) 113.11
other 2750 ( 0.02%) 314784 ( 0.00%) 114.47
udp6 14367 ( 0.10%) 2772637 ( 0.03%) 192.99
dns 12955 ( 0.09%) 2457335 ( 0.03%) 189.68
other 1412 ( 0.01%) 315302 ( 0.00%) 223.30
icmp6 5122 ( 0.03%) 765125 ( 0.01%) 149.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1885 ( 0.00%) 942.50
tcpdump file: 200803141400.dump.gz (382.21 MB)