Traffic Trace Info
DumpFile: 200803161400.dump
FileSize: 622.81MB
Id: 200803161400
StartTime: Sun Mar 16 14:00:00 2008
EndTime: Sun Mar 16 14:15:00 2008
TotalTime: 900.26 seconds
TotalCapSize: 487.62MB CapLen: 96 bytes
# of packets: 8859293 (5285.11MB)
AvgRate: 49.25Mbps stddev:12.66M
IP flow (unique src/dst pair) Information
# of flows: 512552 (avg. 17.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.0% 2.5% 2.3% 2.3% 2.2% 2.1% 1.9% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 285172
Top 10 bandwidth usage (bytes/total in %):
9.9% 7.9% 6.1% 5.7% 5.6% 4.8% 4.1% 3.9% 3.8% 2.6%
# of IPv6 addresses: 1819
Top 10 bandwidth usage (bytes/total in %):
18.4% 15.1% 11.2% 8.4% 6.5% 6.3% 6.1% 5.9% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803161400.pktlen.png)
detailed numbers
[ 32- 63]: 1945648
[ 64- 127]: 2489984
[ 128- 255]: 657479
[ 256- 511]: 299875
[ 512- 1023]: 165196
[ 1024- 2047]: 3301111
Protocol Breakdown
![[protocol breakdown chart]](200803161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8859293 (100.00%) 5541837321 (100.00%) 625.54
ip 8832089 ( 99.69%) 5537346097 ( 99.92%) 626.96
tcp 6949605 ( 78.44%) 5216976771 ( 94.14%) 750.69
http(s) 1913540 ( 21.60%) 2543899640 ( 45.90%) 1329.42
http(c) 1188031 ( 13.41%) 114340733 ( 2.06%) 96.24
squid 607499 ( 6.86%) 483992403 ( 8.73%) 796.70
smtp 379101 ( 4.28%) 54396455 ( 0.98%) 143.49
ftp 57089 ( 0.64%) 18966827 ( 0.34%) 332.23
pop3 4578 ( 0.05%) 1887243 ( 0.03%) 412.24
imap 5698 ( 0.06%) 1635744 ( 0.03%) 287.07
telnet 740 ( 0.01%) 47945 ( 0.00%) 64.79
ssh 372057 ( 4.20%) 345010080 ( 6.23%) 927.30
dns 1612 ( 0.02%) 128111 ( 0.00%) 79.47
bgp 183 ( 0.00%) 43778 ( 0.00%) 239.22
napster 14 ( 0.00%) 1389 ( 0.00%) 99.21
realaud 13 ( 0.00%) 3015 ( 0.00%) 231.92
rtsp 120217 ( 1.36%) 138239909 ( 2.49%) 1149.92
icecast 1498 ( 0.02%) 569609 ( 0.01%) 380.25
other 2297732 ( 25.94%) 1513813710 ( 27.32%) 658.83
udp 1434298 ( 16.19%) 278305213 ( 5.02%) 194.04
dns 841784 ( 9.50%) 119706676 ( 2.16%) 142.21
realaud 2779 ( 0.03%) 170242 ( 0.00%) 61.26
halflif 2 ( 0.00%) 145 ( 0.00%) 72.50
starcra 5 ( 0.00%) 972 ( 0.00%) 194.40
everque 18 ( 0.00%) 2533 ( 0.00%) 140.72
unreal 9 ( 0.00%) 1235 ( 0.00%) 137.22
quake 10 ( 0.00%) 924 ( 0.00%) 92.40
other 589646 ( 6.66%) 158378281 ( 2.86%) 268.60
icmp 440577 ( 4.97%) 40929420 ( 0.74%) 92.90
ipip 343 ( 0.00%) 42442 ( 0.00%) 123.74
ip6 1118 ( 0.01%) 154186 ( 0.00%) 137.91
other 6148 ( 0.07%) 938065 ( 0.02%) 152.58
frag 23915 ( 0.27%) 18986424 ( 0.34%) 793.91
ip6 27204 ( 0.31%) 4491224 ( 0.08%) 165.09
tcp6 6723 ( 0.08%) 705320 ( 0.01%) 104.91
http(c) 1447 ( 0.02%) 139592 ( 0.00%) 96.47
smtp 322 ( 0.00%) 66509 ( 0.00%) 206.55
pop3 34 ( 0.00%) 3134 ( 0.00%) 92.18
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 4850 ( 0.05%) 488940 ( 0.01%) 100.81
udp6 15252 ( 0.17%) 3033258 ( 0.05%) 198.88
dns 13504 ( 0.15%) 2542961 ( 0.05%) 188.31
other 1748 ( 0.02%) 490297 ( 0.01%) 280.49
icmp6 5199 ( 0.06%) 748566 ( 0.01%) 143.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803161400.dump.gz (220.82 MB)