Traffic Trace Info
DumpFile: 200803171400.dump
FileSize: 1284.40MB
Id: 200803171400
StartTime: Mon Mar 17 14:00:01 2008
EndTime: Mon Mar 17 14:15:01 2008
TotalTime: 900.24 seconds
TotalCapSize: 1012.50MB CapLen: 96 bytes
# of packets: 17818069 (10407.59MB)
AvgRate: 96.98Mbps stddev:22.67M
IP flow (unique src/dst pair) Information
# of flows: 687078 (avg. 25.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.4% 2.2% 2.0% 2.0% 1.8% 1.6% 1.6% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 357624
Top 10 bandwidth usage (bytes/total in %):
7.4% 6.6% 6.3% 5.3% 3.5% 3.4% 3.3% 3.1% 2.9% 2.4%
# of IPv6 addresses: 1521
Top 10 bandwidth usage (bytes/total in %):
12.4% 9.7% 9.0% 6.5% 6.1% 5.7% 5.7% 4.7% 4.7% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803171400.pktlen.png)
detailed numbers
[ 32- 63]: 3402076
[ 64- 127]: 5760167
[ 128- 255]: 1082045
[ 256- 511]: 529347
[ 512- 1023]: 696405
[ 1024- 2047]: 6348029
Protocol Breakdown
![[protocol breakdown chart]](200803171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17818069 (100.00%) 10913150963 (100.00%) 612.48
ip 17795384 ( 99.87%) 10909233088 ( 99.96%) 613.04
tcp 15250598 ( 85.59%) 10412457779 ( 95.41%) 682.76
http(s) 4744739 ( 26.63%) 6375777683 ( 58.42%) 1343.76
http(c) 2932246 ( 16.46%) 371587748 ( 3.40%) 126.72
squid 507172 ( 2.85%) 325107536 ( 2.98%) 641.02
smtp 588676 ( 3.30%) 112224884 ( 1.03%) 190.64
ftp 84561 ( 0.47%) 9166978 ( 0.08%) 108.41
pop3 32056 ( 0.18%) 25536403 ( 0.23%) 796.62
imap 7736 ( 0.04%) 3456664 ( 0.03%) 446.83
telnet 135 ( 0.00%) 8688 ( 0.00%) 64.36
ssh 2872490 ( 16.12%) 859562800 ( 7.88%) 299.24
dns 1642 ( 0.01%) 129719 ( 0.00%) 79.00
bgp 221 ( 0.00%) 80742 ( 0.00%) 365.35
napster 9 ( 0.00%) 643 ( 0.00%) 71.44
realaud 18 ( 0.00%) 2107 ( 0.00%) 117.06
rtsp 115099 ( 0.65%) 114508893 ( 1.05%) 994.87
icecast 13439 ( 0.08%) 15780228 ( 0.14%) 1174.21
other 3350351 ( 18.80%) 2199525583 ( 20.15%) 656.51
udp 1613811 ( 9.06%) 394134244 ( 3.61%) 244.23
dns 892289 ( 5.01%) 133409660 ( 1.22%) 149.51
realaud 6035 ( 0.03%) 364330 ( 0.00%) 60.37
halflif 2 ( 0.00%) 207 ( 0.00%) 103.50
starcra 37 ( 0.00%) 6895 ( 0.00%) 186.35
everque 26 ( 0.00%) 4002 ( 0.00%) 153.92
unreal 6 ( 0.00%) 740 ( 0.00%) 123.33
quake 19 ( 0.00%) 3038 ( 0.00%) 159.89
other 715370 ( 4.01%) 260333063 ( 2.39%) 363.91
icmp 818233 ( 4.59%) 65916872 ( 0.60%) 80.56
ipip 322 ( 0.00%) 39764 ( 0.00%) 123.49
ip6 1050 ( 0.01%) 147670 ( 0.00%) 140.64
other 111370 ( 0.63%) 36536759 ( 0.33%) 328.07
frag 1383 ( 0.01%) 1149165 ( 0.01%) 830.92
ip6 22685 ( 0.13%) 3917875 ( 0.04%) 172.71
tcp6 3843 ( 0.02%) 573272 ( 0.01%) 149.17
http(s) 109 ( 0.00%) 120449 ( 0.00%) 1105.04
http(c) 1546 ( 0.01%) 149138 ( 0.00%) 96.47
smtp 238 ( 0.00%) 70265 ( 0.00%) 295.23
ftp 12 ( 0.00%) 1243 ( 0.00%) 103.58
pop3 35 ( 0.00%) 3264 ( 0.00%) 93.26
telnet 1 ( 0.00%) 94 ( 0.00%) 94.00
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 74 ( 0.00%) 8215 ( 0.00%) 111.01
other 1827 ( 0.01%) 220530 ( 0.00%) 120.71
udp6 13639 ( 0.08%) 2628054 ( 0.02%) 192.69
dns 12430 ( 0.07%) 2359307 ( 0.02%) 189.81
starcra 11 ( 0.00%) 1817 ( 0.00%) 165.18
other 1198 ( 0.01%) 266930 ( 0.00%) 222.81
icmp6 5172 ( 0.03%) 712333 ( 0.01%) 137.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200803171400.dump.gz (460.24 MB)