Traffic Trace Info
DumpFile: 200803181400.dump
FileSize: 1121.89MB
Id: 200803181400
StartTime: Tue Mar 18 14:00:00 2008
EndTime: Tue Mar 18 14:15:00 2008
TotalTime: 900.36 seconds
TotalCapSize: 878.21MB CapLen: 96 bytes
# of packets: 15969275 (10389.31MB)
AvgRate: 96.78Mbps stddev:21.33M
IP flow (unique src/dst pair) Information
# of flows: 678198 (avg. 23.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 4.1% 4.1% 3.5% 2.9% 2.3% 1.5% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 378624
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.1% 4.5% 4.4% 4.3% 4.2% 4.2% 4.1% 4.1% 3.6%
# of IPv6 addresses: 2573
Top 10 bandwidth usage (bytes/total in %):
50.3% 46.3% 6.0% 5.5% 4.2% 3.9% 3.3% 3.3% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803181400.pktlen.png)
detailed numbers
[ 32- 63]: 3037830
[ 64- 127]: 4325343
[ 128- 255]: 1004519
[ 256- 511]: 631032
[ 512- 1023]: 423638
[ 1024- 2047]: 6546913
Protocol Breakdown
![[protocol breakdown chart]](200803181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15969275 (100.00%) 10893980676 (100.00%) 682.18
ip 15935232 ( 99.79%) 10884184457 ( 99.91%) 683.03
tcp 13433960 ( 84.12%) 10354736677 ( 95.05%) 770.79
http(s) 4891570 ( 30.63%) 6266112114 ( 57.52%) 1281.00
http(c) 3023847 ( 18.94%) 800214417 ( 7.35%) 264.63
squid 380343 ( 2.38%) 179938647 ( 1.65%) 473.10
smtp 724396 ( 4.54%) 294606401 ( 2.70%) 406.69
ftp 98230 ( 0.62%) 42002054 ( 0.39%) 427.59
pop3 15213 ( 0.10%) 7432531 ( 0.07%) 488.56
imap 6337 ( 0.04%) 2121630 ( 0.02%) 334.80
telnet 443 ( 0.00%) 35460 ( 0.00%) 80.05
ssh 1308988 ( 8.20%) 512154793 ( 4.70%) 391.26
dns 1593 ( 0.01%) 124700 ( 0.00%) 78.28
bgp 207 ( 0.00%) 69479 ( 0.00%) 335.65
napster 93 ( 0.00%) 45745 ( 0.00%) 491.88
realaud 165 ( 0.00%) 48779 ( 0.00%) 295.63
rtsp 55457 ( 0.35%) 54568306 ( 0.50%) 983.98
icecast 31596 ( 0.20%) 23642916 ( 0.22%) 748.29
hotline 8 ( 0.00%) 860 ( 0.00%) 107.50
other 2895472 ( 18.13%) 2171617725 ( 19.93%) 750.00
udp 1848769 ( 11.58%) 435107579 ( 3.99%) 235.35
dns 874584 ( 5.48%) 131459095 ( 1.21%) 150.31
realaud 19307 ( 0.12%) 13252675 ( 0.12%) 686.42
halflif 9 ( 0.00%) 985 ( 0.00%) 109.44
starcra 29 ( 0.00%) 5914 ( 0.00%) 203.93
everque 27111 ( 0.17%) 7686353 ( 0.07%) 283.51
unreal 12 ( 0.00%) 2004 ( 0.00%) 167.00
quake 15 ( 0.00%) 2838 ( 0.00%) 189.20
cuseeme 3 ( 0.00%) 231 ( 0.00%) 77.00
other 927676 ( 5.81%) 282689048 ( 2.59%) 304.73
icmp 361916 ( 2.27%) 34485707 ( 0.32%) 95.29
ipip 348 ( 0.00%) 43548 ( 0.00%) 125.14
ip6 1184 ( 0.01%) 169448 ( 0.00%) 143.11
other 289055 ( 1.81%) 59641498 ( 0.55%) 206.33
frag 3401 ( 0.02%) 2740846 ( 0.03%) 805.89
ip6 34043 ( 0.21%) 9796219 ( 0.09%) 287.76
tcp6 7783 ( 0.05%) 952194 ( 0.01%) 122.34
http(s) 2 ( 0.00%) 148 ( 0.00%) 74.00
http(c) 1407 ( 0.01%) 135863 ( 0.00%) 96.56
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 747 ( 0.00%) 247950 ( 0.00%) 331.93
pop3 60 ( 0.00%) 5212 ( 0.00%) 86.87
dns 16 ( 0.00%) 1591 ( 0.00%) 99.44
bgp 90 ( 0.00%) 10912 ( 0.00%) 121.24
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 5455 ( 0.03%) 550074 ( 0.01%) 100.84
udp6 17295 ( 0.11%) 3544137 ( 0.03%) 204.92
dns 14413 ( 0.09%) 2617411 ( 0.02%) 181.60
everque 2 ( 0.00%) 706 ( 0.00%) 353.00
other 2880 ( 0.02%) 926020 ( 0.01%) 321.53
icmp6 5448 ( 0.03%) 751345 ( 0.01%) 137.91
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3486 ( 0.02%) 4544327 ( 0.04%) 1303.59
tcpdump file: 200803181400.dump.gz (395.35 MB)