Traffic Trace Info
DumpFile: 200803191400.dump
FileSize: 865.72MB
Id: 200803191400
StartTime: Wed Mar 19 14:00:01 2008
EndTime: Wed Mar 19 14:15:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 675.79MB CapLen: 96 bytes
# of packets: 12446748 (7965.76MB)
AvgRate: 74.27Mbps stddev:16.56M
IP flow (unique src/dst pair) Information
# of flows: 558341 (avg. 22.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 2.4% 1.5% 1.4% 1.4% 1.3% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 311517
Top 10 bandwidth usage (bytes/total in %):
7.1% 4.8% 4.4% 3.6% 3.3% 2.8% 2.7% 2.7% 2.6% 2.5%
# of IPv6 addresses: 1477
Top 10 bandwidth usage (bytes/total in %):
44.1% 40.5% 15.4% 14.8% 7.4% 5.5% 4.7% 4.2% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803191400.pktlen.png)
detailed numbers
[ 32- 63]: 2817937
[ 64- 127]: 3100423
[ 128- 255]: 700346
[ 256- 511]: 524363
[ 512- 1023]: 312582
[ 1024- 2047]: 4991097
Protocol Breakdown
![[protocol breakdown chart]](200803191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12446748 (100.00%) 8352699642 (100.00%) 671.07
ip 12400920 ( 99.63%) 8341512221 ( 99.87%) 672.65
tcp 10084972 ( 81.02%) 7823524658 ( 93.66%) 775.76
http(s) 3842443 ( 30.87%) 5065792961 ( 60.65%) 1318.38
http(c) 2592221 ( 20.83%) 482533686 ( 5.78%) 186.15
squid 721738 ( 5.80%) 603864214 ( 7.23%) 836.68
smtp 549919 ( 4.42%) 101464091 ( 1.21%) 184.51
ftp 64096 ( 0.51%) 14085472 ( 0.17%) 219.76
pop3 8504 ( 0.07%) 3406526 ( 0.04%) 400.58
imap 26212 ( 0.21%) 3905878 ( 0.05%) 149.01
telnet 893 ( 0.01%) 73476 ( 0.00%) 82.28
ssh 240974 ( 1.94%) 222965743 ( 2.67%) 925.27
dns 1962 ( 0.02%) 154972 ( 0.00%) 78.99
bgp 191 ( 0.00%) 55154 ( 0.00%) 288.76
napster 20 ( 0.00%) 1905 ( 0.00%) 95.25
realaud 11 ( 0.00%) 1115 ( 0.00%) 101.36
rtsp 354506 ( 2.85%) 382092980 ( 4.57%) 1077.82
icecast 139 ( 0.00%) 10982 ( 0.00%) 79.01
hotline 4 ( 0.00%) 567 ( 0.00%) 141.75
other 1681138 ( 13.51%) 943114876 ( 11.29%) 561.00
udp 1863314 ( 14.97%) 431903051 ( 5.17%) 231.79
dns 847913 ( 6.81%) 126118967 ( 1.51%) 148.74
realaud 8713 ( 0.07%) 5459969 ( 0.07%) 626.65
halflif 7 ( 0.00%) 901 ( 0.00%) 128.71
starcra 18 ( 0.00%) 3837 ( 0.00%) 213.17
everque 32 ( 0.00%) 4426 ( 0.00%) 138.31
unreal 14 ( 0.00%) 3021 ( 0.00%) 215.79
quake 14 ( 0.00%) 2565 ( 0.00%) 183.21
cuseeme 4 ( 0.00%) 853 ( 0.00%) 213.25
other 1006582 ( 8.09%) 300302728 ( 3.60%) 298.34
icmp 330214 ( 2.65%) 32380573 ( 0.39%) 98.06
ipip 347 ( 0.00%) 41938 ( 0.00%) 120.86
ipsec 19320 ( 0.16%) 17962656 ( 0.22%) 929.74
ip6 1109 ( 0.01%) 155744 ( 0.00%) 140.44
other 101644 ( 0.82%) 35543601 ( 0.43%) 349.69
frag 1200 ( 0.01%) 988228 ( 0.01%) 823.52
ip6 45828 ( 0.37%) 11187421 ( 0.13%) 244.12
tcp6 20494 ( 0.16%) 2838610 ( 0.03%) 138.51
http(s) 425 ( 0.00%) 471500 ( 0.01%) 1109.41
http(c) 1606 ( 0.01%) 155099 ( 0.00%) 96.57
smtp 582 ( 0.00%) 246980 ( 0.00%) 424.36
ftp 5 ( 0.00%) 390 ( 0.00%) 78.00
ssh 15740 ( 0.13%) 1716936 ( 0.02%) 109.08
bgp 69 ( 0.00%) 7522 ( 0.00%) 109.01
other 2067 ( 0.02%) 240183 ( 0.00%) 116.20
udp6 16693 ( 0.13%) 3078871 ( 0.04%) 184.44
dns 15537 ( 0.12%) 2842896 ( 0.03%) 182.98
other 1156 ( 0.01%) 235975 ( 0.00%) 204.13
icmp6 5140 ( 0.04%) 733618 ( 0.01%) 142.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3471 ( 0.03%) 4532242 ( 0.05%) 1305.75
tcpdump file: 200803191400.dump.gz (308.43 MB)