Traffic Trace Info
DumpFile: 200803201400.dump
FileSize: 841.92MB
Id: 200803201400
StartTime: Thu Mar 20 14:00:00 2008
EndTime: Thu Mar 20 14:15:00 2008
TotalTime: 899.74 seconds
TotalCapSize: 658.11MB CapLen: 96 bytes
# of packets: 12045841 (7127.72MB)
AvgRate: 66.44Mbps stddev:17.83M
IP flow (unique src/dst pair) Information
# of flows: 620153 (avg. 19.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.0% 2.8% 1.7% 1.5% 1.4% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 355862
Top 10 bandwidth usage (bytes/total in %):
9.6% 7.5% 5.5% 5.3% 4.7% 4.2% 3.9% 3.9% 3.1% 2.9%
# of IPv6 addresses: 1306
Top 10 bandwidth usage (bytes/total in %):
56.3% 52.3% 11.0% 8.8% 3.7% 3.4% 2.7% 2.7% 2.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803201400.pktlen.png)
detailed numbers
[ 32- 63]: 2557792
[ 64- 127]: 3359531
[ 128- 255]: 746184
[ 256- 511]: 622054
[ 512- 1023]: 372021
[ 1024- 2047]: 4388259
Protocol Breakdown
![[protocol breakdown chart]](200803201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12045841 (100.00%) 7473953287 (100.00%) 620.46
ip 12018833 ( 99.78%) 7465267778 ( 99.88%) 621.13
tcp 9764244 ( 81.06%) 6922678542 ( 92.62%) 708.98
http(s) 2899154 ( 24.07%) 3903938038 ( 52.23%) 1346.58
http(c) 1528108 ( 12.69%) 146940995 ( 1.97%) 96.16
squid 541991 ( 4.50%) 289820325 ( 3.88%) 534.73
smtp 592427 ( 4.92%) 108557724 ( 1.45%) 183.24
ftp 148202 ( 1.23%) 105120038 ( 1.41%) 709.30
pop3 5883 ( 0.05%) 1941587 ( 0.03%) 330.03
imap 13925 ( 0.12%) 4340566 ( 0.06%) 311.71
telnet 303 ( 0.00%) 19725 ( 0.00%) 65.10
ssh 831526 ( 6.90%) 448475298 ( 6.00%) 539.34
dns 1765 ( 0.01%) 133849 ( 0.00%) 75.84
bgp 219 ( 0.00%) 80282 ( 0.00%) 366.58
napster 16 ( 0.00%) 2687 ( 0.00%) 167.94
realaud 75 ( 0.00%) 9370 ( 0.00%) 124.93
rtsp 6811 ( 0.06%) 4387216 ( 0.06%) 644.14
icecast 6232 ( 0.05%) 1544271 ( 0.02%) 247.80
hotline 75 ( 0.00%) 28741 ( 0.00%) 383.21
other 3187529 ( 26.46%) 1907337650 ( 25.52%) 598.37
udp 1874804 ( 15.56%) 505444332 ( 6.76%) 269.60
dns 865646 ( 7.19%) 128846082 ( 1.72%) 148.84
realaud 11019 ( 0.09%) 5593615 ( 0.07%) 507.63
halflif 9 ( 0.00%) 1816 ( 0.00%) 201.78
starcra 4390 ( 0.04%) 2457794 ( 0.03%) 559.86
everque 44 ( 0.00%) 7157 ( 0.00%) 162.66
unreal 15 ( 0.00%) 2530 ( 0.00%) 168.67
quake 21 ( 0.00%) 2293 ( 0.00%) 109.19
cuseeme 2 ( 0.00%) 206 ( 0.00%) 103.00
other 993593 ( 8.25%) 368510947 ( 4.93%) 370.89
icmp 366748 ( 3.04%) 34922690 ( 0.47%) 95.22
ipip 362 ( 0.00%) 42660 ( 0.00%) 117.85
ip6 1038 ( 0.01%) 144360 ( 0.00%) 139.08
other 11637 ( 0.10%) 2035194 ( 0.03%) 174.89
frag 2552 ( 0.02%) 2033496 ( 0.03%) 796.82
ip6 27008 ( 0.22%) 8685509 ( 0.12%) 321.59
tcp6 3250 ( 0.03%) 450280 ( 0.01%) 138.55
http(s) 4 ( 0.00%) 526 ( 0.00%) 131.50
http(c) 983 ( 0.01%) 102658 ( 0.00%) 104.43
smtp 416 ( 0.00%) 127982 ( 0.00%) 307.65
pop3 76 ( 0.00%) 7379 ( 0.00%) 97.09
bgp 103 ( 0.00%) 12108 ( 0.00%) 117.55
other 1668 ( 0.01%) 199627 ( 0.00%) 119.68
udp6 15036 ( 0.12%) 2979006 ( 0.04%) 198.12
dns 14049 ( 0.12%) 2750094 ( 0.04%) 195.75
other 987 ( 0.01%) 228912 ( 0.00%) 231.93
icmp6 5221 ( 0.04%) 712237 ( 0.01%) 136.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3471 ( 0.03%) 4539906 ( 0.06%) 1307.95
tcpdump file: 200803201400.dump.gz (309.17 MB)