Traffic Trace Info
DumpFile: 200803211400.dump
FileSize: 930.16MB
Id: 200803211400
StartTime: Fri Mar 21 14:00:00 2008
EndTime: Fri Mar 21 14:15:01 2008
TotalTime: 900.42 seconds
TotalCapSize: 728.84MB CapLen: 96 bytes
# of packets: 13193034 (7697.93MB)
AvgRate: 71.72Mbps stddev:15.41M
IP flow (unique src/dst pair) Information
# of flows: 657584 (avg. 20.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.9% 2.7% 2.3% 1.9% 1.7% 1.6% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 339964
Top 10 bandwidth usage (bytes/total in %):
7.5% 7.4% 5.4% 4.9% 4.9% 4.8% 4.4% 3.9% 3.6% 3.4%
# of IPv6 addresses: 1552
Top 10 bandwidth usage (bytes/total in %):
38.3% 38.3% 16.5% 11.7% 6.2% 4.5% 3.5% 3.3% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803211400.pktlen.png)
detailed numbers
[ 32- 63]: 3466079
[ 64- 127]: 3510723
[ 128- 255]: 682746
[ 256- 511]: 443529
[ 512- 1023]: 309028
[ 1024- 2047]: 4780929
Protocol Breakdown
![[protocol breakdown chart]](200803211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13193034 (100.00%) 8071864808 (100.00%) 611.83
ip 13137879 ( 99.58%) 8064003316 ( 99.90%) 613.80
tcp 11317180 ( 85.78%) 7735735397 ( 95.84%) 683.54
http(s) 3522634 ( 26.70%) 4614516650 ( 57.17%) 1309.96
http(c) 2620932 ( 19.87%) 477618127 ( 5.92%) 182.23
squid 632190 ( 4.79%) 340501511 ( 4.22%) 538.61
smtp 564532 ( 4.28%) 117338928 ( 1.45%) 207.85
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 334279 ( 2.53%) 69411131 ( 0.86%) 207.64
pop3 30602 ( 0.23%) 31487508 ( 0.39%) 1028.94
imap 9378 ( 0.07%) 1353279 ( 0.02%) 144.30
telnet 1804 ( 0.01%) 236717 ( 0.00%) 131.22
ssh 586600 ( 4.45%) 426341896 ( 5.28%) 726.80
dns 2073 ( 0.02%) 156617 ( 0.00%) 75.55
bgp 203 ( 0.00%) 55085 ( 0.00%) 271.35
napster 185 ( 0.00%) 20873 ( 0.00%) 112.83
realaud 138 ( 0.00%) 36903 ( 0.00%) 267.41
rtsp 214400 ( 1.63%) 173806623 ( 2.15%) 810.67
icecast 25876 ( 0.20%) 30331134 ( 0.38%) 1172.17
hotline 11 ( 0.00%) 1356 ( 0.00%) 123.27
other 2771338 ( 21.01%) 1452520753 ( 17.99%) 524.12
udp 1425081 ( 10.80%) 291852393 ( 3.62%) 204.80
dns 856464 ( 6.49%) 129341436 ( 1.60%) 151.02
realaud 46446 ( 0.35%) 24036286 ( 0.30%) 517.51
halflif 4 ( 0.00%) 365 ( 0.00%) 91.25
starcra 26 ( 0.00%) 4342 ( 0.00%) 167.00
everque 34 ( 0.00%) 4498 ( 0.00%) 132.29
unreal 14 ( 0.00%) 2087 ( 0.00%) 149.07
quake 13 ( 0.00%) 1496 ( 0.00%) 115.08
cuseeme 11 ( 0.00%) 1573 ( 0.00%) 143.00
other 522059 ( 3.96%) 138454119 ( 1.72%) 265.21
icmp 388571 ( 2.95%) 35401089 ( 0.44%) 91.11
ipip 335 ( 0.00%) 38676 ( 0.00%) 115.45
ip6 1126 ( 0.01%) 155811 ( 0.00%) 138.38
other 5586 ( 0.04%) 819950 ( 0.01%) 146.79
frag 1289 ( 0.01%) 1058809 ( 0.01%) 821.42
ip6 55155 ( 0.42%) 7861492 ( 0.10%) 142.53
tcp6 35439 ( 0.27%) 3534642 ( 0.04%) 99.74
http(s) 58 ( 0.00%) 46821 ( 0.00%) 807.26
http(c) 1042 ( 0.01%) 103549 ( 0.00%) 99.38
smtp 477 ( 0.00%) 165377 ( 0.00%) 346.70
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
bgp 116 ( 0.00%) 14322 ( 0.00%) 123.47
other 33713 ( 0.26%) 3201531 ( 0.04%) 94.96
udp6 13640 ( 0.10%) 2666108 ( 0.03%) 195.46
dns 12110 ( 0.09%) 2278356 ( 0.03%) 188.14
other 1530 ( 0.01%) 387752 ( 0.00%) 253.43
icmp6 5244 ( 0.04%) 787046 ( 0.01%) 150.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 801 ( 0.01%) 869480 ( 0.01%) 1085.49
tcpdump file: 200803211400.dump.gz (335.92 MB)