Traffic Trace Info
DumpFile: 200803231400.dump
FileSize: 834.33MB
Id: 200803231400
StartTime: Sun Mar 23 14:00:00 2008
EndTime: Sun Mar 23 14:15:01 2008
TotalTime: 900.54 seconds
TotalCapSize: 656.40MB CapLen: 96 bytes
# of packets: 11660135 (6624.25MB)
AvgRate: 61.71Mbps stddev:8.62M
IP flow (unique src/dst pair) Information
# of flows: 493903 (avg. 23.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.7% 4.0% 2.6% 1.6% 1.3% 1.1% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 281015
Top 10 bandwidth usage (bytes/total in %):
16.3% 13.5% 6.9% 6.5% 5.4% 4.9% 4.7% 4.1% 3.4% 3.2%
# of IPv6 addresses: 1118
Top 10 bandwidth usage (bytes/total in %):
16.8% 11.1% 9.1% 8.6% 8.1% 6.7% 6.7% 5.1% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803231400.pktlen.png)
detailed numbers
[ 32- 63]: 2327226
[ 64- 127]: 3765687
[ 128- 255]: 663657
[ 256- 511]: 410039
[ 512- 1023]: 220832
[ 1024- 2047]: 4272694
Protocol Breakdown
![[protocol breakdown chart]](200803231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11660135 (100.00%) 6946024409 (100.00%) 595.71
ip 11639712 ( 99.82%) 6942438603 ( 99.95%) 596.44
tcp 9620158 ( 82.50%) 6470953905 ( 93.16%) 672.65
http(s) 2416246 ( 20.72%) 3076383464 ( 44.29%) 1273.21
http(c) 1370941 ( 11.76%) 154471118 ( 2.22%) 112.68
squid 508091 ( 4.36%) 300241528 ( 4.32%) 590.92
smtp 517083 ( 4.43%) 86766102 ( 1.25%) 167.80
nntp 56 ( 0.00%) 3640 ( 0.00%) 65.00
ftp 201386 ( 1.73%) 47274509 ( 0.68%) 234.75
pop3 3437 ( 0.03%) 1423488 ( 0.02%) 414.17
imap 11667 ( 0.10%) 2911417 ( 0.04%) 249.54
telnet 467 ( 0.00%) 44050 ( 0.00%) 94.33
ssh 566102 ( 4.86%) 396600700 ( 5.71%) 700.58
dns 1731 ( 0.01%) 130473 ( 0.00%) 75.37
bgp 187 ( 0.00%) 45600 ( 0.00%) 243.85
napster 219 ( 0.00%) 23943 ( 0.00%) 109.33
realaud 4472 ( 0.04%) 2943742 ( 0.04%) 658.26
rtsp 2270 ( 0.02%) 1676918 ( 0.02%) 738.73
icecast 17146 ( 0.15%) 6269500 ( 0.09%) 365.65
other 3998654 ( 34.29%) 2393743533 ( 34.46%) 598.64
udp 1563381 ( 13.41%) 428624137 ( 6.17%) 274.16
dns 759793 ( 6.52%) 123772578 ( 1.78%) 162.90
realaud 1950 ( 0.02%) 144023 ( 0.00%) 73.86
halflif 7 ( 0.00%) 809 ( 0.00%) 115.57
starcra 20 ( 0.00%) 3704 ( 0.00%) 185.20
everque 26 ( 0.00%) 4941 ( 0.00%) 190.04
unreal 4 ( 0.00%) 535 ( 0.00%) 133.75
quake 11 ( 0.00%) 1342 ( 0.00%) 122.00
cuseeme 21 ( 0.00%) 1954 ( 0.00%) 93.05
other 801524 ( 6.87%) 304686655 ( 4.39%) 380.13
icmp 444265 ( 3.81%) 40166791 ( 0.58%) 90.41
ipip 334 ( 0.00%) 39420 ( 0.00%) 118.02
ip6 879 ( 0.01%) 109890 ( 0.00%) 125.02
other 10695 ( 0.09%) 2544460 ( 0.04%) 237.91
frag 1799 ( 0.02%) 1428132 ( 0.02%) 793.85
ip6 20423 ( 0.18%) 3585806 ( 0.05%) 175.58
tcp6 4234 ( 0.04%) 628483 ( 0.01%) 148.44
http(s) 52 ( 0.00%) 62827 ( 0.00%) 1208.21
http(c) 841 ( 0.01%) 90228 ( 0.00%) 107.29
smtp 437 ( 0.00%) 159610 ( 0.00%) 365.24
pop3 69 ( 0.00%) 7043 ( 0.00%) 102.07
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 105 ( 0.00%) 12626 ( 0.00%) 120.25
other 2723 ( 0.02%) 295514 ( 0.00%) 108.53
udp6 11207 ( 0.10%) 2287662 ( 0.03%) 204.13
dns 10233 ( 0.09%) 2001517 ( 0.03%) 195.59
unreal 6 ( 0.00%) 768 ( 0.00%) 128.00
other 968 ( 0.01%) 285377 ( 0.00%) 294.81
icmp6 4950 ( 0.04%) 663824 ( 0.01%) 134.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1757 ( 0.00%) 878.50
tcpdump file: 200803231400.dump.gz (308.06 MB)