Traffic Trace Info
DumpFile: 200803241400.dump
FileSize: 872.40MB
Id: 200803241400
StartTime: Mon Mar 24 14:00:01 2008
EndTime: Mon Mar 24 14:15:00 2008
TotalTime: 899.19 seconds
TotalCapSize: 683.93MB CapLen: 96 bytes
# of packets: 12351082 (7176.09MB)
AvgRate: 66.96Mbps stddev:15.13M
IP flow (unique src/dst pair) Information
# of flows: 679336 (avg. 18.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.9% 1.8% 1.7% 1.5% 1.2% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 368648
Top 10 bandwidth usage (bytes/total in %):
8.7% 5.7% 4.9% 3.8% 3.7% 2.8% 2.8% 2.5% 2.2% 2.2%
# of IPv6 addresses: 1324
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.7% 9.5% 8.2% 6.6% 6.5% 6.4% 5.2% 5.2% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803241400.pktlen.png)
detailed numbers
[ 32- 63]: 3084542
[ 64- 127]: 3385944
[ 128- 255]: 666204
[ 256- 511]: 431076
[ 512- 1023]: 304226
[ 1024- 2047]: 4479090
Protocol Breakdown
![[protocol breakdown chart]](200803241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12351082 (100.00%) 7524672465 (100.00%) 609.23
ip 12326092 ( 99.80%) 7520199784 ( 99.94%) 610.10
tcp 10326352 ( 83.61%) 7133443475 ( 94.80%) 690.80
http(s) 3295244 ( 26.68%) 4349155570 ( 57.80%) 1319.83
http(c) 2191600 ( 17.74%) 230522962 ( 3.06%) 105.18
squid 858330 ( 6.95%) 553771232 ( 7.36%) 645.17
smtp 653793 ( 5.29%) 148889578 ( 1.98%) 227.73
ftp 192845 ( 1.56%) 38129006 ( 0.51%) 197.72
pop3 10822 ( 0.09%) 4738255 ( 0.06%) 437.84
imap 10410 ( 0.08%) 6484818 ( 0.09%) 622.94
telnet 859 ( 0.01%) 139796 ( 0.00%) 162.74
ssh 37209 ( 0.30%) 5722374 ( 0.08%) 153.79
dns 2399 ( 0.02%) 172931 ( 0.00%) 72.08
bgp 198 ( 0.00%) 50802 ( 0.00%) 256.58
napster 1302 ( 0.01%) 132838 ( 0.00%) 102.03
realaud 9 ( 0.00%) 723 ( 0.00%) 80.33
rtsp 331953 ( 2.69%) 321823396 ( 4.28%) 969.48
icecast 51148 ( 0.41%) 60460280 ( 0.80%) 1182.07
hotline 23 ( 0.00%) 3700 ( 0.00%) 160.87
other 2688207 ( 21.76%) 1413245154 ( 18.78%) 525.72
udp 1501409 ( 12.16%) 317856040 ( 4.22%) 211.71
dns 951098 ( 7.70%) 145807086 ( 1.94%) 153.30
realaud 18060 ( 0.15%) 12367405 ( 0.16%) 684.80
halflif 14 ( 0.00%) 2368 ( 0.00%) 169.14
starcra 26 ( 0.00%) 5062 ( 0.00%) 194.69
everque 30 ( 0.00%) 3642 ( 0.00%) 121.40
unreal 17 ( 0.00%) 3130 ( 0.00%) 184.12
quake 32 ( 0.00%) 5126 ( 0.00%) 160.19
cuseeme 5 ( 0.00%) 592 ( 0.00%) 118.40
other 532045 ( 4.31%) 159630880 ( 2.12%) 300.03
icmp 425174 ( 3.44%) 38498906 ( 0.51%) 90.55
ipip 352 ( 0.00%) 42268 ( 0.00%) 120.08
ipsec 506 ( 0.00%) 58356 ( 0.00%) 115.33
ip6 909 ( 0.01%) 114974 ( 0.00%) 126.48
other 71390 ( 0.58%) 30185765 ( 0.40%) 422.83
frag 1679 ( 0.01%) 1416031 ( 0.02%) 843.38
ip6 24990 ( 0.20%) 4472681 ( 0.06%) 178.98
tcp6 2987 ( 0.02%) 501529 ( 0.01%) 167.90
http(s) 137 ( 0.00%) 153650 ( 0.00%) 1121.53
http(c) 559 ( 0.00%) 57369 ( 0.00%) 102.63
smtp 67 ( 0.00%) 12852 ( 0.00%) 191.82
pop3 88 ( 0.00%) 8820 ( 0.00%) 100.23
dns 14 ( 0.00%) 1484 ( 0.00%) 106.00
bgp 107 ( 0.00%) 13231 ( 0.00%) 123.65
other 2015 ( 0.02%) 254123 ( 0.00%) 126.12
udp6 15772 ( 0.13%) 3145403 ( 0.04%) 199.43
dns 14581 ( 0.12%) 2873675 ( 0.04%) 197.08
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1190 ( 0.01%) 271620 ( 0.00%) 228.25
icmp6 6198 ( 0.05%) 819646 ( 0.01%) 132.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 1887 ( 0.00%) 943.50
tcpdump file: 200803241400.dump.gz (318.68 MB)