Traffic Trace Info
DumpFile: 200803261400.dump
FileSize: 1387.67MB
Id: 200803261400
StartTime: Wed Mar 26 14:00:01 2008
EndTime: Wed Mar 26 14:15:01 2008
TotalTime: 900.20 seconds
TotalCapSize: 1089.65MB CapLen: 96 bytes
# of packets: 19530123 (11894.79MB)
AvgRate: 110.81Mbps stddev:19.74M
IP flow (unique src/dst pair) Information
# of flows: 685736 (avg. 28.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 5.3% 2.1% 1.9% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 354728
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.9% 8.1% 6.5% 5.3% 5.3% 4.1% 2.9% 2.6% 2.2%
# of IPv6 addresses: 1548
Top 10 bandwidth usage (bytes/total in %):
21.8% 17.2% 14.3% 12.0% 8.5% 7.8% 7.6% 6.7% 6.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803261400.pktlen.png)
detailed numbers
[ 32- 63]: 4345131
[ 64- 127]: 5404632
[ 128- 255]: 1140292
[ 256- 511]: 732538
[ 512- 1023]: 511336
[ 1024- 2047]: 7396194
Protocol Breakdown
![[protocol breakdown chart]](200803261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19530123 (100.00%) 12472591020 (100.00%) 638.63
ip 19499396 ( 99.84%) 12465255499 ( 99.94%) 639.26
tcp 16384638 ( 83.89%) 11916593448 ( 95.54%) 727.30
http(s) 6526752 ( 33.42%) 8155973856 ( 65.39%) 1249.62
http(c) 3245088 ( 16.62%) 415103076 ( 3.33%) 127.92
squid 785485 ( 4.02%) 291144715 ( 2.33%) 370.66
smtp 854284 ( 4.37%) 188344034 ( 1.51%) 220.47
nntp 3 ( 0.00%) 198 ( 0.00%) 66.00
ftp 27560 ( 0.14%) 6409555 ( 0.05%) 232.57
pop3 19101 ( 0.10%) 8234824 ( 0.07%) 431.12
imap 7682 ( 0.04%) 3073803 ( 0.02%) 400.13
telnet 312 ( 0.00%) 19920 ( 0.00%) 63.85
ssh 1358294 ( 6.95%) 431648784 ( 3.46%) 317.79
dns 2180 ( 0.01%) 184967 ( 0.00%) 84.85
bgp 213 ( 0.00%) 64295 ( 0.00%) 301.85
napster 42 ( 0.00%) 6041 ( 0.00%) 143.83
realaud 6924 ( 0.04%) 3690494 ( 0.03%) 533.00
rtsp 230307 ( 1.18%) 238069690 ( 1.91%) 1033.71
icecast 45673 ( 0.23%) 50134255 ( 0.40%) 1097.68
hotline 13 ( 0.00%) 1806 ( 0.00%) 138.92
other 3274713 ( 16.77%) 2124488415 ( 17.03%) 648.76
udp 2155520 ( 11.04%) 471781587 ( 3.78%) 218.87
dns 1143341 ( 5.85%) 170480794 ( 1.37%) 149.11
realaud 184 ( 0.00%) 58816 ( 0.00%) 319.65
halflif 22 ( 0.00%) 4667 ( 0.00%) 212.14
starcra 24 ( 0.00%) 3215 ( 0.00%) 133.96
everque 30 ( 0.00%) 5573 ( 0.00%) 185.77
unreal 11 ( 0.00%) 1455 ( 0.00%) 132.27
quake 18 ( 0.00%) 1561 ( 0.00%) 86.72
cuseeme 2 ( 0.00%) 496 ( 0.00%) 248.00
other 1011848 ( 5.18%) 301204934 ( 2.41%) 297.68
icmp 949358 ( 4.86%) 75352021 ( 0.60%) 79.37
ipip 359 ( 0.00%) 45162 ( 0.00%) 125.80
ipsec 2149 ( 0.01%) 522248 ( 0.00%) 243.02
ip6 875 ( 0.00%) 109352 ( 0.00%) 124.97
other 6497 ( 0.03%) 851681 ( 0.01%) 131.09
frag 1501 ( 0.01%) 1255705 ( 0.01%) 836.58
ip6 30727 ( 0.16%) 7335521 ( 0.06%) 238.73
tcp6 3278 ( 0.02%) 493650 ( 0.00%) 150.59
http(s) 156 ( 0.00%) 28694 ( 0.00%) 183.94
http(c) 435 ( 0.00%) 45616 ( 0.00%) 104.86
smtp 448 ( 0.00%) 147270 ( 0.00%) 328.73
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
dns 5 ( 0.00%) 543 ( 0.00%) 108.60
bgp 69 ( 0.00%) 7428 ( 0.00%) 107.65
other 2131 ( 0.01%) 260971 ( 0.00%) 122.46
udp6 20761 ( 0.11%) 4795813 ( 0.04%) 231.00
dns 19137 ( 0.10%) 4326999 ( 0.03%) 226.11
starcra 3 ( 0.00%) 417 ( 0.00%) 139.00
other 1621 ( 0.01%) 468397 ( 0.00%) 288.96
icmp6 6657 ( 0.03%) 2041842 ( 0.02%) 306.72
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200803261400.dump.gz (518.22 MB)