Traffic Trace Info
DumpFile: 200803281400.dump
FileSize: 1253.54MB
Id: 200803281400
StartTime: Fri Mar 28 14:00:00 2008
EndTime: Fri Mar 28 14:15:00 2008
TotalTime: 900.05 seconds
TotalCapSize: 979.61MB CapLen: 96 bytes
# of packets: 17952041 (12120.58MB)
AvgRate: 112.96Mbps stddev:18.60M
IP flow (unique src/dst pair) Information
# of flows: 703409 (avg. 25.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.2% 2.5% 1.7% 1.5% 1.5% 1.4% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 375105
Top 10 bandwidth usage (bytes/total in %):
6.5% 6.4% 5.9% 5.4% 4.9% 3.8% 3.7% 3.7% 3.2% 3.2%
# of IPv6 addresses: 1231
Top 10 bandwidth usage (bytes/total in %):
13.8% 11.7% 11.4% 6.7% 6.7% 6.6% 6.3% 4.8% 4.7% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803281400.pktlen.png)
detailed numbers
[ 32- 63]: 3697069
[ 64- 127]: 4597024
[ 128- 255]: 939754
[ 256- 511]: 545577
[ 512- 1023]: 355135
[ 1024- 2047]: 7817482
Protocol Breakdown
![[protocol breakdown chart]](200803281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17952041 (100.00%) 12709353627 (100.00%) 707.96
ip 17931346 ( 99.88%) 12705759760 ( 99.97%) 708.58
tcp 14683486 ( 81.79%) 11832673571 ( 93.10%) 805.85
http(s) 5994272 ( 33.39%) 7651489100 ( 60.20%) 1276.47
http(c) 2885825 ( 16.08%) 395334630 ( 3.11%) 136.99
squid 442955 ( 2.47%) 348498961 ( 2.74%) 786.76
smtp 879546 ( 4.90%) 196038951 ( 1.54%) 222.89
nntp 10 ( 0.00%) 896 ( 0.00%) 89.60
ftp 282346 ( 1.57%) 278861313 ( 2.19%) 987.66
pop3 26784 ( 0.15%) 17284559 ( 0.14%) 645.33
imap 11793 ( 0.07%) 6698339 ( 0.05%) 567.99
telnet 2043 ( 0.01%) 394266 ( 0.00%) 192.98
ssh 261872 ( 1.46%) 237095197 ( 1.87%) 905.39
dns 2855 ( 0.02%) 212903 ( 0.00%) 74.57
bgp 209 ( 0.00%) 75149 ( 0.00%) 359.56
napster 88 ( 0.00%) 7265 ( 0.00%) 82.56
realaud 26 ( 0.00%) 5550 ( 0.00%) 213.46
rtsp 347812 ( 1.94%) 341582286 ( 2.69%) 982.09
icecast 15437 ( 0.09%) 22445204 ( 0.18%) 1453.99
other 3529605 ( 19.66%) 2336648522 ( 18.39%) 662.01
udp 2626519 ( 14.63%) 794918347 ( 6.25%) 302.65
dns 1267988 ( 7.06%) 181517533 ( 1.43%) 143.15
realaud 1032 ( 0.01%) 67501 ( 0.00%) 65.41
halflif 9 ( 0.00%) 1348 ( 0.00%) 149.78
starcra 27 ( 0.00%) 4931 ( 0.00%) 182.63
everque 39 ( 0.00%) 5104 ( 0.00%) 130.87
unreal 13 ( 0.00%) 3173 ( 0.00%) 244.08
quake 10 ( 0.00%) 1142 ( 0.00%) 114.20
cuseeme 2 ( 0.00%) 463 ( 0.00%) 231.50
other 1357185 ( 7.56%) 613286509 ( 4.83%) 451.88
icmp 485455 ( 2.70%) 43150077 ( 0.34%) 88.89
ipip 326 ( 0.00%) 38984 ( 0.00%) 119.58
ipsec 3203 ( 0.02%) 724486 ( 0.01%) 226.19
ip6 675 ( 0.00%) 85791 ( 0.00%) 127.10
other 131682 ( 0.73%) 34168504 ( 0.27%) 259.48
frag 2315 ( 0.01%) 1787620 ( 0.01%) 772.19
ip6 20695 ( 0.12%) 3593867 ( 0.03%) 173.66
tcp6 3507 ( 0.02%) 497707 ( 0.00%) 141.92
http(s) 64 ( 0.00%) 74798 ( 0.00%) 1168.72
http(c) 1407 ( 0.01%) 147830 ( 0.00%) 105.07
smtp 124 ( 0.00%) 40794 ( 0.00%) 328.98
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 165 ( 0.00%) 24786 ( 0.00%) 150.22
dns 10 ( 0.00%) 1008 ( 0.00%) 100.80
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1642 ( 0.01%) 199013 ( 0.00%) 121.20
udp6 11772 ( 0.07%) 2334609 ( 0.02%) 198.32
dns 10698 ( 0.06%) 2109311 ( 0.02%) 197.17
other 1074 ( 0.01%) 225298 ( 0.00%) 209.77
icmp6 5380 ( 0.03%) 751884 ( 0.01%) 139.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5587 ( 0.00%) 931.17
tcpdump file: 200803281400.dump.gz (453.33 MB)