Traffic Trace Info
DumpFile: 200803291400.dump
FileSize: 1177.09MB
Id: 200803291400
StartTime: Sat Mar 29 14:00:00 2008
EndTime: Sat Mar 29 14:15:01 2008
TotalTime: 900.38 seconds
TotalCapSize: 922.93MB CapLen: 96 bytes
# of packets: 16655747 (11261.18MB)
AvgRate: 104.93Mbps stddev:15.52M
IP flow (unique src/dst pair) Information
# of flows: 769415 (avg. 21.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.8% 1.9% 1.7% 1.6% 1.5% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 442172
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.1% 6.0% 6.0% 5.1% 4.0% 3.7% 3.4% 2.9% 1.9%
# of IPv6 addresses: 1253
Top 10 bandwidth usage (bytes/total in %):
34.5% 28.9% 15.4% 15.4% 8.0% 5.2% 4.1% 4.1% 4.1% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803291400.pktlen.png)
detailed numbers
[ 32- 63]: 3282909
[ 64- 127]: 4432169
[ 128- 255]: 908450
[ 256- 511]: 481580
[ 512- 1023]: 268006
[ 1024- 2047]: 7282633
Protocol Breakdown
![[protocol breakdown chart]](200803291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16655747 (100.00%) 11808206835 (100.00%) 708.96
ip 16635121 ( 99.88%) 11802345882 ( 99.95%) 709.48
tcp 13925462 ( 83.61%) 11274295505 ( 95.48%) 809.62
http(s) 4986476 ( 29.94%) 6639988955 ( 56.23%) 1331.60
http(c) 2459963 ( 14.77%) 223711475 ( 1.89%) 90.94
squid 409037 ( 2.46%) 264999740 ( 2.24%) 647.86
smtp 871254 ( 5.23%) 175452332 ( 1.49%) 201.38
nntp 31 ( 0.00%) 24286 ( 0.00%) 783.42
ftp 288439 ( 1.73%) 221381787 ( 1.87%) 767.52
pop3 9108 ( 0.05%) 3658940 ( 0.03%) 401.73
imap 6564 ( 0.04%) 2565446 ( 0.02%) 390.84
telnet 746 ( 0.00%) 90142 ( 0.00%) 120.83
ssh 228297 ( 1.37%) 247010532 ( 2.09%) 1081.97
dns 18573 ( 0.11%) 2813647 ( 0.02%) 151.49
bgp 224 ( 0.00%) 71996 ( 0.00%) 321.41
napster 85990 ( 0.52%) 125102392 ( 1.06%) 1454.85
realaud 39 ( 0.00%) 6002 ( 0.00%) 153.90
rtsp 294868 ( 1.77%) 289841540 ( 2.45%) 982.95
icecast 4014 ( 0.02%) 4936362 ( 0.04%) 1229.79
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 4261831 ( 25.59%) 3072639423 ( 26.02%) 720.97
udp 2034754 ( 12.22%) 449705451 ( 3.81%) 221.01
dns 1175681 ( 7.06%) 166801387 ( 1.41%) 141.88
realaud 16707 ( 0.10%) 6079984 ( 0.05%) 363.92
halflif 12 ( 0.00%) 1739 ( 0.00%) 144.92
starcra 37 ( 0.00%) 7864 ( 0.00%) 212.54
everque 28 ( 0.00%) 3759 ( 0.00%) 134.25
unreal 7 ( 0.00%) 1227 ( 0.00%) 175.29
quake 5 ( 0.00%) 747 ( 0.00%) 149.40
cuseeme 4 ( 0.00%) 369 ( 0.00%) 92.25
other 842235 ( 5.06%) 276786073 ( 2.34%) 328.63
icmp 545821 ( 3.28%) 47264644 ( 0.40%) 86.59
ipip 314 ( 0.00%) 38030 ( 0.00%) 121.11
ipsec 804 ( 0.00%) 107736 ( 0.00%) 134.00
ip6 700 ( 0.00%) 90292 ( 0.00%) 128.99
other 127266 ( 0.76%) 30844224 ( 0.26%) 242.36
frag 1333 ( 0.01%) 1126745 ( 0.01%) 845.27
ip6 20626 ( 0.12%) 5860953 ( 0.05%) 284.15
tcp6 3418 ( 0.02%) 1327217 ( 0.01%) 388.30
http(s) 727 ( 0.00%) 906973 ( 0.01%) 1247.56
http(c) 410 ( 0.00%) 43116 ( 0.00%) 105.16
smtp 329 ( 0.00%) 131173 ( 0.00%) 398.70
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 84 ( 0.00%) 9901 ( 0.00%) 117.87
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 1772 ( 0.01%) 226463 ( 0.00%) 127.80
udp6 10471 ( 0.06%) 2133479 ( 0.02%) 203.75
dns 9462 ( 0.06%) 1898863 ( 0.02%) 200.68
other 1009 ( 0.01%) 234616 ( 0.00%) 232.52
icmp6 5107 ( 0.03%) 702852 ( 0.01%) 137.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1600 ( 0.01%) 1693325 ( 0.01%) 1058.33
tcpdump file: 200803291400.dump.gz (417.49 MB)