Traffic Trace Info
DumpFile: 200803301400.dump
FileSize: 976.54MB
Id: 200803301400
StartTime: Sun Mar 30 14:00:00 2008
EndTime: Sun Mar 30 14:15:00 2008
TotalTime: 900.11 seconds
TotalCapSize: 765.81MB CapLen: 96 bytes
# of packets: 13809890 (9058.54MB)
AvgRate: 84.44Mbps stddev:13.01M
IP flow (unique src/dst pair) Information
# of flows: 619667 (avg. 22.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.9% 4.6% 2.5% 2.5% 2.1% 2.1% 1.8% 1.7% 1.2%
IP address Information
# of IPv4 addresses: 312101
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.1% 6.6% 6.6% 5.2% 5.1% 5.1% 5.1% 5.1% 5.0%
# of IPv6 addresses: 1322
Top 10 bandwidth usage (bytes/total in %):
94.9% 91.1% 3.8% 2.1% 1.8% 0.4% 0.4% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803301400.pktlen.png)
detailed numbers
[ 32- 63]: 2941646
[ 64- 127]: 3560695
[ 128- 255]: 785314
[ 256- 511]: 428485
[ 512- 1023]: 326578
[ 1024- 2047]: 5767172
Protocol Breakdown
![[protocol breakdown chart]](200803301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13809890 (100.00%) 9498567828 (100.00%) 687.81
ip 13729063 ( 99.41%) 9403016528 ( 98.99%) 684.90
tcp 11747049 ( 85.06%) 9094623825 ( 95.75%) 774.20
http(s) 3102628 ( 22.47%) 4150268060 ( 43.69%) 1337.66
http(c) 1669969 ( 12.09%) 156275717 ( 1.65%) 93.58
squid 567153 ( 4.11%) 440430040 ( 4.64%) 776.56
smtp 854426 ( 6.19%) 147811264 ( 1.56%) 172.99
nntp 30 ( 0.00%) 2963 ( 0.00%) 98.77
ftp 203828 ( 1.48%) 110904315 ( 1.17%) 544.11
pop3 35885 ( 0.26%) 16740704 ( 0.18%) 466.51
imap 4323 ( 0.03%) 1060322 ( 0.01%) 245.27
telnet 1114 ( 0.01%) 106481 ( 0.00%) 95.58
ssh 736191 ( 5.33%) 634597023 ( 6.68%) 862.00
dns 2917 ( 0.02%) 256816 ( 0.00%) 88.04
bgp 179 ( 0.00%) 38819 ( 0.00%) 216.87
realaud 5 ( 0.00%) 663 ( 0.00%) 132.60
rtsp 15014 ( 0.11%) 3492438 ( 0.04%) 232.61
icecast 8542 ( 0.06%) 1937238 ( 0.02%) 226.79
other 4544843 ( 32.91%) 3430700842 ( 36.12%) 754.86
udp 1420675 ( 10.29%) 248993450 ( 2.62%) 175.26
dns 910481 ( 6.59%) 136664571 ( 1.44%) 150.10
realaud 1200 ( 0.01%) 73085 ( 0.00%) 60.90
halflif 5 ( 0.00%) 842 ( 0.00%) 168.40
starcra 32 ( 0.00%) 5946 ( 0.00%) 185.81
everque 42 ( 0.00%) 5845 ( 0.00%) 139.17
unreal 10 ( 0.00%) 1752 ( 0.00%) 175.20
quake 5 ( 0.00%) 715 ( 0.00%) 143.00
cuseeme 2 ( 0.00%) 181 ( 0.00%) 90.50
other 508842 ( 3.68%) 112217378 ( 1.18%) 220.53
icmp 532513 ( 3.86%) 46321283 ( 0.49%) 86.99
ipip 314 ( 0.00%) 37200 ( 0.00%) 118.47
ipsec 1281 ( 0.01%) 247214 ( 0.00%) 192.99
ip6 672 ( 0.00%) 84558 ( 0.00%) 125.83
other 26559 ( 0.19%) 12708998 ( 0.13%) 478.52
frag 11034 ( 0.08%) 9638226 ( 0.10%) 873.50
ip6 80827 ( 0.59%) 95551300 ( 1.01%) 1182.17
tcp6 63535 ( 0.46%) 91039910 ( 0.96%) 1432.91
http(s) 2916 ( 0.02%) 3597759 ( 0.04%) 1233.80
http(c) 800 ( 0.01%) 100302 ( 0.00%) 125.38
smtp 91 ( 0.00%) 20358 ( 0.00%) 223.71
ftp 223 ( 0.00%) 26445 ( 0.00%) 118.59
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
dns 8 ( 0.00%) 1796 ( 0.00%) 224.50
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 59401 ( 0.43%) 87283674 ( 0.92%) 1469.40
udp6 10563 ( 0.08%) 2076394 ( 0.02%) 196.57
dns 9410 ( 0.07%) 1858836 ( 0.02%) 197.54
quake 2 ( 0.00%) 232 ( 0.00%) 116.00
other 1151 ( 0.01%) 217326 ( 0.00%) 188.81
icmp6 5030 ( 0.04%) 680738 ( 0.01%) 135.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1669 ( 0.01%) 1750178 ( 0.02%) 1048.64
tcpdump file: 200803301400.dump.gz (350.62 MB)