Traffic Trace Info
DumpFile: 200803311400.dump
FileSize: 1295.61MB
Id: 200803311400
StartTime: Mon Mar 31 14:00:01 2008
EndTime: Mon Mar 31 14:15:00 2008
TotalTime: 899.24 seconds
TotalCapSize: 1012.56MB CapLen: 96 bytes
# of packets: 18549012 (11910.44MB)
AvgRate: 111.10Mbps stddev:14.02M
IP flow (unique src/dst pair) Information
# of flows: 903443 (avg. 20.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 2.6% 2.2% 1.4% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 550073
Top 10 bandwidth usage (bytes/total in %):
8.8% 6.8% 5.0% 4.9% 4.8% 4.5% 3.9% 3.8% 3.7% 2.7%
# of IPv6 addresses: 1631
Top 10 bandwidth usage (bytes/total in %):
52.7% 52.7% 12.0% 10.3% 9.9% 6.0% 4.7% 4.7% 4.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803311400.pktlen.png)
detailed numbers
[ 32- 63]: 3646070
[ 64- 127]: 4786262
[ 128- 255]: 1361010
[ 256- 511]: 629141
[ 512- 1023]: 425285
[ 1024- 2047]: 7701244
Protocol Breakdown
![[protocol breakdown chart]](200803311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18549012 (100.00%) 12488998329 (100.00%) 673.30
ip 18518893 ( 99.84%) 12472968492 ( 99.87%) 673.53
tcp 14562009 ( 78.51%) 11436208134 ( 91.57%) 785.35
http(s) 6745467 ( 36.37%) 8493347510 ( 68.01%) 1259.12
http(c) 3085202 ( 16.63%) 358147079 ( 2.87%) 116.09
squid 409688 ( 2.21%) 296832381 ( 2.38%) 724.53
smtp 1037230 ( 5.59%) 279567235 ( 2.24%) 269.53
nntp 61 ( 0.00%) 8608 ( 0.00%) 141.11
ftp 190851 ( 1.03%) 158704506 ( 1.27%) 831.56
pop3 34170 ( 0.18%) 21158689 ( 0.17%) 619.22
imap 10230 ( 0.06%) 4340236 ( 0.03%) 424.27
telnet 1090 ( 0.01%) 179870 ( 0.00%) 165.02
ssh 32324 ( 0.17%) 15712649 ( 0.13%) 486.10
dns 3189 ( 0.02%) 307521 ( 0.00%) 96.43
bgp 211 ( 0.00%) 61058 ( 0.00%) 289.37
napster 86 ( 0.00%) 6773 ( 0.00%) 78.76
realaud 103 ( 0.00%) 9634 ( 0.00%) 93.53
rtsp 25833 ( 0.14%) 22772022 ( 0.18%) 881.51
icecast 24506 ( 0.13%) 22958109 ( 0.18%) 936.84
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 2961756 ( 15.97%) 1762093522 ( 14.11%) 594.95
udp 3113461 ( 16.79%) 910677616 ( 7.29%) 292.50
dns 1148907 ( 6.19%) 172146433 ( 1.38%) 149.83
realaud 1356 ( 0.01%) 338578 ( 0.00%) 249.69
halflif 13 ( 0.00%) 1504 ( 0.00%) 115.69
starcra 38 ( 0.00%) 7688 ( 0.00%) 202.32
everque 22 ( 0.00%) 2490 ( 0.00%) 113.18
unreal 16 ( 0.00%) 3083 ( 0.00%) 192.69
quake 15 ( 0.00%) 1290 ( 0.00%) 86.00
cuseeme 13 ( 0.00%) 853 ( 0.00%) 65.62
other 1963009 ( 10.58%) 738127973 ( 5.91%) 376.02
icmp 605417 ( 3.26%) 54727137 ( 0.44%) 90.40
ipip 369 ( 0.00%) 43806 ( 0.00%) 118.72
ipsec 5309 ( 0.03%) 1403570 ( 0.01%) 264.38
ip6 669 ( 0.00%) 84862 ( 0.00%) 126.85
other 231659 ( 1.25%) 69823367 ( 0.56%) 301.41
frag 16167 ( 0.09%) 14704740 ( 0.12%) 909.55
ip6 30119 ( 0.16%) 16029837 ( 0.13%) 532.22
tcp6 10839 ( 0.06%) 11072751 ( 0.09%) 1021.57
http(s) 1704 ( 0.01%) 2342783 ( 0.02%) 1374.87
http(c) 8007 ( 0.04%) 8572325 ( 0.07%) 1070.60
smtp 120 ( 0.00%) 30095 ( 0.00%) 250.79
pop3 38 ( 0.00%) 3522 ( 0.00%) 92.68
ssh 7 ( 0.00%) 826 ( 0.00%) 118.00
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 69 ( 0.00%) 7515 ( 0.00%) 108.91
other 889 ( 0.00%) 115140 ( 0.00%) 129.52
udp6 12515 ( 0.07%) 2593143 ( 0.02%) 207.20
dns 11056 ( 0.06%) 2150541 ( 0.02%) 194.51
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1458 ( 0.01%) 442486 ( 0.00%) 303.49
icmp6 5165 ( 0.03%) 719296 ( 0.01%) 139.26
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1569 ( 0.01%) 1640431 ( 0.01%) 1045.53
tcpdump file: 200803311400.dump.gz (460.50 MB)