Traffic Trace Info
DumpFile: 200804011400.dump
FileSize: 1427.51MB
Id: 200804011400
StartTime: Tue Apr 1 14:00:00 2008
EndTime: Tue Apr 1 14:15:01 2008
TotalTime: 900.94 seconds
TotalCapSize: 1116.89MB CapLen: 96 bytes
# of packets: 20356483 (13198.25MB)
AvgRate: 122.90Mbps stddev:21.44M
IP flow (unique src/dst pair) Information
# of flows: 736667 (avg. 27.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.1% 1.7% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 340037
Top 10 bandwidth usage (bytes/total in %):
9.6% 5.4% 5.3% 4.9% 4.2% 4.2% 3.4% 3.2% 2.1% 1.8%
# of IPv6 addresses: 2073
Top 10 bandwidth usage (bytes/total in %):
36.6% 29.7% 12.5% 8.9% 7.6% 4.3% 3.6% 3.0% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804011400.pktlen.png)
detailed numbers
[ 32- 63]: 4245860
[ 64- 127]: 5469447
[ 128- 255]: 1015802
[ 256- 511]: 617501
[ 512- 1023]: 499677
[ 1024- 2047]: 8508196
Protocol Breakdown
![[protocol breakdown chart]](200804011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20356483 (100.00%) 13839366068 (100.00%) 679.85
ip 20330600 ( 99.87%) 13833139597 ( 99.96%) 680.41
tcp 16487128 ( 80.99%) 12855370197 ( 92.89%) 779.72
http(s) 6588431 ( 32.37%) 8394750499 ( 60.66%) 1274.17
http(c) 3131738 ( 15.38%) 310978414 ( 2.25%) 99.30
squid 769068 ( 3.78%) 432905735 ( 3.13%) 562.90
smtp 1055765 ( 5.19%) 196354600 ( 1.42%) 185.98
nntp 369 ( 0.00%) 61948 ( 0.00%) 167.88
ftp 580873 ( 2.85%) 613156103 ( 4.43%) 1055.58
pop3 43018 ( 0.21%) 21274634 ( 0.15%) 494.55
imap 15532 ( 0.08%) 3747740 ( 0.03%) 241.29
telnet 2413 ( 0.01%) 300845 ( 0.00%) 124.68
ssh 312920 ( 1.54%) 162899630 ( 1.18%) 520.58
dns 9827 ( 0.05%) 747954 ( 0.01%) 76.11
bgp 221 ( 0.00%) 68531 ( 0.00%) 310.10
napster 63 ( 0.00%) 4406 ( 0.00%) 69.94
realaud 8 ( 0.00%) 564 ( 0.00%) 70.50
rtsp 403833 ( 1.98%) 393704731 ( 2.84%) 974.92
icecast 43807 ( 0.22%) 39423548 ( 0.28%) 899.94
hotline 1231 ( 0.01%) 84174 ( 0.00%) 68.38
other 3528005 ( 17.33%) 2284905781 ( 16.51%) 647.65
udp 3081805 ( 15.14%) 868715518 ( 6.28%) 281.89
dns 1462276 ( 7.18%) 199472461 ( 1.44%) 136.41
realaud 8710 ( 0.04%) 5459215 ( 0.04%) 626.78
halflif 10 ( 0.00%) 2229 ( 0.00%) 222.90
starcra 31 ( 0.00%) 5903 ( 0.00%) 190.42
everque 43 ( 0.00%) 7472 ( 0.00%) 173.77
unreal 27 ( 0.00%) 4741 ( 0.00%) 175.59
quake 27 ( 0.00%) 2325 ( 0.00%) 86.11
other 1609265 ( 7.91%) 663643955 ( 4.80%) 412.39
icmp 521616 ( 2.56%) 48705151 ( 0.35%) 93.37
ipip 64032 ( 0.31%) 20671573 ( 0.15%) 322.83
ipsec 2353 ( 0.01%) 554988 ( 0.00%) 235.86
ip6 696 ( 0.00%) 96557 ( 0.00%) 138.73
other 172970 ( 0.85%) 39025613 ( 0.28%) 225.62
frag 13046 ( 0.06%) 11188181 ( 0.08%) 857.59
ip6 25881 ( 0.13%) 6226351 ( 0.04%) 240.58
tcp6 2096 ( 0.01%) 412817 ( 0.00%) 196.95
http(s) 42 ( 0.00%) 55265 ( 0.00%) 1315.83
http(c) 456 ( 0.00%) 57042 ( 0.00%) 125.09
smtp 566 ( 0.00%) 187428 ( 0.00%) 331.14
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
ssh 9 ( 0.00%) 998 ( 0.00%) 110.89
dns 8 ( 0.00%) 729 ( 0.00%) 91.12
bgp 94 ( 0.00%) 11457 ( 0.00%) 121.88
other 887 ( 0.00%) 96770 ( 0.00%) 109.10
udp6 15201 ( 0.07%) 3051574 ( 0.02%) 200.75
dns 12645 ( 0.06%) 2281683 ( 0.02%) 180.44
everque 2 ( 0.00%) 278 ( 0.00%) 139.00
other 2554 ( 0.01%) 769613 ( 0.01%) 301.34
icmp6 6774 ( 0.03%) 964588 ( 0.01%) 142.40
ip6 70 ( 0.00%) 9410 ( 0.00%) 134.43
pim6 57 ( 0.00%) 6712 ( 0.00%) 117.75
other6 1683 ( 0.01%) 1781250 ( 0.01%) 1058.38
tcpdump file: 200804011400.dump.gz (517.41 MB)