Traffic Trace Info
DumpFile: 200804021400.dump
FileSize: 1391.91MB
Id: 200804021400
StartTime: Wed Apr 2 14:00:01 2008
EndTime: Wed Apr 2 14:15:01 2008
TotalTime: 900.32 seconds
TotalCapSize: 1088.95MB CapLen: 96 bytes
# of packets: 19853801 (13118.31MB)
AvgRate: 122.25Mbps stddev:22.40M
IP flow (unique src/dst pair) Information
# of flows: 806788 (avg. 24.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.7% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 436864
Top 10 bandwidth usage (bytes/total in %):
9.1% 4.5% 3.8% 3.5% 3.3% 3.0% 2.6% 2.6% 2.3% 2.1%
# of IPv6 addresses: 1721
Top 10 bandwidth usage (bytes/total in %):
33.7% 28.7% 9.2% 8.3% 7.3% 6.3% 5.3% 4.9% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804021400.pktlen.png)
detailed numbers
[ 32- 63]: 3625075
[ 64- 127]: 5672648
[ 128- 255]: 977866
[ 256- 511]: 549331
[ 512- 1023]: 607534
[ 1024- 2047]: 8421347
Protocol Breakdown
![[protocol breakdown chart]](200804021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19853801 (100.00%) 13755549446 (100.00%) 692.84
ip 19828360 ( 99.87%) 13749243689 ( 99.95%) 693.41
tcp 16147404 ( 81.33%) 12750498160 ( 92.69%) 789.63
http(s) 7310718 ( 36.82%) 9254512660 ( 67.28%) 1265.88
http(c) 3608016 ( 18.17%) 383769160 ( 2.79%) 106.37
squid 328750 ( 1.66%) 253724044 ( 1.84%) 771.78
smtp 1057145 ( 5.32%) 273872180 ( 1.99%) 259.07
ftp 569015 ( 2.87%) 664235347 ( 4.83%) 1167.34
pop3 26524 ( 0.13%) 8211918 ( 0.06%) 309.60
imap 10051 ( 0.05%) 4369773 ( 0.03%) 434.76
telnet 2063 ( 0.01%) 243290 ( 0.00%) 117.93
ssh 482172 ( 2.43%) 183572356 ( 1.33%) 380.72
dns 4396 ( 0.02%) 408513 ( 0.00%) 92.93
bgp 193 ( 0.00%) 58717 ( 0.00%) 304.23
napster 188 ( 0.00%) 16199 ( 0.00%) 86.16
realaud 13 ( 0.00%) 1257 ( 0.00%) 96.69
rtsp 183459 ( 0.92%) 182892643 ( 1.33%) 996.91
icecast 21897 ( 0.11%) 22845486 ( 0.17%) 1043.32
other 2542800 ( 12.81%) 1517764377 ( 11.03%) 596.89
udp 3026574 ( 15.24%) 898496022 ( 6.53%) 296.87
dns 1231484 ( 6.20%) 187170654 ( 1.36%) 151.99
realaud 1757 ( 0.01%) 105851 ( 0.00%) 60.25
halflif 23 ( 0.00%) 3281 ( 0.00%) 142.65
starcra 40 ( 0.00%) 6823 ( 0.00%) 170.57
everque 48 ( 0.00%) 7641 ( 0.00%) 159.19
unreal 29 ( 0.00%) 3512 ( 0.00%) 121.10
quake 12 ( 0.00%) 1167 ( 0.00%) 97.25
cuseeme 43 ( 0.00%) 3054 ( 0.00%) 71.02
other 1793020 ( 9.03%) 711146895 ( 5.17%) 396.62
icmp 463750 ( 2.34%) 41730592 ( 0.30%) 89.99
ipip 294 ( 0.00%) 34596 ( 0.00%) 117.67
ipsec 3783 ( 0.02%) 935138 ( 0.01%) 247.19
ip6 717 ( 0.00%) 94441 ( 0.00%) 131.72
other 185838 ( 0.94%) 57454740 ( 0.42%) 309.17
frag 18523 ( 0.09%) 14032302 ( 0.10%) 757.56
ip6 25439 ( 0.13%) 6305637 ( 0.05%) 247.87
tcp6 1929 ( 0.01%) 480935 ( 0.00%) 249.32
http(s) 222 ( 0.00%) 256877 ( 0.00%) 1157.10
http(c) 389 ( 0.00%) 40618 ( 0.00%) 104.42
smtp 195 ( 0.00%) 62054 ( 0.00%) 318.23
pop3 36 ( 0.00%) 3306 ( 0.00%) 91.83
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 463 ( 0.00%) 115.75
bgp 92 ( 0.00%) 11415 ( 0.00%) 124.08
other 989 ( 0.00%) 106030 ( 0.00%) 107.21
udp6 16789 ( 0.08%) 3317852 ( 0.02%) 197.62
dns 14998 ( 0.08%) 2885309 ( 0.02%) 192.38
everque 3 ( 0.00%) 415 ( 0.00%) 138.33
other 1788 ( 0.01%) 432128 ( 0.00%) 241.68
icmp6 4955 ( 0.02%) 670359 ( 0.00%) 135.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1735 ( 0.01%) 1832275 ( 0.01%) 1056.07
tcpdump file: 200804021400.dump.gz (508.13 MB)