Traffic Trace Info
DumpFile: 200804031400.dump
FileSize: 1522.07MB
Id: 200804031400
StartTime: Thu Apr 3 14:00:01 2008
EndTime: Thu Apr 3 14:15:01 2008
TotalTime: 900.32 seconds
TotalCapSize: 1190.22MB CapLen: 96 bytes
# of packets: 21747034 (12567.31MB)
AvgRate: 117.11Mbps stddev:17.97M
IP flow (unique src/dst pair) Information
# of flows: 801751 (avg. 27.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 2.4% 2.1% 1.5% 1.2% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 415802
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.4% 5.5% 4.2% 3.5% 3.4% 3.2% 2.9% 2.7% 2.5%
# of IPv6 addresses: 1691
Top 10 bandwidth usage (bytes/total in %):
31.6% 31.6% 22.7% 18.5% 7.3% 6.8% 6.8% 4.7% 4.1% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804031400.pktlen.png)
detailed numbers
[ 32- 63]: 6342013
[ 64- 127]: 5376222
[ 128- 255]: 980298
[ 256- 511]: 619648
[ 512- 1023]: 477782
[ 1024- 2047]: 7951071
Protocol Breakdown
![[protocol breakdown chart]](200804031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21747034 (100.00%) 13177780782 (100.00%) 605.96
ip 21684835 ( 99.71%) 13167981311 ( 99.93%) 607.24
tcp 17894938 ( 82.29%) 11594043652 ( 87.98%) 647.90
http(s) 5803138 ( 26.68%) 7157223036 ( 54.31%) 1233.34
http(c) 3334460 ( 15.33%) 354744182 ( 2.69%) 106.39
squid 671428 ( 3.09%) 440556303 ( 3.34%) 656.15
smtp 968321 ( 4.45%) 236574627 ( 1.80%) 244.31
nntp 13 ( 0.00%) 1927 ( 0.00%) 148.23
ftp 189130 ( 0.87%) 40328400 ( 0.31%) 213.23
pop3 22693 ( 0.10%) 16220063 ( 0.12%) 714.76
imap 11166 ( 0.05%) 6034056 ( 0.05%) 540.40
telnet 2062 ( 0.01%) 355600 ( 0.00%) 172.45
ssh 226475 ( 1.04%) 37236929 ( 0.28%) 164.42
dns 5891 ( 0.03%) 493602 ( 0.00%) 83.79
bgp 212 ( 0.00%) 62751 ( 0.00%) 296.00
napster 117 ( 0.00%) 10692 ( 0.00%) 91.38
realaud 100 ( 0.00%) 7361 ( 0.00%) 73.61
rtsp 268856 ( 1.24%) 260717432 ( 1.98%) 969.73
icecast 20369 ( 0.09%) 22747633 ( 0.17%) 1116.78
hotline 394 ( 0.00%) 68883 ( 0.00%) 174.83
other 6370066 ( 29.29%) 3020657355 ( 22.92%) 474.20
udp 3141374 ( 14.45%) 1467058960 ( 11.13%) 467.01
dns 1229554 ( 5.65%) 189903257 ( 1.44%) 154.45
realaud 6516 ( 0.03%) 4001808 ( 0.03%) 614.15
halflif 12 ( 0.00%) 1502 ( 0.00%) 125.17
starcra 49 ( 0.00%) 9765 ( 0.00%) 199.29
everque 51 ( 0.00%) 7283 ( 0.00%) 142.80
unreal 16 ( 0.00%) 1774 ( 0.00%) 110.88
quake 5 ( 0.00%) 382 ( 0.00%) 76.40
other 1904438 ( 8.76%) 1272876194 ( 9.66%) 668.37
icmp 440751 ( 2.03%) 40192222 ( 0.30%) 91.19
ipip 305 ( 0.00%) 35390 ( 0.00%) 116.03
ipsec 7044 ( 0.03%) 1787422 ( 0.01%) 253.75
ip6 716 ( 0.00%) 94122 ( 0.00%) 131.46
other 199707 ( 0.92%) 64769543 ( 0.49%) 324.32
frag 693090 ( 3.19%) 848531331 ( 6.44%) 1224.27
ip6 62199 ( 0.29%) 9799471 ( 0.07%) 157.55
tcp6 37828 ( 0.17%) 3682682 ( 0.03%) 97.35
http(s) 359 ( 0.00%) 243065 ( 0.00%) 677.06
http(c) 35771 ( 0.16%) 3160906 ( 0.02%) 88.37
smtp 419 ( 0.00%) 142607 ( 0.00%) 340.35
pop3 34 ( 0.00%) 3172 ( 0.00%) 93.29
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 70 ( 0.00%) 7853 ( 0.00%) 112.19
other 1168 ( 0.01%) 124363 ( 0.00%) 106.48
udp6 17468 ( 0.08%) 3609039 ( 0.03%) 206.61
dns 15868 ( 0.07%) 3231167 ( 0.02%) 203.63
other 1600 ( 0.01%) 377872 ( 0.00%) 236.17
icmp6 5152 ( 0.02%) 686447 ( 0.01%) 133.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1720 ( 0.01%) 1817087 ( 0.01%) 1056.45
tcpdump file: 200804031400.dump.gz (548.15 MB)