Traffic Trace Info
DumpFile: 200804041400.dump
FileSize: 1402.10MB
Id: 200804041400
StartTime: Fri Apr 4 14:00:00 2008
EndTime: Fri Apr 4 14:15:01 2008
TotalTime: 900.27 seconds
TotalCapSize: 1096.45MB CapLen: 96 bytes
# of packets: 20030332 (11942.92MB)
AvgRate: 111.28Mbps stddev:13.95M
IP flow (unique src/dst pair) Information
# of flows: 854643 (avg. 23.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.2% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 463163
Top 10 bandwidth usage (bytes/total in %):
5.7% 4.7% 4.4% 3.7% 3.7% 3.5% 2.2% 1.9% 1.9% 1.8%
# of IPv6 addresses: 2098
Top 10 bandwidth usage (bytes/total in %):
26.4% 19.8% 10.9% 8.0% 6.5% 6.3% 5.0% 4.6% 4.5% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804041400.pktlen.png)
detailed numbers
[ 32- 63]: 3931338
[ 64- 127]: 6135552
[ 128- 255]: 1251903
[ 256- 511]: 756418
[ 512- 1023]: 537467
[ 1024- 2047]: 7417654
Protocol Breakdown
![[protocol breakdown chart]](200804041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20030332 (100.00%) 12523064230 (100.00%) 625.21
ip 20004914 ( 99.87%) 12516644495 ( 99.95%) 625.68
tcp 15110953 ( 75.44%) 11107500596 ( 88.70%) 735.06
http(s) 5635334 ( 28.13%) 6962878091 ( 55.60%) 1235.58
http(c) 2717567 ( 13.57%) 389221292 ( 3.11%) 143.22
squid 807140 ( 4.03%) 429564752 ( 3.43%) 532.21
smtp 1044767 ( 5.22%) 227266784 ( 1.81%) 217.53
ftp 231825 ( 1.16%) 127855510 ( 1.02%) 551.52
pop3 57956 ( 0.29%) 50130304 ( 0.40%) 864.97
imap 8879 ( 0.04%) 3177924 ( 0.03%) 357.91
telnet 2404 ( 0.01%) 247584 ( 0.00%) 102.99
ssh 144374 ( 0.72%) 46820640 ( 0.37%) 324.30
dns 3644 ( 0.02%) 344313 ( 0.00%) 94.49
bgp 212 ( 0.00%) 64962 ( 0.00%) 306.42
napster 1736 ( 0.01%) 1301410 ( 0.01%) 749.66
realaud 137 ( 0.00%) 17267 ( 0.00%) 126.04
rtsp 356602 ( 1.78%) 352001540 ( 2.81%) 987.10
icecast 31915 ( 0.16%) 30682232 ( 0.25%) 961.37
hotline 8 ( 0.00%) 610 ( 0.00%) 76.25
other 4066452 ( 20.30%) 2485925321 ( 19.85%) 611.33
udp 3421482 ( 17.08%) 1249350355 ( 9.98%) 365.15
dns 1175570 ( 5.87%) 178480378 ( 1.43%) 151.82
realaud 9050 ( 0.05%) 4134596 ( 0.03%) 456.86
halflif 12 ( 0.00%) 1348 ( 0.00%) 112.33
starcra 48 ( 0.00%) 8686 ( 0.00%) 180.96
everque 25 ( 0.00%) 3709 ( 0.00%) 148.36
unreal 27 ( 0.00%) 3967 ( 0.00%) 146.93
quake 19 ( 0.00%) 1992 ( 0.00%) 104.84
cuseeme 7 ( 0.00%) 638 ( 0.00%) 91.14
other 2199980 ( 10.98%) 1064264469 ( 8.50%) 483.76
icmp 1292687 ( 6.45%) 100517074 ( 0.80%) 77.76
ipip 331 ( 0.00%) 39054 ( 0.00%) 117.99
ipsec 8669 ( 0.04%) 3152782 ( 0.03%) 363.68
ip6 709 ( 0.00%) 92507 ( 0.00%) 130.48
other 170083 ( 0.85%) 55992127 ( 0.45%) 329.20
frag 91361 ( 0.46%) 70824520 ( 0.57%) 775.22
ip6 25418 ( 0.13%) 6419735 ( 0.05%) 252.57
tcp6 3249 ( 0.02%) 1136692 ( 0.01%) 349.86
http(s) 1216 ( 0.01%) 751107 ( 0.01%) 617.69
http(c) 507 ( 0.00%) 53205 ( 0.00%) 104.94
smtp 480 ( 0.00%) 221809 ( 0.00%) 462.10
pop3 34 ( 0.00%) 3134 ( 0.00%) 92.18
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 556 ( 0.00%) 111.20
bgp 66 ( 0.00%) 7022 ( 0.00%) 106.39
other 939 ( 0.00%) 99687 ( 0.00%) 106.16
udp6 15432 ( 0.08%) 3275093 ( 0.03%) 212.23
dns 12872 ( 0.06%) 2595538 ( 0.02%) 201.64
everque 2 ( 0.00%) 278 ( 0.00%) 139.00
other 2558 ( 0.01%) 679277 ( 0.01%) 265.55
icmp6 5569 ( 0.03%) 772019 ( 0.01%) 138.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1138 ( 0.01%) 1231851 ( 0.01%) 1082.47
tcpdump file: 200804041400.dump.gz (508.34 MB)