Traffic Trace Info
DumpFile: 200804051400.dump
FileSize: 1121.95MB
Id: 200804051400
StartTime: Sat Apr 5 14:00:00 2008
EndTime: Sat Apr 5 14:15:01 2008
TotalTime: 900.59 seconds
TotalCapSize: 880.75MB CapLen: 96 bytes
# of packets: 15806540 (9853.29MB)
AvgRate: 91.79Mbps stddev:14.11M
IP flow (unique src/dst pair) Information
# of flows: 840232 (avg. 18.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.6% 2.4% 2.4% 2.3% 1.7% 1.5% 1.4% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 496096
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.8% 5.4% 4.6% 4.4% 4.0% 3.7% 3.5% 2.7% 2.5%
# of IPv6 addresses: 1860
Top 10 bandwidth usage (bytes/total in %):
79.9% 79.9% 4.5% 2.4% 2.4% 1.8% 1.7% 1.7% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804051400.pktlen.png)
detailed numbers
[ 32- 63]: 3279125
[ 64- 127]: 4099734
[ 128- 255]: 1071441
[ 256- 511]: 598017
[ 512- 1023]: 689846
[ 1024- 2047]: 6068377
Protocol Breakdown
![[protocol breakdown chart]](200804051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15806540 (100.00%) 10331918830 (100.00%) 653.65
ip 15768128 ( 99.76%) 10309432140 ( 99.78%) 653.81
tcp 12956813 ( 81.97%) 9609732694 ( 93.01%) 741.67
http(s) 4585565 ( 29.01%) 5845552565 ( 56.58%) 1274.77
http(c) 2288143 ( 14.48%) 245620471 ( 2.38%) 107.34
squid 486723 ( 3.08%) 307802464 ( 2.98%) 632.40
smtp 996360 ( 6.30%) 180342316 ( 1.75%) 181.00
ftp 606808 ( 3.84%) 719565436 ( 6.96%) 1185.82
pop3 16642 ( 0.11%) 3502709 ( 0.03%) 210.47
imap 138221 ( 0.87%) 9844226 ( 0.10%) 71.22
telnet 430 ( 0.00%) 70463 ( 0.00%) 163.87
ssh 445949 ( 2.82%) 127520869 ( 1.23%) 285.95
dns 3403 ( 0.02%) 310998 ( 0.00%) 91.39
bgp 188 ( 0.00%) 56265 ( 0.00%) 299.28
napster 181 ( 0.00%) 14081 ( 0.00%) 77.80
realaud 17 ( 0.00%) 2280 ( 0.00%) 134.12
rtsp 133928 ( 0.85%) 104891372 ( 1.02%) 783.19
icecast 27597 ( 0.17%) 32255421 ( 0.31%) 1168.80
other 3226657 ( 20.41%) 2032380698 ( 19.67%) 629.87
udp 2339621 ( 14.80%) 656156803 ( 6.35%) 280.45
dns 1019886 ( 6.45%) 155952531 ( 1.51%) 152.91
realaud 23618 ( 0.15%) 11961215 ( 0.12%) 506.44
halflif 9 ( 0.00%) 1137 ( 0.00%) 126.33
starcra 30 ( 0.00%) 5229 ( 0.00%) 174.30
everque 32 ( 0.00%) 6064 ( 0.00%) 189.50
unreal 22 ( 0.00%) 4841 ( 0.00%) 220.05
quake 7 ( 0.00%) 480 ( 0.00%) 68.57
cuseeme 5 ( 0.00%) 756 ( 0.00%) 151.20
other 1295842 ( 8.20%) 488137522 ( 4.72%) 376.70
icmp 454411 ( 2.87%) 39990742 ( 0.39%) 88.01
ipip 359 ( 0.00%) 43290 ( 0.00%) 120.58
ipsec 811 ( 0.01%) 108674 ( 0.00%) 134.00
ip6 681 ( 0.00%) 87574 ( 0.00%) 128.60
other 15432 ( 0.10%) 3312363 ( 0.03%) 214.64
frag 14228 ( 0.09%) 12800423 ( 0.12%) 899.66
ip6 38412 ( 0.24%) 22486690 ( 0.22%) 585.41
tcp6 16657 ( 0.11%) 18368035 ( 0.18%) 1102.72
http(s) 28 ( 0.00%) 7467 ( 0.00%) 266.68
http(c) 1165 ( 0.01%) 121521 ( 0.00%) 104.31
smtp 298 ( 0.00%) 141590 ( 0.00%) 475.13
ftp 18 ( 0.00%) 2120 ( 0.00%) 117.78
pop3 71 ( 0.00%) 7355 ( 0.00%) 103.59
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 22 ( 0.00%) 1838 ( 0.00%) 83.55
bgp 79 ( 0.00%) 9637 ( 0.00%) 121.99
other 14974 ( 0.09%) 18076335 ( 0.17%) 1207.18
udp6 17285 ( 0.11%) 3502558 ( 0.03%) 202.64
dns 15216 ( 0.10%) 2948805 ( 0.03%) 193.80
halflif 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 2 ( 0.00%) 276 ( 0.00%) 138.00
other 2066 ( 0.01%) 553340 ( 0.01%) 267.83
icmp6 4434 ( 0.03%) 606009 ( 0.01%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 6008 ( 0.00%) 1001.33
tcpdump file: 200804051400.dump.gz (407.41 MB)