Traffic Trace Info
DumpFile: 200804061400.dump
FileSize: 839.70MB
Id: 200804061400
StartTime: Sun Apr 6 14:00:00 2008
EndTime: Sun Apr 6 14:15:00 2008
TotalTime: 899.90 seconds
TotalCapSize: 656.26MB CapLen: 96 bytes
# of packets: 12021228 (6824.04MB)
AvgRate: 63.61Mbps stddev:11.63M
IP flow (unique src/dst pair) Information
# of flows: 643952 (avg. 18.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.8% 1.6% 1.5% 1.5% 1.3% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 360203
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.0% 5.7% 4.5% 4.1% 3.6% 2.9% 2.9% 2.3% 2.2%
# of IPv6 addresses: 1512
Top 10 bandwidth usage (bytes/total in %):
42.1% 41.9% 7.2% 6.0% 5.2% 4.6% 4.0% 4.0% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804061400.pktlen.png)
detailed numbers
[ 32- 63]: 2524059
[ 64- 127]: 3504350
[ 128- 255]: 852417
[ 256- 511]: 429257
[ 512- 1023]: 524257
[ 1024- 2047]: 4186888
Protocol Breakdown
![[protocol breakdown chart]](200804061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12021228 (100.00%) 7155524896 (100.00%) 595.24
ip 11977945 ( 99.64%) 7149591115 ( 99.92%) 596.90
tcp 9207553 ( 76.59%) 6443240879 ( 90.05%) 699.78
http(s) 2886757 ( 24.01%) 3772072471 ( 52.72%) 1306.68
http(c) 1588256 ( 13.21%) 153588544 ( 2.15%) 96.70
squid 616172 ( 5.13%) 397281888 ( 5.55%) 644.76
smtp 916003 ( 7.62%) 221579639 ( 3.10%) 241.90
ftp 325951 ( 2.71%) 376221901 ( 5.26%) 1154.23
pop3 6025 ( 0.05%) 2005417 ( 0.03%) 332.85
imap 4018 ( 0.03%) 1152247 ( 0.02%) 286.77
telnet 405 ( 0.00%) 82790 ( 0.00%) 204.42
ssh 449616 ( 3.74%) 134969970 ( 1.89%) 300.19
dns 10916 ( 0.09%) 1847146 ( 0.03%) 169.21
bgp 177 ( 0.00%) 47614 ( 0.00%) 269.01
napster 16 ( 0.00%) 4953 ( 0.00%) 309.56
realaud 16 ( 0.00%) 3071 ( 0.00%) 191.94
rtsp 79652 ( 0.66%) 114613558 ( 1.60%) 1438.93
icecast 29034 ( 0.24%) 33308007 ( 0.47%) 1147.21
other 2294533 ( 19.09%) 1234461267 ( 17.25%) 538.00
udp 2328620 ( 19.37%) 665265017 ( 9.30%) 285.69
dns 958885 ( 7.98%) 139823809 ( 1.95%) 145.82
realaud 987 ( 0.01%) 61426 ( 0.00%) 62.24
halflif 6 ( 0.00%) 650 ( 0.00%) 108.33
starcra 8 ( 0.00%) 1799 ( 0.00%) 224.88
everque 10568 ( 0.09%) 1122807 ( 0.02%) 106.25
unreal 10 ( 0.00%) 1279 ( 0.00%) 127.90
quake 19 ( 0.00%) 2592 ( 0.00%) 136.42
cuseeme 3 ( 0.00%) 558 ( 0.00%) 186.00
other 1358087 ( 11.30%) 524230178 ( 7.33%) 386.01
icmp 423888 ( 3.53%) 37361827 ( 0.52%) 88.14
ipip 328 ( 0.00%) 38800 ( 0.00%) 118.29
ipsec 809 ( 0.01%) 108406 ( 0.00%) 134.00
ip6 720 ( 0.01%) 92138 ( 0.00%) 127.97
other 16027 ( 0.13%) 3484048 ( 0.05%) 217.39
frag 1684 ( 0.01%) 1465350 ( 0.02%) 870.16
ip6 43283 ( 0.36%) 5933781 ( 0.08%) 137.09
tcp6 27306 ( 0.23%) 2815656 ( 0.04%) 103.11
http(c) 392 ( 0.00%) 40343 ( 0.00%) 102.92
smtp 497 ( 0.00%) 183991 ( 0.00%) 370.20
pop3 59 ( 0.00%) 5807 ( 0.00%) 98.42
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 8 ( 0.00%) 1322 ( 0.00%) 165.25
bgp 73 ( 0.00%) 8261 ( 0.00%) 113.16
other 26275 ( 0.22%) 2575760 ( 0.04%) 98.03
udp6 11650 ( 0.10%) 2530039 ( 0.04%) 217.17
dns 10181 ( 0.08%) 2124766 ( 0.03%) 208.70
unreal 3 ( 0.00%) 348 ( 0.00%) 116.00
other 1466 ( 0.01%) 404925 ( 0.01%) 276.21
icmp6 4295 ( 0.04%) 582320 ( 0.01%) 135.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1686 ( 0.00%) 843.00
tcpdump file: 200804061400.dump.gz (313.38 MB)