Traffic Trace Info
DumpFile: 200804071400.dump
FileSize: 2300.34MB
Id: 200804071400
StartTime: Mon Apr 7 14:00:01 2008
EndTime: Mon Apr 7 14:15:01 2008
TotalTime: 899.82 seconds
TotalCapSize: 1804.43MB CapLen: 96 bytes
# of packets: 32498979 (17085.97MB)
AvgRate: 159.30Mbps stddev:24.29M
IP flow (unique src/dst pair) Information
# of flows: 850201 (avg. 38.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.7% 9.6% 2.2% 1.3% 1.3% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 452689
Top 10 bandwidth usage (bytes/total in %):
16.6% 15.7% 10.0% 10.0% 5.3% 2.4% 2.3% 2.2% 2.2% 2.2%
# of IPv6 addresses: 1803
Top 10 bandwidth usage (bytes/total in %):
12.5% 11.6% 11.4% 10.9% 10.2% 6.9% 5.0% 4.9% 4.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804071400.pktlen.png)
detailed numbers
[ 32- 63]: 12256720
[ 64- 127]: 6980627
[ 128- 255]: 1135462
[ 256- 511]: 740595
[ 512- 1023]: 797898
[ 1024- 2047]: 10587677
Protocol Breakdown
![[protocol breakdown chart]](200804071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32498979 (100.00%) 17915941556 (100.00%) 551.28
ip 32475525 ( 99.93%) 17911492826 ( 99.98%) 551.54
tcp 27504918 ( 84.63%) 14875712282 ( 83.03%) 540.84
http(s) 7632352 ( 23.48%) 9563444645 ( 53.38%) 1253.01
http(c) 4027304 ( 12.39%) 508850441 ( 2.84%) 126.35
squid 522146 ( 1.61%) 235353268 ( 1.31%) 450.74
smtp 1223862 ( 3.77%) 288677189 ( 1.61%) 235.87
nntp 575 ( 0.00%) 555992 ( 0.00%) 966.94
ftp 385860 ( 1.19%) 438149023 ( 2.45%) 1135.51
pop3 23028 ( 0.07%) 14349739 ( 0.08%) 623.14
imap 11505 ( 0.04%) 4156516 ( 0.02%) 361.28
telnet 2708 ( 0.01%) 392179 ( 0.00%) 144.82
ssh 3001971 ( 9.24%) 1989064781 ( 11.10%) 662.59
dns 2498 ( 0.01%) 209820 ( 0.00%) 84.00
bgp 178 ( 0.00%) 48347 ( 0.00%) 271.61
napster 13 ( 0.00%) 4080 ( 0.00%) 313.85
realaud 332 ( 0.00%) 29770 ( 0.00%) 89.67
rtsp 249149 ( 0.77%) 298425717 ( 1.67%) 1197.78
icecast 16699 ( 0.05%) 18418312 ( 0.10%) 1102.96
hotline 27 ( 0.00%) 4092 ( 0.00%) 151.56
other 10404710 ( 32.02%) 1515578311 ( 8.46%) 145.66
udp 4341846 ( 13.36%) 2929177650 ( 16.35%) 674.64
dns 1320529 ( 4.06%) 193376255 ( 1.08%) 146.44
realaud 13278 ( 0.04%) 12380885 ( 0.07%) 932.44
halflif 18 ( 0.00%) 1961 ( 0.00%) 108.94
starcra 54 ( 0.00%) 11044 ( 0.00%) 204.52
everque 116 ( 0.00%) 14576 ( 0.00%) 125.66
unreal 9 ( 0.00%) 1288 ( 0.00%) 143.11
quake 14 ( 0.00%) 1774 ( 0.00%) 126.71
cuseeme 4 ( 0.00%) 443 ( 0.00%) 110.75
other 3007709 ( 9.25%) 2723294229 ( 15.20%) 905.44
icmp 551878 ( 1.70%) 90761742 ( 0.51%) 164.46
ipip 333 ( 0.00%) 38330 ( 0.00%) 115.11
ipsec 5117 ( 0.02%) 796600 ( 0.00%) 155.68
ip6 758 ( 0.00%) 99048 ( 0.00%) 130.67
other 70675 ( 0.22%) 14907174 ( 0.08%) 210.93
frag 1836906 ( 5.65%) 2267156077 ( 12.65%) 1234.23
ip6 23454 ( 0.07%) 4448730 ( 0.02%) 189.68
tcp6 1944 ( 0.01%) 375602 ( 0.00%) 193.21
http(s) 68 ( 0.00%) 83713 ( 0.00%) 1231.07
http(c) 500 ( 0.00%) 62711 ( 0.00%) 125.42
smtp 276 ( 0.00%) 88064 ( 0.00%) 319.07
ftp 64 ( 0.00%) 7514 ( 0.00%) 117.41
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 543 ( 0.00%) 108.60
bgp 90 ( 0.00%) 12928 ( 0.00%) 143.64
other 905 ( 0.00%) 116829 ( 0.00%) 129.09
udp6 16910 ( 0.05%) 3434606 ( 0.02%) 203.11
dns 15005 ( 0.05%) 2961856 ( 0.02%) 197.39
other 1905 ( 0.01%) 472750 ( 0.00%) 248.16
icmp6 4556 ( 0.01%) 622102 ( 0.00%) 136.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 12340 ( 0.00%) 881.43
tcpdump file: 200804071400.dump.gz (787.57 MB)