Traffic Trace Info
DumpFile: 200804101400.dump
FileSize: 1497.88MB
Id: 200804101400
StartTime: Thu Apr 10 14:00:00 2008
EndTime: Thu Apr 10 14:15:01 2008
TotalTime: 900.79 seconds
TotalCapSize: 1173.69MB CapLen: 96 bytes
# of packets: 21245578 (14084.47MB)
AvgRate: 131.18Mbps stddev:23.57M
IP flow (unique src/dst pair) Information
# of flows: 823788 (avg. 25.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 2.0% 1.7% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 380652
Top 10 bandwidth usage (bytes/total in %):
5.4% 4.0% 3.3% 3.3% 3.0% 2.8% 2.7% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1556
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.5% 7.8% 7.4% 7.1% 6.8% 6.5% 6.1% 5.2% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804101400.pktlen.png)
detailed numbers
[ 32- 63]: 4885454
[ 64- 127]: 5017235
[ 128- 255]: 890133
[ 256- 511]: 813463
[ 512- 1023]: 751103
[ 1024- 2047]: 8888190
Protocol Breakdown
![[protocol breakdown chart]](200804101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21245578 (100.00%) 14768632472 (100.00%) 695.14
ip 21223942 ( 99.90%) 14764329580 ( 99.97%) 695.65
tcp 18399441 ( 86.60%) 14147716330 ( 95.80%) 768.92
http(s) 8058288 ( 37.93%) 10165672330 ( 68.83%) 1261.52
http(c) 4059810 ( 19.11%) 612769120 ( 4.15%) 150.94
squid 632050 ( 2.97%) 253743327 ( 1.72%) 401.46
smtp 896336 ( 4.22%) 219961639 ( 1.49%) 245.40
nntp 2 ( 0.00%) 178 ( 0.00%) 89.00
ftp 56218 ( 0.26%) 28061102 ( 0.19%) 499.15
pop3 14609 ( 0.07%) 5227227 ( 0.04%) 357.81
imap 18208 ( 0.09%) 16237975 ( 0.11%) 891.80
telnet 3112 ( 0.01%) 747116 ( 0.01%) 240.08
ssh 696795 ( 3.28%) 507577057 ( 3.44%) 728.45
dns 3363 ( 0.02%) 260648 ( 0.00%) 77.50
bgp 196 ( 0.00%) 62039 ( 0.00%) 316.53
napster 12 ( 0.00%) 778 ( 0.00%) 64.83
realaud 114 ( 0.00%) 15068 ( 0.00%) 132.18
rtsp 507371 ( 2.39%) 506013975 ( 3.43%) 997.33
icecast 35968 ( 0.17%) 31462008 ( 0.21%) 874.72
hotline 23 ( 0.00%) 3676 ( 0.00%) 159.83
other 3416963 ( 16.08%) 1799900887 ( 12.19%) 526.75
udp 2224007 ( 10.47%) 541852156 ( 3.67%) 243.64
dns 1301537 ( 6.13%) 187773958 ( 1.27%) 144.27
realaud 24096 ( 0.11%) 13009596 ( 0.09%) 539.91
halflif 1057 ( 0.00%) 122736 ( 0.00%) 116.12
starcra 27 ( 0.00%) 4458 ( 0.00%) 165.11
everque 73 ( 0.00%) 9998 ( 0.00%) 136.96
unreal 10 ( 0.00%) 1143 ( 0.00%) 114.30
quake 25 ( 0.00%) 4042 ( 0.00%) 161.68
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 897101 ( 4.22%) 340851228 ( 2.31%) 379.95
icmp 428793 ( 2.02%) 39009413 ( 0.26%) 90.97
ipip 338 ( 0.00%) 39944 ( 0.00%) 118.18
ipsec 1864 ( 0.01%) 391596 ( 0.00%) 210.08
ip6 714 ( 0.00%) 93853 ( 0.00%) 131.45
other 168785 ( 0.79%) 35226288 ( 0.24%) 208.71
frag 2230 ( 0.01%) 1965768 ( 0.01%) 881.51
ip6 21636 ( 0.10%) 4302892 ( 0.03%) 198.88
tcp6 2284 ( 0.01%) 703781 ( 0.00%) 308.14
http(s) 300 ( 0.00%) 388482 ( 0.00%) 1294.94
http(c) 443 ( 0.00%) 46604 ( 0.00%) 105.20
smtp 373 ( 0.00%) 128189 ( 0.00%) 343.67
ftp 16 ( 0.00%) 1877 ( 0.00%) 117.31
pop3 34 ( 0.00%) 3172 ( 0.00%) 93.29
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 65 ( 0.00%) 6867 ( 0.00%) 105.65
other 1051 ( 0.00%) 128418 ( 0.00%) 122.19
udp6 13833 ( 0.07%) 2853393 ( 0.02%) 206.27
dns 12288 ( 0.06%) 2472629 ( 0.02%) 201.22
starcra 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1543 ( 0.01%) 380511 ( 0.00%) 246.60
icmp6 5483 ( 0.03%) 736283 ( 0.00%) 134.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5355 ( 0.00%) 892.50
tcpdump file: 200804101400.dump.gz (536.31 MB)