Traffic Trace Info
DumpFile: 200804121400.dump
FileSize: 1179.50MB
Id: 200804121400
StartTime: Sat Apr 12 14:00:01 2008
EndTime: Sat Apr 12 14:15:01 2008
TotalTime: 900.26 seconds
TotalCapSize: 918.78MB CapLen: 96 bytes
# of packets: 17085909 (11010.54MB)
AvgRate: 102.55Mbps stddev:31.07M
IP flow (unique src/dst pair) Information
# of flows: 705860 (avg. 24.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.4% 4.0% 2.6% 2.2% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 400018
Top 10 bandwidth usage (bytes/total in %):
5.8% 5.7% 5.7% 5.7% 4.6% 4.2% 4.1% 3.5% 3.1% 3.1%
# of IPv6 addresses: 1506
Top 10 bandwidth usage (bytes/total in %):
12.0% 9.7% 9.0% 8.8% 8.7% 8.4% 7.4% 6.5% 6.3% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804121400.pktlen.png)
detailed numbers
[ 32- 63]: 3736943
[ 64- 127]: 4199642
[ 128- 255]: 805998
[ 256- 511]: 628806
[ 512- 1023]: 809696
[ 1024- 2047]: 6904824
Protocol Breakdown
![[protocol breakdown chart]](200804121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17085909 (100.00%) 11545386795 (100.00%) 675.73
ip 17066852 ( 99.89%) 11541733852 ( 99.97%) 676.27
tcp 13440852 ( 78.67%) 10485355378 ( 90.82%) 780.11
http(s) 5066626 ( 29.65%) 6619944500 ( 57.34%) 1306.58
http(c) 2729315 ( 15.97%) 294398990 ( 2.55%) 107.87
squid 411821 ( 2.41%) 241201805 ( 2.09%) 585.70
smtp 770405 ( 4.51%) 155052410 ( 1.34%) 201.26
nntp 4 ( 0.00%) 280 ( 0.00%) 70.00
ftp 75293 ( 0.44%) 38697865 ( 0.34%) 513.96
pop3 15324 ( 0.09%) 8738953 ( 0.08%) 570.28
imap 6126 ( 0.04%) 2811923 ( 0.02%) 459.01
telnet 1696 ( 0.01%) 174143 ( 0.00%) 102.68
ssh 751583 ( 4.40%) 627874651 ( 5.44%) 835.40
dns 4793 ( 0.03%) 390157 ( 0.00%) 81.40
bgp 351 ( 0.00%) 175302 ( 0.00%) 499.44
napster 124 ( 0.00%) 9872 ( 0.00%) 79.61
realaud 5 ( 0.00%) 616 ( 0.00%) 123.20
rtsp 522252 ( 3.06%) 505039799 ( 4.37%) 967.04
icecast 24928 ( 0.15%) 23817240 ( 0.21%) 955.44
hotline 11 ( 0.00%) 778 ( 0.00%) 70.73
other 3060189 ( 17.91%) 1967025734 ( 17.04%) 642.78
udp 3113136 ( 18.22%) 1002178134 ( 8.68%) 321.92
dns 1256632 ( 7.35%) 251155709 ( 2.18%) 199.86
realaud 62701 ( 0.37%) 32579325 ( 0.28%) 519.60
halflif 1293 ( 0.01%) 144425 ( 0.00%) 111.70
starcra 10 ( 0.00%) 1322 ( 0.00%) 132.20
everque 31755 ( 0.19%) 9439932 ( 0.08%) 297.27
unreal 4 ( 0.00%) 744 ( 0.00%) 186.00
quake 20 ( 0.00%) 3084 ( 0.00%) 154.20
cuseeme 4 ( 0.00%) 617 ( 0.00%) 154.25
other 1760687 ( 10.30%) 708828118 ( 6.14%) 402.59
icmp 445683 ( 2.61%) 40936706 ( 0.35%) 91.85
ipip 352 ( 0.00%) 42452 ( 0.00%) 120.60
ipsec 810 ( 0.00%) 108540 ( 0.00%) 134.00
ip6 698 ( 0.00%) 89902 ( 0.00%) 128.80
other 65321 ( 0.38%) 13022740 ( 0.11%) 199.37
frag 1320 ( 0.01%) 1119056 ( 0.01%) 847.77
ip6 19057 ( 0.11%) 3652943 ( 0.03%) 191.69
tcp6 1913 ( 0.01%) 545162 ( 0.00%) 284.98
http(s) 222 ( 0.00%) 321418 ( 0.00%) 1447.83
http(c) 404 ( 0.00%) 40968 ( 0.00%) 101.41
smtp 172 ( 0.00%) 47785 ( 0.00%) 277.82
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 94 ( 0.00%) 28931 ( 0.00%) 307.78
other 1019 ( 0.01%) 105888 ( 0.00%) 103.91
udp6 12607 ( 0.07%) 2534632 ( 0.02%) 201.05
dns 11272 ( 0.07%) 2249961 ( 0.02%) 199.61
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1334 ( 0.01%) 284555 ( 0.00%) 213.31
icmp6 4477 ( 0.03%) 545617 ( 0.00%) 121.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30 ( 0.00%) 23452 ( 0.00%) 781.73
tcpdump file: 200804121400.dump.gz (419.54 MB)