Traffic Trace Info
DumpFile: 200804201400.dump
FileSize: 996.04MB
Id: 200804201400
StartTime: Sun Apr 20 14:00:01 2008
EndTime: Sun Apr 20 14:15:01 2008
TotalTime: 900.13 seconds
TotalCapSize: 785.12MB CapLen: 96 bytes
# of packets: 13822531 (8816.47MB)
AvgRate: 82.17Mbps stddev:13.05M
IP flow (unique src/dst pair) Information
# of flows: 655050 (avg. 21.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.0% 4.8% 1.9% 1.6% 1.3% 1.2% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 356486
Top 10 bandwidth usage (bytes/total in %):
20.1% 15.4% 6.5% 5.6% 5.6% 5.4% 4.9% 3.9% 2.8% 2.4%
# of IPv6 addresses: 1988
Top 10 bandwidth usage (bytes/total in %):
41.8% 34.6% 11.2% 7.6% 6.1% 4.6% 3.8% 3.8% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804201400.pktlen.png)
detailed numbers
[ 32- 63]: 2825571
[ 64- 127]: 3796676
[ 128- 255]: 677862
[ 256- 511]: 472537
[ 512- 1023]: 563480
[ 1024- 2047]: 5486405
Protocol Breakdown
![[protocol breakdown chart]](200804201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13822531 (100.00%) 9244742014 (100.00%) 668.82
ip 13800149 ( 99.84%) 9239129529 ( 99.94%) 669.49
tcp 11849791 ( 85.73%) 8847785363 ( 95.71%) 746.66
http(s) 3235187 ( 23.41%) 4179574039 ( 45.21%) 1291.91
http(c) 1703242 ( 12.32%) 168645497 ( 1.82%) 99.01
squid 520475 ( 3.77%) 340641193 ( 3.68%) 654.48
smtp 696071 ( 5.04%) 114740199 ( 1.24%) 164.84
nntp 53 ( 0.00%) 3418 ( 0.00%) 64.49
ftp 187555 ( 1.36%) 43720083 ( 0.47%) 233.11
pop3 10505 ( 0.08%) 5828415 ( 0.06%) 554.82
imap 9714 ( 0.07%) 1770137 ( 0.02%) 182.23
telnet 1253 ( 0.01%) 111164 ( 0.00%) 88.72
ssh 995281 ( 7.20%) 640380290 ( 6.93%) 643.42
dns 2802 ( 0.02%) 212377 ( 0.00%) 75.79
bgp 187 ( 0.00%) 54898 ( 0.00%) 293.57
napster 25 ( 0.00%) 1740 ( 0.00%) 69.60
rtsp 56130 ( 0.41%) 43661825 ( 0.47%) 777.87
icecast 1842 ( 0.01%) 570222 ( 0.01%) 309.57
hotline 7 ( 0.00%) 631 ( 0.00%) 90.14
other 4429458 ( 32.05%) 3307868995 ( 35.78%) 746.79
udp 1535090 ( 11.11%) 352049487 ( 3.81%) 229.33
dns 1243342 ( 9.00%) 275445584 ( 2.98%) 221.54
realaud 11 ( 0.00%) 3279 ( 0.00%) 298.09
halflif 21 ( 0.00%) 3243 ( 0.00%) 154.43
starcra 10 ( 0.00%) 1848 ( 0.00%) 184.80
everque 26 ( 0.00%) 5930 ( 0.00%) 228.08
unreal 8 ( 0.00%) 3088 ( 0.00%) 386.00
quake 248 ( 0.00%) 47701 ( 0.00%) 192.34
cuseeme 6 ( 0.00%) 833 ( 0.00%) 138.83
other 291357 ( 2.11%) 76509266 ( 0.83%) 262.60
icmp 396119 ( 2.87%) 36373336 ( 0.39%) 91.82
ipip 346 ( 0.00%) 43077 ( 0.00%) 124.50
ipsec 770 ( 0.01%) 103180 ( 0.00%) 134.00
ip6 653 ( 0.00%) 82690 ( 0.00%) 126.63
other 17380 ( 0.13%) 2692396 ( 0.03%) 154.91
frag 1673 ( 0.01%) 1421681 ( 0.02%) 849.78
ip6 22382 ( 0.16%) 5612485 ( 0.06%) 250.76
tcp6 2768 ( 0.02%) 342768 ( 0.00%) 123.83
http(c) 1309 ( 0.01%) 128987 ( 0.00%) 98.54
smtp 269 ( 0.00%) 87712 ( 0.00%) 326.07
dns 11 ( 0.00%) 1232 ( 0.00%) 112.00
bgp 73 ( 0.00%) 8873 ( 0.00%) 121.55
other 1106 ( 0.01%) 115964 ( 0.00%) 104.85
udp6 13455 ( 0.10%) 2801123 ( 0.03%) 208.18
dns 10951 ( 0.08%) 2151905 ( 0.02%) 196.50
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
starcra 2 ( 0.00%) 278 ( 0.00%) 139.00
everque 1 ( 0.00%) 139 ( 0.00%) 139.00
other 2500 ( 0.02%) 648698 ( 0.01%) 259.48
icmp6 4326 ( 0.03%) 518863 ( 0.01%) 119.94
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1802 ( 0.01%) 1945515 ( 0.02%) 1079.64
tcpdump file: 200804201400.dump.gz (355.46 MB)