Traffic Trace Info
DumpFile: 200804211400.dump
FileSize: 1940.93MB
Id: 200804211400
StartTime: Mon Apr 21 14:00:01 2008
EndTime: Mon Apr 21 14:15:00 2008
TotalTime: 899.17 seconds
TotalCapSize: 1528.72MB CapLen: 96 bytes
# of packets: 27014023 (17581.25MB)
AvgRate: 164.03Mbps stddev:22.99M
IP flow (unique src/dst pair) Information
# of flows: 716110 (avg. 37.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.4% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 342039
Top 10 bandwidth usage (bytes/total in %):
4.6% 3.3% 3.2% 2.9% 2.9% 2.9% 2.8% 2.6% 2.4% 2.4%
# of IPv6 addresses: 1617
Top 10 bandwidth usage (bytes/total in %):
41.6% 26.8% 8.4% 6.3% 4.9% 4.0% 3.9% 3.8% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804211400.pktlen.png)
detailed numbers
[ 32- 63]: 5180939
[ 64- 127]: 7762786
[ 128- 255]: 1372156
[ 256- 511]: 850371
[ 512- 1023]: 738646
[ 1024- 2047]: 11109125
Protocol Breakdown
![[protocol breakdown chart]](200804211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27014023 (100.00%) 18435281067 (100.00%) 682.43
ip 26982786 ( 99.88%) 18428034015 ( 99.96%) 682.96
tcp 24381256 ( 90.25%) 17946349516 ( 97.35%) 736.07
http(s) 9783328 ( 36.22%) 12401813049 ( 67.27%) 1267.65
http(c) 5214530 ( 19.30%) 659024572 ( 3.57%) 126.38
squid 992905 ( 3.68%) 502913777 ( 2.73%) 506.51
smtp 831505 ( 3.08%) 208288308 ( 1.13%) 250.50
nntp 67 ( 0.00%) 4578 ( 0.00%) 68.33
ftp 70654 ( 0.26%) 36343622 ( 0.20%) 514.39
pop3 18087 ( 0.07%) 9645162 ( 0.05%) 533.26
imap 14612 ( 0.05%) 8623595 ( 0.05%) 590.17
telnet 3389 ( 0.01%) 574415 ( 0.00%) 169.49
ssh 1996177 ( 7.39%) 656492265 ( 3.56%) 328.87
dns 6648 ( 0.02%) 474861 ( 0.00%) 71.43
bgp 185 ( 0.00%) 58322 ( 0.00%) 315.25
napster 54 ( 0.00%) 5670 ( 0.00%) 105.00
realaud 28 ( 0.00%) 4388 ( 0.00%) 156.71
rtsp 686665 ( 2.54%) 694930496 ( 3.77%) 1012.04
icecast 15685 ( 0.06%) 22442128 ( 0.12%) 1430.80
hotline 14 ( 0.00%) 1162 ( 0.00%) 83.00
other 4746722 ( 17.57%) 2744709086 ( 14.89%) 578.23
udp 1977585 ( 7.32%) 406173356 ( 2.20%) 205.39
dns 1277139 ( 4.73%) 184137036 ( 1.00%) 144.18
realaud 10419 ( 0.04%) 4216322 ( 0.02%) 404.68
halflif 18 ( 0.00%) 2175 ( 0.00%) 120.83
starcra 30 ( 0.00%) 4592 ( 0.00%) 153.07
everque 70 ( 0.00%) 8222 ( 0.00%) 117.46
unreal 37 ( 0.00%) 5077 ( 0.00%) 137.22
quake 200 ( 0.00%) 38869 ( 0.00%) 194.34
other 689624 ( 2.55%) 217750580 ( 1.18%) 315.75
icmp 407652 ( 1.51%) 38160996 ( 0.21%) 93.61
ipip 354 ( 0.00%) 43154 ( 0.00%) 121.90
ipsec 2952 ( 0.01%) 706924 ( 0.00%) 239.47
ip6 765 ( 0.00%) 96156 ( 0.00%) 125.69
other 212222 ( 0.79%) 36503913 ( 0.20%) 172.01
frag 2372 ( 0.01%) 1951699 ( 0.01%) 822.81
ip6 31237 ( 0.12%) 7247052 ( 0.04%) 232.00
tcp6 3015 ( 0.01%) 776095 ( 0.00%) 257.41
http(s) 334 ( 0.00%) 403276 ( 0.00%) 1207.41
http(c) 1261 ( 0.00%) 121102 ( 0.00%) 96.04
smtp 422 ( 0.00%) 137946 ( 0.00%) 326.89
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
dns 7 ( 0.00%) 834 ( 0.00%) 119.14
bgp 76 ( 0.00%) 10195 ( 0.00%) 134.14
other 885 ( 0.00%) 100138 ( 0.00%) 113.15
udp6 15776 ( 0.06%) 3273028 ( 0.02%) 207.47
dns 14126 ( 0.05%) 2845883 ( 0.02%) 201.46
starcra 4 ( 0.00%) 556 ( 0.00%) 139.00
other 1646 ( 0.01%) 426589 ( 0.00%) 259.17
icmp6 10606 ( 0.04%) 1243173 ( 0.01%) 117.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1810 ( 0.01%) 1950676 ( 0.01%) 1077.72
tcpdump file: 200804211400.dump.gz (708.87 MB)