Traffic Trace Info
DumpFile: 200708181400.dump
FileSize: 1471.89MB
Id: 200708181400
StartTime: Sat Aug 18 14:00:00 2007
EndTime: Sat Aug 18 14:15:00 2007
TotalTime: 899.67 seconds
TotalCapSize: 1145.43MB CapLen: 96 bytes
# of packets: 21394286 (13855.09MB)
AvgRate: 129.18Mbps stddev:12.66M
IP flow (unique src/dst pair) Information
# of flows: 662002 (avg. 32.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.9% 3.9% 1.5% 0.8% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 373979
Top 10 bandwidth usage (bytes/total in %):
17.7% 11.3% 11.0% 5.4% 5.0% 4.5% 4.3% 4.1% 3.9% 2.8%
# of IPv6 addresses: 1604
Top 10 bandwidth usage (bytes/total in %):
24.5% 24.5% 7.8% 7.1% 6.3% 5.5% 5.1% 4.2% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708181400.pktlen.png)
detailed numbers
[ 32- 63]: 5557249
[ 64- 127]: 5308527
[ 128- 255]: 565251
[ 256- 511]: 474083
[ 512- 1023]: 336399
[ 1024- 2047]: 9152777
Protocol Breakdown
![[protocol breakdown chart]](200708181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21394286 (100.00%) 14528111645 (100.00%) 679.07
ip 21316693 ( 99.64%) 14513498793 ( 99.90%) 680.85
tcp 17195438 ( 80.37%) 13400810697 ( 92.24%) 779.32
http(s) 8163039 ( 38.16%) 11396647650 ( 78.45%) 1396.13
http(c) 5680464 ( 26.55%) 506304316 ( 3.48%) 89.13
squid 606111 ( 2.83%) 373488178 ( 2.57%) 616.20
smtp 407584 ( 1.91%) 73630495 ( 0.51%) 180.65
ftp 56496 ( 0.26%) 4955973 ( 0.03%) 87.72
pop3 14278 ( 0.07%) 8360475 ( 0.06%) 585.55
imap 2450 ( 0.01%) 694652 ( 0.00%) 283.53
telnet 337 ( 0.00%) 33638 ( 0.00%) 99.82
ssh 37466 ( 0.18%) 6320726 ( 0.04%) 168.71
dns 25256 ( 0.12%) 3751238 ( 0.03%) 148.53
bgp 242 ( 0.00%) 56326 ( 0.00%) 232.75
realaud 44 ( 0.00%) 8490 ( 0.00%) 192.95
rtsp 363161 ( 1.70%) 37341532 ( 0.26%) 102.82
icecast 18014 ( 0.08%) 1359379 ( 0.01%) 75.46
other 1820488 ( 8.51%) 987857149 ( 6.80%) 542.63
udp 3518143 ( 16.44%) 1048298020 ( 7.22%) 297.97
dns 1538339 ( 7.19%) 189229639 ( 1.30%) 123.01
realaud 14 ( 0.00%) 1601 ( 0.00%) 114.36
halflif 15 ( 0.00%) 1183 ( 0.00%) 78.87
starcra 37254 ( 0.17%) 2513618 ( 0.02%) 67.47
everque 264 ( 0.00%) 50312 ( 0.00%) 190.58
unreal 4 ( 0.00%) 345 ( 0.00%) 86.25
quake 25 ( 0.00%) 2125 ( 0.00%) 85.00
cuseeme 6 ( 0.00%) 515 ( 0.00%) 85.83
other 1942176 ( 9.08%) 856466489 ( 5.90%) 440.98
icmp 504614 ( 2.36%) 48047067 ( 0.33%) 95.22
ipip 346 ( 0.00%) 41936 ( 0.00%) 121.20
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 1124 ( 0.01%) 133908 ( 0.00%) 119.14
other 96848 ( 0.45%) 16147365 ( 0.11%) 166.73
frag 1377 ( 0.01%) 1200171 ( 0.01%) 871.58
ip6 77593 ( 0.36%) 14612852 ( 0.10%) 188.33
tcp6 20577 ( 0.10%) 5833662 ( 0.04%) 283.50
http(s) 158 ( 0.00%) 122659 ( 0.00%) 776.32
http(c) 14176 ( 0.07%) 1571130 ( 0.01%) 110.83
squid 6 ( 0.00%) 468 ( 0.00%) 78.00
smtp 738 ( 0.00%) 211361 ( 0.00%) 286.40
pop3 18 ( 0.00%) 1620 ( 0.00%) 90.00
telnet 203 ( 0.00%) 15028 ( 0.00%) 74.03
ssh 64 ( 0.00%) 10562 ( 0.00%) 165.03
dns 7 ( 0.00%) 632 ( 0.00%) 90.29
bgp 124 ( 0.00%) 13349 ( 0.00%) 107.65
other 5083 ( 0.02%) 3886853 ( 0.03%) 764.68
udp6 48928 ( 0.23%) 7714531 ( 0.05%) 157.67
dns 48817 ( 0.23%) 7696986 ( 0.05%) 157.67
other 111 ( 0.00%) 17545 ( 0.00%) 158.06
icmp6 7974 ( 0.04%) 1049149 ( 0.01%) 131.57
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200708181400.dump.gz (531.34 MB)