Traffic Trace Info
DumpFile: 200708241400.dump
FileSize: 1739.23MB
Id: 200708241400
StartTime: Fri Aug 24 14:00:01 2007
EndTime: Fri Aug 24 14:15:01 2007
TotalTime: 900.17 seconds
TotalCapSize: 1362.34MB CapLen: 96 bytes
# of packets: 24689382 (16020.38MB)
AvgRate: 149.29Mbps stddev:21.19M
IP flow (unique src/dst pair) Information
# of flows: 1086985 (avg. 22.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.6% 2.4% 1.9% 1.6% 1.4% 1.3% 1.3% 1.1% 0.8%
IP address Information
# of IPv4 addresses: 524734
Top 10 bandwidth usage (bytes/total in %):
12.3% 10.7% 10.2% 8.9% 3.2% 3.2% 2.8% 2.6% 2.4% 2.0%
# of IPv6 addresses: 3090
Top 10 bandwidth usage (bytes/total in %):
20.2% 20.2% 12.4% 7.2% 5.0% 4.8% 4.5% 4.5% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708241400.pktlen.png)
detailed numbers
[ 32- 63]: 6578623
[ 64- 127]: 5816489
[ 128- 255]: 701978
[ 256- 511]: 655527
[ 512- 1023]: 599658
[ 1024- 2047]: 10337107
Protocol Breakdown
![[protocol breakdown chart]](200708241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24689382 (100.00%) 16798583263 (100.00%) 680.40
ip 24597870 ( 99.63%) 16780875044 ( 99.89%) 682.21
tcp 21146182 ( 85.65%) 15883431524 ( 94.55%) 751.13
http(s) 9242963 ( 37.44%) 12934766209 ( 77.00%) 1399.42
http(c) 6736110 ( 27.28%) 731536455 ( 4.35%) 108.60
squid 985699 ( 3.99%) 689516550 ( 4.10%) 699.52
smtp 485673 ( 1.97%) 164508467 ( 0.98%) 338.72
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 9076 ( 0.04%) 769334 ( 0.00%) 84.77
pop3 18341 ( 0.07%) 6810454 ( 0.04%) 371.32
imap 4495 ( 0.02%) 1231461 ( 0.01%) 273.96
telnet 1421 ( 0.01%) 286697 ( 0.00%) 201.76
ssh 70413 ( 0.29%) 35886548 ( 0.21%) 509.66
dns 18736 ( 0.08%) 7820145 ( 0.05%) 417.39
bgp 262 ( 0.00%) 70917 ( 0.00%) 270.68
rtsp 583349 ( 2.36%) 158933429 ( 0.95%) 272.45
icecast 35628 ( 0.14%) 16577881 ( 0.10%) 465.30
hotline 5 ( 0.00%) 544 ( 0.00%) 108.80
other 2954005 ( 11.96%) 1134716073 ( 6.75%) 384.13
udp 2669441 ( 10.81%) 807286036 ( 4.81%) 302.42
dns 1815544 ( 7.35%) 231508413 ( 1.38%) 127.51
realaud 1444 ( 0.01%) 99443 ( 0.00%) 68.87
halflif 17 ( 0.00%) 1435 ( 0.00%) 84.41
starcra 12477 ( 0.05%) 832870 ( 0.00%) 66.75
everque 37 ( 0.00%) 6529 ( 0.00%) 176.46
unreal 32 ( 0.00%) 4360 ( 0.00%) 136.25
quake 16 ( 0.00%) 1412 ( 0.00%) 88.25
cuseeme 5 ( 0.00%) 422 ( 0.00%) 84.40
other 839862 ( 3.40%) 574825808 ( 3.42%) 684.43
icmp 637882 ( 2.58%) 54547830 ( 0.32%) 85.51
ipip 420 ( 0.00%) 50196 ( 0.00%) 119.51
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 18352 ( 0.07%) 11655817 ( 0.07%) 635.13
other 125413 ( 0.51%) 23883841 ( 0.14%) 190.44
frag 1039 ( 0.00%) 853077 ( 0.01%) 821.06
ip6 91512 ( 0.37%) 17708219 ( 0.11%) 193.51
tcp6 34441 ( 0.14%) 7267715 ( 0.04%) 211.02
http(s) 544 ( 0.00%) 553882 ( 0.00%) 1018.17
http(c) 24932 ( 0.10%) 2248204 ( 0.01%) 90.17
squid 40 ( 0.00%) 3600 ( 0.00%) 90.00
smtp 507 ( 0.00%) 132552 ( 0.00%) 261.44
ftp 498 ( 0.00%) 44972 ( 0.00%) 90.31
pop3 12 ( 0.00%) 1128 ( 0.00%) 94.00
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
bgp 96 ( 0.00%) 9488 ( 0.00%) 98.83
icecast 20 ( 0.00%) 1800 ( 0.00%) 90.00
other 7726 ( 0.03%) 4261367 ( 0.03%) 551.56
udp6 46280 ( 0.19%) 8861747 ( 0.05%) 191.48
dns 42722 ( 0.17%) 7430184 ( 0.04%) 173.92
everque 62 ( 0.00%) 13294 ( 0.00%) 214.42
unreal 1 ( 0.00%) 125 ( 0.00%) 125.00
other 3495 ( 0.01%) 1418144 ( 0.01%) 405.76
icmp6 10262 ( 0.04%) 1259157 ( 0.01%) 122.70
ip6 156 ( 0.00%) 22351 ( 0.00%) 143.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 343 ( 0.00%) 293169 ( 0.00%) 854.72
tcpdump file: 200708241400.dump.gz (634.11 MB)