Traffic Trace Info
DumpFile: 200804081400.dump
FileSize: 1564.07MB
Id: 200804081400
StartTime: Tue Apr 8 14:00:01 2008
EndTime: Tue Apr 8 14:15:00 2008
TotalTime: 899.64 seconds
TotalCapSize: 1225.22MB CapLen: 96 bytes
# of packets: 22205956 (14850.44MB)
AvgRate: 138.41Mbps stddev:24.19M
IP flow (unique src/dst pair) Information
# of flows: 995748 (avg. 22.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.7% 1.7% 1.6% 1.6% 1.6% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 502062
Top 10 bandwidth usage (bytes/total in %):
5.1% 3.9% 3.8% 3.8% 3.8% 3.1% 2.8% 2.8% 2.7% 2.2%
# of IPv6 addresses: 1712
Top 10 bandwidth usage (bytes/total in %):
12.0% 10.4% 9.1% 8.8% 7.4% 5.2% 5.2% 5.1% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804081400.pktlen.png)
detailed numbers
[ 32- 63]: 4646550
[ 64- 127]: 5594506
[ 128- 255]: 1096599
[ 256- 511]: 666523
[ 512- 1023]: 756081
[ 1024- 2047]: 9445697
Protocol Breakdown
![[protocol breakdown chart]](200804081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22205956 (100.00%) 15571814282 (100.00%) 701.24
ip 22179984 ( 99.88%) 15567363397 ( 99.97%) 701.87
tcp 18684341 ( 84.14%) 14745857776 ( 94.70%) 789.21
http(s) 7971515 ( 35.90%) 9927953359 ( 63.76%) 1245.43
http(c) 4150647 ( 18.69%) 581553060 ( 3.73%) 140.11
squid 474407 ( 2.14%) 321688267 ( 2.07%) 678.08
smtp 956448 ( 4.31%) 224195683 ( 1.44%) 234.40
nntp 65 ( 0.00%) 20768 ( 0.00%) 319.51
ftp 89007 ( 0.40%) 38727973 ( 0.25%) 435.11
pop3 24497 ( 0.11%) 18163399 ( 0.12%) 741.45
imap 13057 ( 0.06%) 5421447 ( 0.03%) 415.21
telnet 2559 ( 0.01%) 561534 ( 0.00%) 219.43
ssh 701640 ( 3.16%) 538934418 ( 3.46%) 768.11
dns 2579 ( 0.01%) 221516 ( 0.00%) 85.89
bgp 180 ( 0.00%) 53392 ( 0.00%) 296.62
napster 18 ( 0.00%) 9469 ( 0.00%) 526.06
realaud 5 ( 0.00%) 933 ( 0.00%) 186.60
rtsp 416169 ( 1.87%) 507928199 ( 3.26%) 1220.49
icecast 18508 ( 0.08%) 21659171 ( 0.14%) 1170.26
hotline 27 ( 0.00%) 9002 ( 0.00%) 333.41
other 3862987 ( 17.40%) 2558754626 ( 16.43%) 662.38
udp 2801467 ( 12.62%) 734507133 ( 4.72%) 262.19
dns 1298865 ( 5.85%) 190030758 ( 1.22%) 146.31
realaud 3793 ( 0.02%) 228560 ( 0.00%) 60.26
halflif 40 ( 0.00%) 5356 ( 0.00%) 133.90
starcra 61 ( 0.00%) 12096 ( 0.00%) 198.30
everque 20 ( 0.00%) 2502 ( 0.00%) 125.10
unreal 24 ( 0.00%) 3584 ( 0.00%) 149.33
quake 24 ( 0.00%) 4661 ( 0.00%) 194.21
cuseeme 2 ( 0.00%) 145 ( 0.00%) 72.50
other 1498610 ( 6.75%) 544206731 ( 3.49%) 363.14
icmp 577333 ( 2.60%) 51388198 ( 0.33%) 89.01
ipip 311 ( 0.00%) 36634 ( 0.00%) 117.79
ipsec 2595 ( 0.01%) 673526 ( 0.00%) 259.55
ip6 2657 ( 0.01%) 1829273 ( 0.01%) 688.47
other 111280 ( 0.50%) 33070857 ( 0.21%) 297.19
frag 1702 ( 0.01%) 1384171 ( 0.01%) 813.26
ip6 25972 ( 0.12%) 4450885 ( 0.03%) 171.37
tcp6 5334 ( 0.02%) 561055 ( 0.00%) 105.18
http(s) 56 ( 0.00%) 56605 ( 0.00%) 1010.80
http(c) 1119 ( 0.01%) 122177 ( 0.00%) 109.18
smtp 204 ( 0.00%) 59070 ( 0.00%) 289.56
ftp 3128 ( 0.01%) 231472 ( 0.00%) 74.00
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 1005 ( 0.00%) 111.67
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 719 ( 0.00%) 80877 ( 0.00%) 112.49
udp6 16053 ( 0.07%) 3250452 ( 0.02%) 202.48
dns 14173 ( 0.06%) 2806183 ( 0.02%) 197.99
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1879 ( 0.01%) 444153 ( 0.00%) 236.38
icmp6 4545 ( 0.02%) 626138 ( 0.00%) 137.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 9160 ( 0.00%) 916.00
tcpdump file: 200804081400.dump.gz (566.39 MB)