Traffic Trace Info
DumpFile: 200804111400.dump
FileSize: 1707.35MB
Id: 200804111400
StartTime: Fri Apr 11 14:00:00 2008
EndTime: Fri Apr 11 14:15:00 2008
TotalTime: 899.70 seconds
TotalCapSize: 1336.80MB CapLen: 96 bytes
# of packets: 24283668 (15919.75MB)
AvgRate: 148.39Mbps stddev:20.31M
IP flow (unique src/dst pair) Information
# of flows: 687512 (avg. 35.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.0% 1.8% 1.4% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 335604
Top 10 bandwidth usage (bytes/total in %):
8.0% 4.6% 4.2% 2.8% 2.6% 2.6% 2.6% 2.4% 2.4% 2.1%
# of IPv6 addresses: 1607
Top 10 bandwidth usage (bytes/total in %):
9.1% 8.7% 8.2% 8.0% 7.7% 6.3% 6.3% 5.5% 5.3% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804111400.pktlen.png)
detailed numbers
[ 32- 63]: 5061522
[ 64- 127]: 6419120
[ 128- 255]: 1222056
[ 256- 511]: 682500
[ 512- 1023]: 832222
[ 1024- 2047]: 10066248
Protocol Breakdown
![[protocol breakdown chart]](200804111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24283668 (100.00%) 16693071579 (100.00%) 687.42
ip 24260934 ( 99.91%) 16688881392 ( 99.97%) 687.89
tcp 20807863 ( 85.69%) 15773764116 ( 94.49%) 758.07
http(s) 8814722 ( 36.30%) 11420878747 ( 68.42%) 1295.66
http(c) 4920835 ( 20.26%) 522582398 ( 3.13%) 106.20
squid 594363 ( 2.45%) 242554011 ( 1.45%) 408.09
smtp 957008 ( 3.94%) 265143280 ( 1.59%) 277.05
ftp 83097 ( 0.34%) 55933527 ( 0.34%) 673.11
pop3 21076 ( 0.09%) 12042893 ( 0.07%) 571.40
imap 17635 ( 0.07%) 3282098 ( 0.02%) 186.11
telnet 2812 ( 0.01%) 417383 ( 0.00%) 148.43
ssh 1684582 ( 6.94%) 761708029 ( 4.56%) 452.16
dns 8999 ( 0.04%) 755616 ( 0.00%) 83.97
bgp 196 ( 0.00%) 60851 ( 0.00%) 310.46
napster 11 ( 0.00%) 1291 ( 0.00%) 117.36
realaud 82 ( 0.00%) 11496 ( 0.00%) 140.20
rtsp 257019 ( 1.06%) 251853539 ( 1.51%) 979.90
icecast 117109 ( 0.48%) 110669137 ( 0.66%) 945.01
other 3328315 ( 13.71%) 2125869700 ( 12.74%) 638.72
udp 2835731 ( 11.68%) 842266456 ( 5.05%) 297.02
dns 1219736 ( 5.02%) 179050113 ( 1.07%) 146.79
realaud 2090 ( 0.01%) 128113 ( 0.00%) 61.30
halflif 27 ( 0.00%) 2323 ( 0.00%) 86.04
starcra 27 ( 0.00%) 4858 ( 0.00%) 179.93
everque 104 ( 0.00%) 13478 ( 0.00%) 129.60
unreal 23 ( 0.00%) 3494 ( 0.00%) 151.91
quake 9 ( 0.00%) 961 ( 0.00%) 106.78
cuseeme 5 ( 0.00%) 404 ( 0.00%) 80.80
other 1613594 ( 6.64%) 663001003 ( 3.97%) 410.88
icmp 433667 ( 1.79%) 39928658 ( 0.24%) 92.07
ipip 365 ( 0.00%) 44062 ( 0.00%) 120.72
ipsec 2252 ( 0.01%) 509028 ( 0.00%) 226.03
ip6 741 ( 0.00%) 95069 ( 0.00%) 128.30
other 180315 ( 0.74%) 32274003 ( 0.19%) 178.99
frag 2266 ( 0.01%) 1987732 ( 0.01%) 877.20
ip6 22734 ( 0.09%) 4190187 ( 0.03%) 184.31
tcp6 2693 ( 0.01%) 626096 ( 0.00%) 232.49
http(s) 57 ( 0.00%) 57618 ( 0.00%) 1010.84
http(c) 694 ( 0.00%) 119624 ( 0.00%) 172.37
smtp 525 ( 0.00%) 248915 ( 0.00%) 474.12
ftp 19 ( 0.00%) 2175 ( 0.00%) 114.47
pop3 32 ( 0.00%) 2768 ( 0.00%) 86.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 89 ( 0.00%) 10213 ( 0.00%) 114.75
other 1268 ( 0.01%) 183976 ( 0.00%) 145.09
udp6 15656 ( 0.06%) 2977707 ( 0.02%) 190.20
dns 14199 ( 0.06%) 2658654 ( 0.02%) 187.24
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1456 ( 0.01%) 318916 ( 0.00%) 219.04
icmp6 4354 ( 0.02%) 582168 ( 0.00%) 133.71
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200804111400.dump.gz (614.95 MB)