Traffic Trace Info
DumpFile: 200804161400.dump
FileSize: 1728.66MB
Id: 200804161400
StartTime: Wed Apr 16 14:00:00 2008
EndTime: Wed Apr 16 14:15:01 2008
TotalTime: 900.53 seconds
TotalCapSize: 1353.98MB CapLen: 96 bytes
# of packets: 24553965 (15700.65MB)
AvgRate: 146.27Mbps stddev:24.16M
IP flow (unique src/dst pair) Information
# of flows: 728838 (avg. 33.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.1% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 369750
Top 10 bandwidth usage (bytes/total in %):
4.8% 3.1% 2.9% 2.9% 2.7% 2.7% 2.4% 1.9% 1.8% 1.8%
# of IPv6 addresses: 1683
Top 10 bandwidth usage (bytes/total in %):
13.2% 12.5% 10.3% 7.9% 6.0% 5.4% 5.4% 5.4% 4.9% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804161400.pktlen.png)
detailed numbers
[ 32- 63]: 6298587
[ 64- 127]: 5599705
[ 128- 255]: 1032360
[ 256- 511]: 855025
[ 512- 1023]: 962095
[ 1024- 2047]: 9806193
Protocol Breakdown
![[protocol breakdown chart]](200804161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24553965 (100.00%) 16463320293 (100.00%) 670.50
ip 24530167 ( 99.90%) 16458927046 ( 99.97%) 670.97
tcp 21346350 ( 86.94%) 15853679607 ( 96.30%) 742.69
http(s) 9058815 ( 36.89%) 11427481036 ( 69.41%) 1261.48
http(c) 4466370 ( 18.19%) 745898028 ( 4.53%) 167.00
squid 767477 ( 3.13%) 339081427 ( 2.06%) 441.81
smtp 835228 ( 3.40%) 197128575 ( 1.20%) 236.02
nntp 130 ( 0.00%) 12591 ( 0.00%) 96.85
ftp 113979 ( 0.46%) 80971214 ( 0.49%) 710.40
pop3 14142 ( 0.06%) 4840013 ( 0.03%) 342.24
imap 6709 ( 0.03%) 1440836 ( 0.01%) 214.76
telnet 3068 ( 0.01%) 593197 ( 0.00%) 193.35
ssh 492594 ( 2.01%) 79961036 ( 0.49%) 162.33
dns 8940 ( 0.04%) 801316 ( 0.00%) 89.63
bgp 216 ( 0.00%) 70214 ( 0.00%) 325.06
napster 31 ( 0.00%) 2966 ( 0.00%) 95.68
realaud 12 ( 0.00%) 1230 ( 0.00%) 102.50
rtsp 501052 ( 2.04%) 544000487 ( 3.30%) 1085.72
icecast 25798 ( 0.11%) 24408634 ( 0.15%) 946.14
hotline 21 ( 0.00%) 1886 ( 0.00%) 89.81
other 5051671 ( 20.57%) 2406979013 ( 14.62%) 476.47
udp 2430627 ( 9.90%) 527137265 ( 3.20%) 216.87
dns 1577829 ( 6.43%) 367878092 ( 2.23%) 233.15
realaud 11222 ( 0.05%) 6313981 ( 0.04%) 562.64
halflif 30 ( 0.00%) 3556 ( 0.00%) 118.53
starcra 26 ( 0.00%) 4384 ( 0.00%) 168.62
everque 37 ( 0.00%) 4859 ( 0.00%) 131.32
unreal 23 ( 0.00%) 3547 ( 0.00%) 154.22
quake 484 ( 0.00%) 100759 ( 0.00%) 208.18
cuseeme 3 ( 0.00%) 250 ( 0.00%) 83.33
other 840962 ( 3.42%) 152818843 ( 0.93%) 181.72
icmp 575738 ( 2.34%) 52237202 ( 0.32%) 90.73
ipip 349 ( 0.00%) 44070 ( 0.00%) 126.28
ipsec 18865 ( 0.08%) 2546966 ( 0.02%) 135.01
ip6 766 ( 0.00%) 105208 ( 0.00%) 137.35
other 157472 ( 0.64%) 23176728 ( 0.14%) 147.18
frag 1837 ( 0.01%) 1250929 ( 0.01%) 680.96
ip6 23798 ( 0.10%) 4393247 ( 0.03%) 184.61
tcp6 2674 ( 0.01%) 357393 ( 0.00%) 133.65
http(s) 119 ( 0.00%) 76187 ( 0.00%) 640.23
http(c) 1283 ( 0.01%) 122549 ( 0.00%) 95.52
smtp 303 ( 0.00%) 50277 ( 0.00%) 165.93
dns 17 ( 0.00%) 1724 ( 0.00%) 101.41
bgp 79 ( 0.00%) 8962 ( 0.00%) 113.44
other 873 ( 0.00%) 97694 ( 0.00%) 111.91
udp6 15291 ( 0.06%) 3322641 ( 0.02%) 217.29
dns 13457 ( 0.05%) 2784869 ( 0.02%) 206.95
other 1834 ( 0.01%) 537772 ( 0.00%) 293.22
icmp6 5798 ( 0.02%) 705608 ( 0.00%) 121.70
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3389 ( 0.00%) 847.25
tcpdump file: 200804161400.dump.gz (618.39 MB)