Traffic Trace Info
DumpFile: 200804171400.dump
FileSize: 1835.25MB
Id: 200804171400
StartTime: Thu Apr 17 14:00:01 2008
EndTime: Thu Apr 17 14:15:01 2008
TotalTime: 899.75 seconds
TotalCapSize: 1436.75MB CapLen: 96 bytes
# of packets: 26115910 (16723.63MB)
AvgRate: 155.92Mbps stddev:24.41M
IP flow (unique src/dst pair) Information
# of flows: 811926 (avg. 32.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.2% 0.8% 0.8% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 413350
Top 10 bandwidth usage (bytes/total in %):
6.6% 5.9% 3.4% 2.9% 1.9% 1.9% 1.9% 1.9% 1.9% 1.7%
# of IPv6 addresses: 1560
Top 10 bandwidth usage (bytes/total in %):
16.4% 13.3% 13.3% 9.8% 6.7% 6.1% 6.1% 4.9% 4.9% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804171400.pktlen.png)
detailed numbers
[ 32- 63]: 6598696
[ 64- 127]: 5949255
[ 128- 255]: 1065028
[ 256- 511]: 1089023
[ 512- 1023]: 993862
[ 1024- 2047]: 10420046
Protocol Breakdown
![[protocol breakdown chart]](200804171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26115910 (100.00%) 17535998105 (100.00%) 671.47
ip 26089809 ( 99.90%) 17531166088 ( 99.97%) 671.95
tcp 22708220 ( 86.95%) 16694720989 ( 95.20%) 735.18
http(s) 9536782 ( 36.52%) 12123003282 ( 69.13%) 1271.18
http(c) 5517049 ( 21.13%) 678012836 ( 3.87%) 122.89
squid 959415 ( 3.67%) 544815743 ( 3.11%) 567.86
smtp 900581 ( 3.45%) 261328484 ( 1.49%) 290.18
nntp 219 ( 0.00%) 22131 ( 0.00%) 101.05
ftp 185062 ( 0.71%) 141312941 ( 0.81%) 763.60
pop3 16445 ( 0.06%) 7843125 ( 0.04%) 476.93
imap 18981 ( 0.07%) 12401714 ( 0.07%) 653.38
telnet 3809 ( 0.01%) 760573 ( 0.00%) 199.68
ssh 28385 ( 0.11%) 4695167 ( 0.03%) 165.41
dns 8421 ( 0.03%) 1771098 ( 0.01%) 210.32
bgp 189 ( 0.00%) 57018 ( 0.00%) 301.68
napster 13 ( 0.00%) 1768 ( 0.00%) 136.00
realaud 24 ( 0.00%) 3580 ( 0.00%) 149.17
rtsp 725774 ( 2.78%) 711819893 ( 4.06%) 980.77
icecast 67453 ( 0.26%) 55922119 ( 0.32%) 829.05
hotline 49 ( 0.00%) 6534 ( 0.00%) 133.35
other 4739565 ( 18.15%) 2150942743 ( 12.27%) 453.83
udp 2845876 ( 10.90%) 764793666 ( 4.36%) 268.74
dns 1746074 ( 6.69%) 385482833 ( 2.20%) 220.77
realaud 17 ( 0.00%) 2253 ( 0.00%) 132.53
halflif 20 ( 0.00%) 2555 ( 0.00%) 127.75
starcra 28 ( 0.00%) 5571 ( 0.00%) 198.96
everque 99 ( 0.00%) 11787 ( 0.00%) 119.06
unreal 18 ( 0.00%) 2420 ( 0.00%) 134.44
quake 407 ( 0.00%) 96465 ( 0.00%) 237.01
cuseeme 5 ( 0.00%) 680 ( 0.00%) 136.00
other 1099197 ( 4.21%) 379177986 ( 2.16%) 344.96
icmp 410867 ( 1.57%) 38169620 ( 0.22%) 92.90
ipip 314 ( 0.00%) 38822 ( 0.00%) 123.64
ipsec 1871 ( 0.01%) 397720 ( 0.00%) 212.57
ip6 730 ( 0.00%) 93227 ( 0.00%) 127.71
other 121931 ( 0.47%) 32952044 ( 0.19%) 270.25
frag 19679 ( 0.08%) 24676581 ( 0.14%) 1253.96
ip6 26101 ( 0.10%) 4832017 ( 0.03%) 185.13
tcp6 3766 ( 0.01%) 1062059 ( 0.01%) 282.01
http(s) 546 ( 0.00%) 662678 ( 0.00%) 1213.70
http(c) 1323 ( 0.01%) 136363 ( 0.00%) 103.07
smtp 315 ( 0.00%) 99997 ( 0.00%) 317.45
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
dns 4 ( 0.00%) 460 ( 0.00%) 115.00
bgp 74 ( 0.00%) 8426 ( 0.00%) 113.86
other 1474 ( 0.01%) 151531 ( 0.00%) 102.80
udp6 13905 ( 0.05%) 2834541 ( 0.02%) 203.85
dns 12484 ( 0.05%) 2524851 ( 0.01%) 202.25
starcra 3 ( 0.00%) 415 ( 0.00%) 138.33
other 1418 ( 0.01%) 309275 ( 0.00%) 218.11
icmp6 8396 ( 0.03%) 928031 ( 0.01%) 110.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3306 ( 0.00%) 826.50
tcpdump file: 200804171400.dump.gz (659.78 MB)