Traffic Trace Info
DumpFile: 200804181400.dump
FileSize: 1833.48MB
Id: 200804181400
StartTime: Fri Apr 18 14:00:00 2008
EndTime: Fri Apr 18 14:15:00 2008
TotalTime: 899.78 seconds
TotalCapSize: 1437.35MB CapLen: 96 bytes
# of packets: 25960111 (17994.59MB)
AvgRate: 167.77Mbps stddev:26.94M
IP flow (unique src/dst pair) Information
# of flows: 871094 (avg. 29.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.0% 1.5% 1.5% 0.9% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 382937
Top 10 bandwidth usage (bytes/total in %):
5.3% 5.2% 4.7% 3.8% 3.4% 3.1% 3.0% 2.6% 2.6% 2.5%
# of IPv6 addresses: 1713
Top 10 bandwidth usage (bytes/total in %):
35.6% 29.3% 8.4% 7.4% 7.3% 6.5% 6.3% 5.6% 5.4% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804181400.pktlen.png)
detailed numbers
[ 32- 63]: 6184216
[ 64- 127]: 5616128
[ 128- 255]: 880985
[ 256- 511]: 845338
[ 512- 1023]: 913988
[ 1024- 2047]: 11519456
Protocol Breakdown
![[protocol breakdown chart]](200804181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25960111 (100.00%) 18868691534 (100.00%) 726.83
ip 25931448 ( 99.89%) 18862079378 ( 99.96%) 727.38
tcp 23207680 ( 89.40%) 18292217504 ( 96.94%) 788.20
http(s) 9647217 ( 37.16%) 12534323977 ( 66.43%) 1299.27
http(c) 5044272 ( 19.43%) 563513199 ( 2.99%) 111.71
squid 1219394 ( 4.70%) 604841860 ( 3.21%) 496.02
smtp 828693 ( 3.19%) 205159661 ( 1.09%) 247.57
nntp 17 ( 0.00%) 1489 ( 0.00%) 87.59
ftp 114273 ( 0.44%) 68627222 ( 0.36%) 600.56
pop3 44144 ( 0.17%) 33569986 ( 0.18%) 760.47
imap 11421 ( 0.04%) 6797325 ( 0.04%) 595.16
telnet 1894 ( 0.01%) 324985 ( 0.00%) 171.59
ssh 408927 ( 1.58%) 396365892 ( 2.10%) 969.28
dns 3908 ( 0.02%) 405675 ( 0.00%) 103.81
bgp 276 ( 0.00%) 68236 ( 0.00%) 247.23
napster 19 ( 0.00%) 4257 ( 0.00%) 224.05
realaud 32 ( 0.00%) 4630 ( 0.00%) 144.69
rtsp 509843 ( 1.96%) 523093340 ( 2.77%) 1025.99
icecast 47060 ( 0.18%) 38874067 ( 0.21%) 826.05
other 5326289 ( 20.52%) 3316241643 ( 17.58%) 622.62
udp 2122919 ( 8.18%) 499350286 ( 2.65%) 235.22
dns 1679946 ( 6.47%) 373538168 ( 1.98%) 222.35
realaud 24533 ( 0.09%) 9951051 ( 0.05%) 405.62
halflif 39 ( 0.00%) 4646 ( 0.00%) 119.13
starcra 58 ( 0.00%) 7948 ( 0.00%) 137.03
everque 185 ( 0.00%) 23055 ( 0.00%) 124.62
unreal 16 ( 0.00%) 1998 ( 0.00%) 124.88
quake 351 ( 0.00%) 76980 ( 0.00%) 219.32
cuseeme 10 ( 0.00%) 3770 ( 0.00%) 377.00
other 417746 ( 1.61%) 115723690 ( 0.61%) 277.02
icmp 441019 ( 1.70%) 39612467 ( 0.21%) 89.82
ipip 318 ( 0.00%) 38276 ( 0.00%) 120.36
ipsec 1690 ( 0.01%) 380604 ( 0.00%) 225.21
ip6 692 ( 0.00%) 89587 ( 0.00%) 129.46
other 157130 ( 0.61%) 30390654 ( 0.16%) 193.41
frag 1324 ( 0.01%) 1092001 ( 0.01%) 824.77
ip6 28663 ( 0.11%) 6612156 ( 0.04%) 230.69
tcp6 3016 ( 0.01%) 465238 ( 0.00%) 154.26
http(c) 1236 ( 0.00%) 119442 ( 0.00%) 96.64
smtp 479 ( 0.00%) 205419 ( 0.00%) 428.85
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 80 ( 0.00%) 10764 ( 0.00%) 134.55
other 1184 ( 0.00%) 126374 ( 0.00%) 106.73
udp6 19253 ( 0.07%) 3627802 ( 0.02%) 188.43
dns 17724 ( 0.07%) 3171426 ( 0.02%) 178.93
other 1529 ( 0.01%) 456376 ( 0.00%) 298.48
icmp6 4565 ( 0.02%) 575228 ( 0.00%) 126.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1799 ( 0.01%) 1939808 ( 0.01%) 1078.27
tcpdump file: 200804181400.dump.gz (656.19 MB)