Traffic Trace Info
DumpFile: 200804191400.dump
FileSize: 1515.78MB
Id: 200804191400
StartTime: Sat Apr 19 14:00:01 2008
EndTime: Sat Apr 19 14:15:00 2008
TotalTime: 899.88 seconds
TotalCapSize: 1190.27MB CapLen: 96 bytes
# of packets: 21332022 (14454.11MB)
AvgRate: 134.77Mbps stddev:24.89M
IP flow (unique src/dst pair) Information
# of flows: 712068 (avg. 29.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.3% 2.3% 1.6% 1.5% 1.3% 1.3% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 387162
Top 10 bandwidth usage (bytes/total in %):
10.2% 10.0% 4.2% 4.0% 4.0% 3.7% 3.5% 3.2% 2.5% 2.4%
# of IPv6 addresses: 1323
Top 10 bandwidth usage (bytes/total in %):
44.4% 37.1% 5.2% 5.1% 4.8% 4.1% 4.1% 3.8% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804191400.pktlen.png)
detailed numbers
[ 32- 63]: 4107890
[ 64- 127]: 5688900
[ 128- 255]: 841596
[ 256- 511]: 836552
[ 512- 1023]: 671285
[ 1024- 2047]: 9185799
Protocol Breakdown
![[protocol breakdown chart]](200804191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21332022 (100.00%) 15156227965 (100.00%) 710.49
ip 21309999 ( 99.90%) 15150999570 ( 99.97%) 710.98
tcp 18000397 ( 84.38%) 14179028978 ( 93.55%) 787.71
http(s) 6678107 ( 31.31%) 9009853912 ( 59.45%) 1349.16
http(c) 3607475 ( 16.91%) 344823345 ( 2.28%) 95.59
squid 656285 ( 3.08%) 410313602 ( 2.71%) 625.21
smtp 664828 ( 3.12%) 133844119 ( 0.88%) 201.32
nntp 76 ( 0.00%) 5304 ( 0.00%) 69.79
ftp 150870 ( 0.71%) 30850996 ( 0.20%) 204.49
pop3 6691 ( 0.03%) 2706342 ( 0.02%) 404.47
imap 7469 ( 0.04%) 969318 ( 0.01%) 129.78
telnet 1765 ( 0.01%) 145629 ( 0.00%) 82.51
ssh 427958 ( 2.01%) 430241923 ( 2.84%) 1005.34
dns 3595 ( 0.02%) 268441 ( 0.00%) 74.67
bgp 188 ( 0.00%) 51597 ( 0.00%) 274.45
napster 54 ( 0.00%) 12593 ( 0.00%) 233.20
realaud 103 ( 0.00%) 33881 ( 0.00%) 328.94
rtsp 337877 ( 1.58%) 338240459 ( 2.23%) 1001.08
icecast 3065 ( 0.01%) 623290 ( 0.00%) 203.36
other 5453986 ( 25.57%) 3476043725 ( 22.93%) 637.34
udp 2638275 ( 12.37%) 894664651 ( 5.90%) 339.11
dns 1443730 ( 6.77%) 355348014 ( 2.34%) 246.13
realaud 944 ( 0.00%) 58468 ( 0.00%) 61.94
halflif 21 ( 0.00%) 3785 ( 0.00%) 180.24
starcra 14 ( 0.00%) 2175 ( 0.00%) 155.36
everque 4647 ( 0.02%) 518346 ( 0.00%) 111.54
unreal 14 ( 0.00%) 2620 ( 0.00%) 187.14
quake 860 ( 0.00%) 350026 ( 0.00%) 407.01
cuseeme 7 ( 0.00%) 914 ( 0.00%) 130.57
other 1187937 ( 5.57%) 538347053 ( 3.55%) 453.18
icmp 543105 ( 2.55%) 48457098 ( 0.32%) 89.22
ipip 328 ( 0.00%) 39730 ( 0.00%) 121.13
ipsec 808 ( 0.00%) 108272 ( 0.00%) 134.00
ip6 681 ( 0.00%) 87883 ( 0.00%) 129.05
other 126405 ( 0.59%) 28612958 ( 0.19%) 226.36
frag 1664 ( 0.01%) 1395650 ( 0.01%) 838.73
ip6 22023 ( 0.10%) 5228395 ( 0.03%) 237.41
tcp6 4597 ( 0.02%) 478337 ( 0.00%) 104.05
http(c) 1217 ( 0.01%) 116809 ( 0.00%) 95.98
smtp 114 ( 0.00%) 26565 ( 0.00%) 233.03
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 48 ( 0.00%) 4368 ( 0.00%) 91.00
dns 4 ( 0.00%) 547 ( 0.00%) 136.75
bgp 89 ( 0.00%) 11815 ( 0.00%) 132.75
other 3092 ( 0.01%) 315383 ( 0.00%) 102.00
udp6 11421 ( 0.05%) 2302779 ( 0.02%) 201.63
dns 10323 ( 0.05%) 2046069 ( 0.01%) 198.20
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1097 ( 0.01%) 256594 ( 0.00%) 233.91
icmp6 4177 ( 0.02%) 502219 ( 0.00%) 120.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1798 ( 0.01%) 1940980 ( 0.01%) 1079.52
tcpdump file: 200804191400.dump.gz (519.07 MB)