Traffic Trace Info
DumpFile: 200804221400.dump
FileSize: 2193.88MB
Id: 200804221400
StartTime: Tue Apr 22 14:00:01 2008
EndTime: Tue Apr 22 14:15:00 2008
TotalTime: 899.15 seconds
TotalCapSize: 1722.56MB CapLen: 96 bytes
# of packets: 30887607 (21722.56MB)
AvgRate: 202.65Mbps stddev:22.63M
IP flow (unique src/dst pair) Information
# of flows: 776742 (avg. 39.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 2.2% 1.6% 1.5% 1.1% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 375633
Top 10 bandwidth usage (bytes/total in %):
5.3% 5.1% 5.0% 4.7% 2.8% 2.8% 2.6% 2.6% 2.5% 2.4%
# of IPv6 addresses: 1610
Top 10 bandwidth usage (bytes/total in %):
86.3% 86.3% 4.9% 4.3% 0.9% 0.9% 0.8% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804221400.pktlen.png)
detailed numbers
[ 32- 63]: 6846057
[ 64- 127]: 6632151
[ 128- 255]: 1237657
[ 256- 511]: 1328242
[ 512- 1023]: 1027911
[ 1024- 2047]: 13815589
Protocol Breakdown
![[protocol breakdown chart]](200804221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30887607 (100.00%) 22777749965 (100.00%) 737.44
ip 30832999 ( 99.82%) 22732330366 ( 99.80%) 737.27
tcp 27682703 ( 89.62%) 22089822781 ( 96.98%) 797.96
http(s) 11991481 ( 38.82%) 15501623437 ( 68.06%) 1292.72
http(c) 5841974 ( 18.91%) 1323250122 ( 5.81%) 226.51
squid 2250872 ( 7.29%) 575686996 ( 2.53%) 255.76
smtp 831303 ( 2.69%) 216861048 ( 0.95%) 260.87
nntp 20 ( 0.00%) 1644 ( 0.00%) 82.20
ftp 93645 ( 0.30%) 59611387 ( 0.26%) 636.57
pop3 24254 ( 0.08%) 12859337 ( 0.06%) 530.19
imap 13098 ( 0.04%) 5634272 ( 0.02%) 430.16
telnet 2924 ( 0.01%) 540795 ( 0.00%) 184.95
ssh 416078 ( 1.35%) 386123746 ( 1.70%) 928.01
dns 12017 ( 0.04%) 4489685 ( 0.02%) 373.61
bgp 186 ( 0.00%) 56257 ( 0.00%) 302.46
napster 31 ( 0.00%) 5218 ( 0.00%) 168.32
realaud 56 ( 0.00%) 7830 ( 0.00%) 139.82
rtsp 567416 ( 1.84%) 521862790 ( 2.29%) 919.72
icecast 17579 ( 0.06%) 24197860 ( 0.11%) 1376.52
other 5619767 ( 18.19%) 3457010237 ( 15.18%) 615.15
udp 2474638 ( 8.01%) 554205475 ( 2.43%) 223.95
dns 1789271 ( 5.79%) 393557793 ( 1.73%) 219.95
realaud 1886 ( 0.01%) 117857 ( 0.00%) 62.49
halflif 23 ( 0.00%) 2176 ( 0.00%) 94.61
starcra 17 ( 0.00%) 2866 ( 0.00%) 168.59
everque 203 ( 0.00%) 23851 ( 0.00%) 117.49
unreal 51 ( 0.00%) 9476 ( 0.00%) 185.80
quake 207 ( 0.00%) 41955 ( 0.00%) 202.68
cuseeme 4 ( 0.00%) 275 ( 0.00%) 68.75
other 682936 ( 2.21%) 160420457 ( 0.70%) 234.90
icmp 447128 ( 1.45%) 41239870 ( 0.18%) 92.23
ipip 364 ( 0.00%) 44020 ( 0.00%) 120.93
ipsec 3618 ( 0.01%) 900588 ( 0.00%) 248.92
ip6 773 ( 0.00%) 96756 ( 0.00%) 125.17
other 223775 ( 0.72%) 46020876 ( 0.20%) 205.66
frag 1569 ( 0.01%) 1312770 ( 0.01%) 836.69
ip6 54608 ( 0.18%) 45419599 ( 0.20%) 831.74
tcp6 33160 ( 0.11%) 39857829 ( 0.17%) 1201.99
http(s) 13 ( 0.00%) 9301 ( 0.00%) 715.46
http(c) 178 ( 0.00%) 18476 ( 0.00%) 103.80
smtp 861 ( 0.00%) 435041 ( 0.00%) 505.27
ftp 31 ( 0.00%) 2848 ( 0.00%) 91.87
ssh 30351 ( 0.10%) 39210162 ( 0.17%) 1291.89
dns 2 ( 0.00%) 188 ( 0.00%) 94.00
bgp 93 ( 0.00%) 11848 ( 0.00%) 127.40
other 1631 ( 0.01%) 169965 ( 0.00%) 104.21
udp6 15005 ( 0.05%) 3050022 ( 0.01%) 203.27
dns 13332 ( 0.04%) 2675333 ( 0.01%) 200.67
other 1673 ( 0.01%) 374689 ( 0.00%) 223.96
icmp6 4614 ( 0.01%) 566601 ( 0.00%) 122.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1799 ( 0.01%) 1941067 ( 0.01%) 1078.97
tcpdump file: 200804221400.dump.gz (772.16 MB)