Traffic Trace Info
DumpFile: 200804251400.dump
FileSize: 1867.55MB
Id: 200804251400
StartTime: Fri Apr 25 14:00:00 2008
EndTime: Fri Apr 25 14:15:00 2008
TotalTime: 899.82 seconds
TotalCapSize: 1466.10MB CapLen: 96 bytes
# of packets: 26308972 (16841.89MB)
AvgRate: 156.99Mbps stddev:19.15M
IP flow (unique src/dst pair) Information
# of flows: 779692 (avg. 33.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.9% 1.2% 0.9% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 381204
Top 10 bandwidth usage (bytes/total in %):
3.2% 3.2% 2.9% 2.8% 2.7% 2.6% 2.4% 2.4% 2.3% 2.3%
# of IPv6 addresses: 2027
Top 10 bandwidth usage (bytes/total in %):
12.2% 12.2% 7.2% 7.0% 6.8% 6.6% 6.0% 5.7% 5.6% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804251400.pktlen.png)
detailed numbers
[ 32- 63]: 5727221
[ 64- 127]: 7082100
[ 128- 255]: 972635
[ 256- 511]: 1024027
[ 512- 1023]: 1016412
[ 1024- 2047]: 10486577
Protocol Breakdown
![[protocol breakdown chart]](200804251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26308972 (100.00%) 17659996770 (100.00%) 671.25
ip 26284220 ( 99.91%) 17654781707 ( 99.97%) 671.69
tcp 23117421 ( 87.87%) 16945148158 ( 95.95%) 733.00
http(s) 9231488 ( 35.09%) 11829196831 ( 66.98%) 1281.40
http(c) 5250258 ( 19.96%) 679398297 ( 3.85%) 129.40
squid 1472060 ( 5.60%) 449713644 ( 2.55%) 305.50
smtp 1074195 ( 4.08%) 306436288 ( 1.74%) 285.27
ftp 113873 ( 0.43%) 44638730 ( 0.25%) 392.00
pop3 16356 ( 0.06%) 8414898 ( 0.05%) 514.48
imap 15339 ( 0.06%) 3589617 ( 0.02%) 234.02
telnet 2371 ( 0.01%) 346813 ( 0.00%) 146.27
ssh 123716 ( 0.47%) 159648041 ( 0.90%) 1290.44
dns 3456 ( 0.01%) 302986 ( 0.00%) 87.67
bgp 190 ( 0.00%) 56472 ( 0.00%) 297.22
napster 676 ( 0.00%) 671194 ( 0.00%) 992.89
realaud 1783 ( 0.01%) 119256 ( 0.00%) 66.89
rtsp 598346 ( 2.27%) 637881916 ( 3.61%) 1066.08
icecast 58154 ( 0.22%) 54154634 ( 0.31%) 931.23
other 5155159 ( 19.59%) 2770578481 ( 15.69%) 537.44
udp 2514455 ( 9.56%) 634546170 ( 3.59%) 252.36
dns 1753614 ( 6.67%) 394880019 ( 2.24%) 225.18
realaud 19388 ( 0.07%) 16919766 ( 0.10%) 872.69
halflif 51 ( 0.00%) 8549 ( 0.00%) 167.63
starcra 43 ( 0.00%) 7651 ( 0.00%) 177.93
everque 46 ( 0.00%) 6395 ( 0.00%) 139.02
unreal 41 ( 0.00%) 5565 ( 0.00%) 135.73
quake 16 ( 0.00%) 1876 ( 0.00%) 117.25
cuseeme 7 ( 0.00%) 532 ( 0.00%) 76.00
other 741218 ( 2.82%) 222693725 ( 1.26%) 300.44
icmp 499093 ( 1.90%) 46356339 ( 0.26%) 92.88
ipip 331 ( 0.00%) 38702 ( 0.00%) 116.92
ipsec 3660 ( 0.01%) 902446 ( 0.01%) 246.57
ip6 691 ( 0.00%) 88810 ( 0.00%) 128.52
other 148569 ( 0.56%) 27701082 ( 0.16%) 186.45
frag 14160 ( 0.05%) 11107231 ( 0.06%) 784.41
ip6 24752 ( 0.09%) 5215063 ( 0.03%) 210.69
tcp6 3888 ( 0.01%) 1217886 ( 0.01%) 313.24
http(s) 630 ( 0.00%) 676504 ( 0.00%) 1073.82
http(c) 508 ( 0.00%) 52952 ( 0.00%) 104.24
smtp 389 ( 0.00%) 239961 ( 0.00%) 616.87
ssh 50 ( 0.00%) 7500 ( 0.00%) 150.00
dns 274 ( 0.00%) 32685 ( 0.00%) 119.29
bgp 86 ( 0.00%) 11548 ( 0.00%) 134.28
other 1951 ( 0.01%) 196736 ( 0.00%) 100.84
udp6 16018 ( 0.06%) 3374246 ( 0.02%) 210.65
dns 13519 ( 0.05%) 2691148 ( 0.02%) 199.06
other 2499 ( 0.01%) 683098 ( 0.00%) 273.35
icmp6 4814 ( 0.02%) 617006 ( 0.00%) 128.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1845 ( 0.00%) 922.50
tcpdump file: 200804251400.dump.gz (674.25 MB)