Traffic Trace Info
DumpFile: 200804261400.dump
FileSize: 1318.31MB
Id: 200804261400
StartTime: Sat Apr 26 14:00:00 2008
EndTime: Sat Apr 26 14:15:00 2008
TotalTime: 899.98 seconds
TotalCapSize: 1034.94MB CapLen: 96 bytes
# of packets: 18570610 (11524.38MB)
AvgRate: 107.42Mbps stddev:21.60M
IP flow (unique src/dst pair) Information
# of flows: 768117 (avg. 24.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.7% 1.6% 1.5% 1.5% 1.5% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 409161
Top 10 bandwidth usage (bytes/total in %):
8.6% 6.9% 4.4% 4.1% 3.7% 3.6% 3.4% 3.2% 3.1% 2.3%
# of IPv6 addresses: 1524
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.2% 8.1% 8.1% 6.6% 6.5% 6.2% 5.8% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804261400.pktlen.png)
detailed numbers
[ 32- 63]: 3531386
[ 64- 127]: 5481075
[ 128- 255]: 872240
[ 256- 511]: 773975
[ 512- 1023]: 765409
[ 1024- 2047]: 7146525
Protocol Breakdown
![[protocol breakdown chart]](200804261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18570610 (100.00%) 12084192275 (100.00%) 650.72
ip 18550221 ( 99.89%) 12080755461 ( 99.97%) 651.25
tcp 15059666 ( 81.09%) 11427665717 ( 94.57%) 758.83
http(s) 5870020 ( 31.61%) 7791821677 ( 64.48%) 1327.39
http(c) 2997964 ( 16.14%) 359440778 ( 2.97%) 119.89
squid 1317471 ( 7.09%) 404541558 ( 3.35%) 307.06
smtp 670411 ( 3.61%) 114067232 ( 0.94%) 170.15
ftp 103046 ( 0.55%) 39145323 ( 0.32%) 379.88
pop3 25805 ( 0.14%) 19078375 ( 0.16%) 739.33
imap 8288 ( 0.04%) 3963342 ( 0.03%) 478.20
telnet 1653 ( 0.01%) 207235 ( 0.00%) 125.37
ssh 170886 ( 0.92%) 205834093 ( 1.70%) 1204.51
dns 4496 ( 0.02%) 437162 ( 0.00%) 97.23
bgp 257 ( 0.00%) 107753 ( 0.00%) 419.27
napster 93 ( 0.00%) 22815 ( 0.00%) 245.32
realaud 10 ( 0.00%) 604 ( 0.00%) 60.40
rtsp 553331 ( 2.98%) 514118979 ( 4.25%) 929.13
icecast 787 ( 0.00%) 60767 ( 0.00%) 77.21
hotline 13 ( 0.00%) 796 ( 0.00%) 61.23
other 3335134 ( 17.96%) 1974817168 ( 16.34%) 592.13
udp 2655895 ( 14.30%) 567868235 ( 4.70%) 213.81
dns 1473919 ( 7.94%) 365174193 ( 3.02%) 247.76
realaud 20026 ( 0.11%) 10504101 ( 0.09%) 524.52
halflif 16 ( 0.00%) 2930 ( 0.00%) 183.12
starcra 20 ( 0.00%) 3774 ( 0.00%) 188.70
everque 42 ( 0.00%) 4988 ( 0.00%) 118.76
unreal 20 ( 0.00%) 2811 ( 0.00%) 140.55
quake 18 ( 0.00%) 2287 ( 0.00%) 127.06
cuseeme 6 ( 0.00%) 1539 ( 0.00%) 256.50
other 1161791 ( 6.26%) 192141067 ( 1.59%) 165.38
icmp 668311 ( 3.60%) 59926895 ( 0.50%) 89.67
ipip 342 ( 0.00%) 41930 ( 0.00%) 122.60
ipsec 809 ( 0.00%) 108406 ( 0.00%) 134.00
ip6 729 ( 0.00%) 93071 ( 0.00%) 127.67
other 164469 ( 0.89%) 25051207 ( 0.21%) 152.32
frag 11588 ( 0.06%) 9205631 ( 0.08%) 794.41
ip6 20389 ( 0.11%) 3436814 ( 0.03%) 168.56
tcp6 3203 ( 0.02%) 368780 ( 0.00%) 115.14
http(s) 11 ( 0.00%) 4808 ( 0.00%) 437.09
http(c) 518 ( 0.00%) 51524 ( 0.00%) 99.47
smtp 159 ( 0.00%) 43066 ( 0.00%) 270.86
pop3 441 ( 0.00%) 41560 ( 0.00%) 94.24
ssh 48 ( 0.00%) 7232 ( 0.00%) 150.67
dns 543 ( 0.00%) 64577 ( 0.00%) 118.93
bgp 90 ( 0.00%) 11737 ( 0.00%) 130.41
other 1393 ( 0.01%) 144276 ( 0.00%) 103.57
udp6 11415 ( 0.06%) 2407038 ( 0.02%) 210.87
dns 9831 ( 0.05%) 2009144 ( 0.02%) 204.37
other 1584 ( 0.01%) 397894 ( 0.00%) 251.20
icmp6 5739 ( 0.03%) 655024 ( 0.01%) 114.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1892 ( 0.00%) 946.00
tcpdump file: 200804261400.dump.gz (467.74 MB)