Traffic Trace Info
DumpFile: 200804281400.dump
FileSize: 2178.66MB
Id: 200804281400
StartTime: Mon Apr 28 14:00:01 2008
EndTime: Mon Apr 28 14:15:00 2008
TotalTime: 899.88 seconds
TotalCapSize: 1711.41MB CapLen: 96 bytes
# of packets: 30621275 (19820.35MB)
AvgRate: 184.78Mbps stddev:33.93M
IP flow (unique src/dst pair) Information
# of flows: 849815 (avg. 36.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.6% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 408994
Top 10 bandwidth usage (bytes/total in %):
5.5% 3.6% 2.9% 2.5% 2.5% 2.1% 2.0% 1.9% 1.8% 1.7%
# of IPv6 addresses: 1644
Top 10 bandwidth usage (bytes/total in %):
13.1% 12.3% 9.3% 7.9% 7.7% 7.5% 5.7% 4.9% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804281400.pktlen.png)
detailed numbers
[ 32- 63]: 6004885
[ 64- 127]: 8986057
[ 128- 255]: 1166529
[ 256- 511]: 1010554
[ 512- 1023]: 948849
[ 1024- 2047]: 12504401
Protocol Breakdown
![[protocol breakdown chart]](200804281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30621275 (100.00%) 20783138976 (100.00%) 678.72
ip 30597643 ( 99.92%) 20778500629 ( 99.98%) 679.09
tcp 26632872 ( 86.98%) 20073017694 ( 96.58%) 753.69
http(s) 11232934 ( 36.68%) 14684916098 ( 70.66%) 1307.31
http(c) 5652570 ( 18.46%) 695539241 ( 3.35%) 123.05
squid 1490987 ( 4.87%) 434436952 ( 2.09%) 291.38
smtp 989043 ( 3.23%) 345057373 ( 1.66%) 348.88
nntp 30 ( 0.00%) 2280 ( 0.00%) 76.00
ftp 59507 ( 0.19%) 17271899 ( 0.08%) 290.25
pop3 56048 ( 0.18%) 47900425 ( 0.23%) 854.63
imap 11779 ( 0.04%) 7171513 ( 0.03%) 608.84
telnet 3151 ( 0.01%) 471297 ( 0.00%) 149.57
ssh 21906 ( 0.07%) 6275819 ( 0.03%) 286.49
dns 12056 ( 0.04%) 4494554 ( 0.02%) 372.81
bgp 198 ( 0.00%) 61099 ( 0.00%) 308.58
napster 140 ( 0.00%) 13460 ( 0.00%) 96.14
realaud 88 ( 0.00%) 9382 ( 0.00%) 106.61
rtsp 752321 ( 2.46%) 736859002 ( 3.55%) 979.45
icecast 58341 ( 0.19%) 47134886 ( 0.23%) 807.92
other 6291769 ( 20.55%) 3045402174 ( 14.65%) 484.03
udp 2598823 ( 8.49%) 564981304 ( 2.72%) 217.40
dns 1842979 ( 6.02%) 393975674 ( 1.90%) 213.77
realaud 13826 ( 0.05%) 9931706 ( 0.05%) 718.34
halflif 20 ( 0.00%) 2611 ( 0.00%) 130.55
starcra 44 ( 0.00%) 9127 ( 0.00%) 207.43
everque 261 ( 0.00%) 35729 ( 0.00%) 136.89
unreal 61 ( 0.00%) 9399 ( 0.00%) 154.08
quake 15 ( 0.00%) 1543 ( 0.00%) 102.87
cuseeme 6 ( 0.00%) 808 ( 0.00%) 134.67
other 741557 ( 2.42%) 160983153 ( 0.77%) 217.09
icmp 1154316 ( 3.77%) 107956041 ( 0.52%) 93.52
ipip 326 ( 0.00%) 40190 ( 0.00%) 123.28
ipsec 4857 ( 0.02%) 1221306 ( 0.01%) 251.45
ip6 762 ( 0.00%) 100538 ( 0.00%) 131.94
other 205687 ( 0.67%) 31183556 ( 0.15%) 151.61
frag 1597 ( 0.01%) 1370060 ( 0.01%) 857.90
ip6 23632 ( 0.08%) 4638347 ( 0.02%) 196.27
tcp6 2962 ( 0.01%) 912455 ( 0.00%) 308.05
http(s) 558 ( 0.00%) 522203 ( 0.00%) 935.85
http(c) 552 ( 0.00%) 116362 ( 0.00%) 210.80
squid 88 ( 0.00%) 6980 ( 0.00%) 79.32
smtp 218 ( 0.00%) 99513 ( 0.00%) 456.48
ftp 21 ( 0.00%) 1965 ( 0.00%) 93.57
ssh 52 ( 0.00%) 7548 ( 0.00%) 145.15
bgp 93 ( 0.00%) 13446 ( 0.00%) 144.58
other 1380 ( 0.00%) 144438 ( 0.00%) 104.67
udp6 15752 ( 0.05%) 3113702 ( 0.01%) 197.67
dns 14376 ( 0.05%) 2762215 ( 0.01%) 192.14
other 1376 ( 0.00%) 351487 ( 0.00%) 255.44
icmp6 4886 ( 0.02%) 606640 ( 0.00%) 124.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1470 ( 0.00%) 735.00
tcpdump file: 200804281400.dump.gz (762.09 MB)