Traffic Trace Info
DumpFile: 200804291400.dump
FileSize: 1921.71MB
Id: 200804291400
StartTime: Tue Apr 29 14:00:00 2008
EndTime: Tue Apr 29 14:15:00 2008
TotalTime: 899.71 seconds
TotalCapSize: 1518.65MB CapLen: 96 bytes
# of packets: 26414511 (11552.66MB)
AvgRate: 107.72Mbps stddev:15.01M
IP flow (unique src/dst pair) Information
# of flows: 985734 (avg. 26.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.6% 2.1% 2.0% 2.0% 1.8% 1.6% 1.5% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 499749
Top 10 bandwidth usage (bytes/total in %):
6.7% 5.7% 5.4% 4.4% 4.3% 4.1% 3.6% 3.5% 3.4% 3.3%
# of IPv6 addresses: 1457
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.4% 7.2% 6.7% 6.6% 6.6% 6.5% 4.8% 4.2% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804291400.pktlen.png)
detailed numbers
[ 32- 63]: 3732250
[ 64- 127]: 12042190
[ 128- 255]: 1730227
[ 256- 511]: 1479380
[ 512- 1023]: 891238
[ 1024- 2047]: 6539226
Protocol Breakdown
![[protocol breakdown chart]](200804291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26414511 (100.00%) 12113839489 (100.00%) 458.61
ip 26395397 ( 99.93%) 12110226324 ( 99.97%) 458.80
tcp 22078542 ( 83.58%) 11242172229 ( 92.80%) 509.19
http(s) 5149194 ( 19.49%) 6711721199 ( 55.41%) 1303.45
http(c) 3053616 ( 11.56%) 405241618 ( 3.35%) 132.71
squid 6004227 ( 22.73%) 892855860 ( 7.37%) 148.70
smtp 794646 ( 3.01%) 194028545 ( 1.60%) 244.17
nntp 154 ( 0.00%) 18539 ( 0.00%) 120.38
ftp 196419 ( 0.74%) 144698350 ( 1.19%) 736.68
pop3 10115 ( 0.04%) 3570383 ( 0.03%) 352.98
imap 5595 ( 0.02%) 1353649 ( 0.01%) 241.94
telnet 3597 ( 0.01%) 506690 ( 0.00%) 140.86
ssh 1595289 ( 6.04%) 232015049 ( 1.92%) 145.44
dns 3649 ( 0.01%) 296353 ( 0.00%) 81.21
bgp 221 ( 0.00%) 69991 ( 0.00%) 316.70
napster 26 ( 0.00%) 5112 ( 0.00%) 196.62
realaud 23 ( 0.00%) 1576 ( 0.00%) 68.52
rtsp 180134 ( 0.68%) 158023623 ( 1.30%) 877.26
icecast 1148 ( 0.00%) 216541 ( 0.00%) 188.62
other 5080462 ( 19.23%) 2497547531 ( 20.62%) 491.60
udp 2786986 ( 10.55%) 705701671 ( 5.83%) 253.21
dns 1800795 ( 6.82%) 396932333 ( 3.28%) 220.42
realaud 54034 ( 0.20%) 19179690 ( 0.16%) 354.96
halflif 15 ( 0.00%) 1905 ( 0.00%) 127.00
starcra 27 ( 0.00%) 4788 ( 0.00%) 177.33
everque 103 ( 0.00%) 12634 ( 0.00%) 122.66
unreal 16 ( 0.00%) 2609 ( 0.00%) 163.06
quake 18 ( 0.00%) 3319 ( 0.00%) 184.39
cuseeme 5 ( 0.00%) 360 ( 0.00%) 72.00
other 931960 ( 3.53%) 289551289 ( 2.39%) 310.69
icmp 1220243 ( 4.62%) 108958793 ( 0.90%) 89.29
ipip 342 ( 0.00%) 40334 ( 0.00%) 117.94
ipsec 810 ( 0.00%) 108540 ( 0.00%) 134.00
ip6 667 ( 0.00%) 84485 ( 0.00%) 126.66
other 307807 ( 1.17%) 53160272 ( 0.44%) 172.71
frag 1441 ( 0.01%) 1245319 ( 0.01%) 864.20
ip6 19114 ( 0.07%) 3613165 ( 0.03%) 189.03
tcp6 2714 ( 0.01%) 487732 ( 0.00%) 179.71
http(s) 91 ( 0.00%) 99981 ( 0.00%) 1098.69
http(c) 557 ( 0.00%) 52132 ( 0.00%) 93.59
smtp 349 ( 0.00%) 159331 ( 0.00%) 456.54
pop3 97 ( 0.00%) 9038 ( 0.00%) 93.18
dns 13 ( 0.00%) 1275 ( 0.00%) 98.08
bgp 89 ( 0.00%) 11430 ( 0.00%) 128.43
other 1518 ( 0.01%) 154545 ( 0.00%) 101.81
udp6 12741 ( 0.05%) 2663340 ( 0.02%) 209.04
dns 11260 ( 0.04%) 2280522 ( 0.02%) 202.53
everque 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1480 ( 0.01%) 382679 ( 0.00%) 258.57
icmp6 3629 ( 0.01%) 458013 ( 0.00%) 126.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200804291400.dump.gz (700.72 MB)