Traffic Trace Info
DumpFile: 200805011400.dump
FileSize: 1819.40MB
Id: 200805011400
StartTime: Thu May 1 14:00:01 2008
EndTime: Thu May 1 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 1427.72MB CapLen: 96 bytes
# of packets: 25668726 (17271.00MB)
AvgRate: 161.07Mbps stddev:24.73M
IP flow (unique src/dst pair) Information
# of flows: 848991 (avg. 30.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.7% 1.3% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 440825
Top 10 bandwidth usage (bytes/total in %):
2.9% 2.5% 2.2% 2.2% 2.1% 2.0% 1.9% 1.8% 1.8% 1.6%
# of IPv6 addresses: 1286
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.3% 8.4% 6.6% 6.6% 5.7% 5.7% 5.5% 4.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805011400.pktlen.png)
detailed numbers
[ 32- 63]: 5069654
[ 64- 127]: 6798050
[ 128- 255]: 1173394
[ 256- 511]: 833551
[ 512- 1023]: 916690
[ 1024- 2047]: 10877387
Protocol Breakdown
![[protocol breakdown chart]](200805011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25668726 (100.00%) 18109953291 (100.00%) 705.53
ip 25647752 ( 99.92%) 18106087831 ( 99.98%) 705.95
tcp 21932729 ( 85.45%) 17482737772 ( 96.54%) 797.11
http(s) 9377547 ( 36.53%) 12332727956 ( 68.10%) 1315.13
http(c) 3993654 ( 15.56%) 479090302 ( 2.65%) 119.96
squid 1134547 ( 4.42%) 425956635 ( 2.35%) 375.44
smtp 891712 ( 3.47%) 172009145 ( 0.95%) 192.90
nntp 276 ( 0.00%) 54911 ( 0.00%) 198.95
ftp 207912 ( 0.81%) 157667603 ( 0.87%) 758.34
pop3 12486 ( 0.05%) 4758522 ( 0.03%) 381.11
imap 11687 ( 0.05%) 6056376 ( 0.03%) 518.21
telnet 2644 ( 0.01%) 341389 ( 0.00%) 129.12
ssh 660352 ( 2.57%) 93399068 ( 0.52%) 141.44
dns 6156 ( 0.02%) 486833 ( 0.00%) 79.08
bgp 209 ( 0.00%) 68071 ( 0.00%) 325.70
realaud 104 ( 0.00%) 11127 ( 0.00%) 106.99
rtsp 639817 ( 2.49%) 610125240 ( 3.37%) 953.59
icecast 31804 ( 0.12%) 31344905 ( 0.17%) 985.56
hotline 5 ( 0.00%) 1332 ( 0.00%) 266.40
other 4961774 ( 19.33%) 3168635777 ( 17.50%) 638.61
udp 2501012 ( 9.74%) 508870969 ( 2.81%) 203.47
dns 1492842 ( 5.82%) 346129043 ( 1.91%) 231.86
realaud 11962 ( 0.05%) 4734380 ( 0.03%) 395.78
halflif 2 ( 0.00%) 134 ( 0.00%) 67.00
starcra 30 ( 0.00%) 5745 ( 0.00%) 191.50
everque 731 ( 0.00%) 109499 ( 0.00%) 149.79
unreal 18 ( 0.00%) 2097 ( 0.00%) 116.50
quake 8 ( 0.00%) 1077 ( 0.00%) 134.62
other 995394 ( 3.88%) 157866626 ( 0.87%) 158.60
icmp 1199347 ( 4.67%) 112373735 ( 0.62%) 93.70
ipip 317 ( 0.00%) 39622 ( 0.00%) 124.99
ipsec 1654 ( 0.01%) 377140 ( 0.00%) 228.02
ip6 707 ( 0.00%) 89497 ( 0.00%) 126.59
other 11986 ( 0.05%) 1599096 ( 0.01%) 133.41
frag 1844 ( 0.01%) 1581220 ( 0.01%) 857.49
ip6 20974 ( 0.08%) 3865460 ( 0.02%) 184.30
tcp6 2093 ( 0.01%) 392919 ( 0.00%) 187.73
http(s) 128 ( 0.00%) 124833 ( 0.00%) 975.26
http(c) 413 ( 0.00%) 43328 ( 0.00%) 104.91
smtp 403 ( 0.00%) 104744 ( 0.00%) 259.91
bgp 73 ( 0.00%) 9683 ( 0.00%) 132.64
other 1076 ( 0.00%) 110331 ( 0.00%) 102.54
udp6 15009 ( 0.06%) 2974717 ( 0.02%) 198.20
dns 14034 ( 0.05%) 2714510 ( 0.01%) 193.42
other 975 ( 0.00%) 260207 ( 0.00%) 266.88
icmp6 3842 ( 0.01%) 493744 ( 0.00%) 128.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200805011400.dump.gz (644.00 MB)