Traffic Trace Info
DumpFile: 200805031400.dump
FileSize: 1196.54MB
Id: 200805031400
StartTime: Sat May 3 14:00:00 2008
EndTime: Sat May 3 14:15:01 2008
TotalTime: 900.65 seconds
TotalCapSize: 939.22MB CapLen: 96 bytes
# of packets: 16863574 (9880.96MB)
AvgRate: 92.03Mbps stddev:13.97M
IP flow (unique src/dst pair) Information
# of flows: 694327 (avg. 24.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.7% 2.5% 2.0% 1.7% 1.3% 1.3% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 379485
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.6% 7.0% 5.7% 4.4% 3.8% 3.8% 3.8% 3.5% 3.5%
# of IPv6 addresses: 1161
Top 10 bandwidth usage (bytes/total in %):
10.2% 10.1% 9.9% 7.4% 7.3% 6.5% 6.5% 5.4% 5.3% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805031400.pktlen.png)
detailed numbers
[ 32- 63]: 3232779
[ 64- 127]: 5678120
[ 128- 255]: 934040
[ 256- 511]: 489580
[ 512- 1023]: 334839
[ 1024- 2047]: 6194216
Protocol Breakdown
![[protocol breakdown chart]](200805031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16863574 (100.00%) 10360938946 (100.00%) 614.40
ip 16844343 ( 99.89%) 10357428480 ( 99.97%) 614.89
tcp 13718912 ( 81.35%) 9727657935 ( 93.89%) 709.07
http(s) 4773426 ( 28.31%) 6510957590 ( 62.84%) 1364.00
http(c) 2747880 ( 16.29%) 267238442 ( 2.58%) 97.25
squid 558012 ( 3.31%) 338775953 ( 3.27%) 607.11
smtp 847610 ( 5.03%) 131483932 ( 1.27%) 155.12
nntp 6 ( 0.00%) 738 ( 0.00%) 123.00
ftp 82326 ( 0.49%) 44640714 ( 0.43%) 542.24
pop3 7358 ( 0.04%) 2153644 ( 0.02%) 292.69
imap 5571 ( 0.03%) 1636188 ( 0.02%) 293.70
telnet 1406 ( 0.01%) 196829 ( 0.00%) 139.99
ssh 79120 ( 0.47%) 15209527 ( 0.15%) 192.23
dns 4249 ( 0.03%) 381952 ( 0.00%) 89.89
bgp 215 ( 0.00%) 70905 ( 0.00%) 329.79
napster 14 ( 0.00%) 933 ( 0.00%) 66.64
realaud 13 ( 0.00%) 830 ( 0.00%) 63.85
rtsp 131680 ( 0.78%) 133475931 ( 1.29%) 1013.64
icecast 4809 ( 0.03%) 791712 ( 0.01%) 164.63
other 4475211 ( 26.54%) 2280641755 ( 22.01%) 509.62
udp 1998549 ( 11.85%) 515392783 ( 4.97%) 257.88
dns 1103336 ( 6.54%) 149854945 ( 1.45%) 135.82
realaud 126 ( 0.00%) 9069 ( 0.00%) 71.98
halflif 10 ( 0.00%) 1113 ( 0.00%) 111.30
starcra 27 ( 0.00%) 4825 ( 0.00%) 178.70
everque 33 ( 0.00%) 5139 ( 0.00%) 155.73
unreal 43 ( 0.00%) 4051 ( 0.00%) 94.21
quake 7 ( 0.00%) 516 ( 0.00%) 73.71
cuseeme 5 ( 0.00%) 682 ( 0.00%) 136.40
other 894763 ( 5.31%) 365490445 ( 3.53%) 408.48
icmp 1025700 ( 6.08%) 99558185 ( 0.96%) 97.06
ipip 327 ( 0.00%) 39326 ( 0.00%) 120.26
ipsec 815 ( 0.00%) 109210 ( 0.00%) 134.00
ip6 963 ( 0.01%) 120940 ( 0.00%) 125.59
other 99077 ( 0.59%) 14550101 ( 0.14%) 146.86
frag 2975 ( 0.02%) 2319516 ( 0.02%) 779.67
ip6 19231 ( 0.11%) 3510466 ( 0.03%) 182.54
tcp6 2858 ( 0.02%) 377168 ( 0.00%) 131.97
http(s) 23 ( 0.00%) 27768 ( 0.00%) 1207.30
http(c) 392 ( 0.00%) 41384 ( 0.00%) 105.57
smtp 301 ( 0.00%) 97198 ( 0.00%) 322.92
pop3 42 ( 0.00%) 4598 ( 0.00%) 109.48
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6651 ( 0.00%) 105.57
other 2030 ( 0.01%) 198934 ( 0.00%) 98.00
udp6 11683 ( 0.07%) 2559759 ( 0.02%) 219.10
dns 10542 ( 0.06%) 2189927 ( 0.02%) 207.73
starcra 1 ( 0.00%) 576 ( 0.00%) 576.00
other 1140 ( 0.01%) 369256 ( 0.00%) 323.91
icmp6 4660 ( 0.03%) 569459 ( 0.01%) 122.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200805031400.dump.gz (414.65 MB)