Traffic Trace Info
DumpFile: 200805051400.dump
FileSize: 1246.84MB
Id: 200805051400
StartTime: Mon May 5 14:00:00 2008
EndTime: Mon May 5 14:15:00 2008
TotalTime: 899.86 seconds
TotalCapSize: 980.85MB CapLen: 96 bytes
# of packets: 17431217 (9140.48MB)
AvgRate: 85.19Mbps stddev:17.30M
IP flow (unique src/dst pair) Information
# of flows: 784658 (avg. 22.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.6% 2.6% 1.5% 1.4% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 384720
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.2% 4.8% 4.3% 4.1% 4.0% 4.0% 3.9% 2.7% 2.6%
# of IPv6 addresses: 970
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.0% 7.0% 7.0% 6.6% 6.1% 5.8% 5.7% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805051400.pktlen.png)
detailed numbers
[ 32- 63]: 3117714
[ 64- 127]: 6798156
[ 128- 255]: 986013
[ 256- 511]: 579904
[ 512- 1023]: 316152
[ 1024- 2047]: 5633278
Protocol Breakdown
![[protocol breakdown chart]](200805051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17431217 (100.00%) 9584486468 (100.00%) 549.85
ip 17413461 ( 99.90%) 9581260657 ( 99.97%) 550.22
tcp 14214532 ( 81.55%) 9168582458 ( 95.66%) 645.01
http(s) 5274545 ( 30.26%) 6903682994 ( 72.03%) 1308.87
http(c) 2769219 ( 15.89%) 326859006 ( 3.41%) 118.03
squid 576869 ( 3.31%) 246514948 ( 2.57%) 427.33
smtp 688978 ( 3.95%) 134170030 ( 1.40%) 194.74
ftp 130020 ( 0.75%) 25807080 ( 0.27%) 198.49
pop3 6893 ( 0.04%) 2587820 ( 0.03%) 375.43
imap 3464 ( 0.02%) 953471 ( 0.01%) 275.25
telnet 2372 ( 0.01%) 386879 ( 0.00%) 163.10
ssh 303529 ( 1.74%) 95912516 ( 1.00%) 315.99
dns 4502 ( 0.03%) 401016 ( 0.00%) 89.08
bgp 185 ( 0.00%) 49672 ( 0.00%) 268.50
napster 22 ( 0.00%) 2276 ( 0.00%) 103.45
realaud 10 ( 0.00%) 2640 ( 0.00%) 264.00
rtsp 140873 ( 0.81%) 103338034 ( 1.08%) 733.55
icecast 878 ( 0.01%) 66324 ( 0.00%) 75.54
other 4312170 ( 24.74%) 1327847572 ( 13.85%) 307.93
udp 1782070 ( 10.22%) 279606665 ( 2.92%) 156.90
dns 1242105 ( 7.13%) 166826963 ( 1.74%) 134.31
realaud 16 ( 0.00%) 1246 ( 0.00%) 77.88
halflif 8 ( 0.00%) 604 ( 0.00%) 75.50
starcra 17 ( 0.00%) 3097 ( 0.00%) 182.18
everque 62 ( 0.00%) 6811 ( 0.00%) 109.85
unreal 8 ( 0.00%) 1637 ( 0.00%) 204.62
quake 5 ( 0.00%) 384 ( 0.00%) 76.80
cuseeme 3 ( 0.00%) 211 ( 0.00%) 70.33
other 539839 ( 3.10%) 112759396 ( 1.18%) 208.88
icmp 1341157 ( 7.69%) 117578434 ( 1.23%) 87.67
ipip 316 ( 0.00%) 38758 ( 0.00%) 122.65
ipsec 810 ( 0.00%) 108540 ( 0.00%) 134.00
ip6 798 ( 0.00%) 100371 ( 0.00%) 125.78
other 73778 ( 0.42%) 15245431 ( 0.16%) 206.64
frag 1278 ( 0.01%) 1045245 ( 0.01%) 817.88
ip6 17756 ( 0.10%) 3225811 ( 0.03%) 181.67
tcp6 1534 ( 0.01%) 258440 ( 0.00%) 168.47
http(s) 13 ( 0.00%) 4781 ( 0.00%) 367.77
http(c) 133 ( 0.00%) 13853 ( 0.00%) 104.16
smtp 380 ( 0.00%) 133248 ( 0.00%) 350.65
pop3 56 ( 0.00%) 5926 ( 0.00%) 105.82
dns 11 ( 0.00%) 1181 ( 0.00%) 107.36
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 880 ( 0.01%) 93128 ( 0.00%) 105.83
udp6 12472 ( 0.07%) 2504677 ( 0.03%) 200.82
dns 11937 ( 0.07%) 2381381 ( 0.02%) 199.50
other 535 ( 0.00%) 123296 ( 0.00%) 230.46
icmp6 3720 ( 0.02%) 458614 ( 0.00%) 123.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200805051400.dump.gz (435.32 MB)