Traffic Trace Info
DumpFile: 200805061400.dump
FileSize: 1136.37MB
Id: 200805061400
StartTime: Tue May 6 14:00:01 2008
EndTime: Tue May 6 14:15:01 2008
TotalTime: 899.92 seconds
TotalCapSize: 889.65MB CapLen: 96 bytes
# of packets: 16168136 (9565.39MB)
AvgRate: 89.15Mbps stddev:15.45M
IP flow (unique src/dst pair) Information
# of flows: 775689 (avg. 20.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.6% 2.1% 1.7% 1.4% 1.4% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 416897
Top 10 bandwidth usage (bytes/total in %):
6.5% 5.3% 5.2% 4.5% 4.0% 3.9% 3.9% 3.7% 3.4% 2.6%
# of IPv6 addresses: 1075
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.2% 9.8% 9.4% 7.4% 6.7% 6.6% 5.9% 4.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805061400.pktlen.png)
detailed numbers
[ 32- 63]: 3317821
[ 64- 127]: 5065876
[ 128- 255]: 885393
[ 256- 511]: 523219
[ 512- 1023]: 379878
[ 1024- 2047]: 5995949
Protocol Breakdown
![[protocol breakdown chart]](200805061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16168136 (100.00%) 10030033534 (100.00%) 620.36
ip 16150587 ( 99.89%) 10026645360 ( 99.97%) 620.82
tcp 12436602 ( 76.92%) 9155438399 ( 91.28%) 736.17
http(s) 4775155 ( 29.53%) 6180353576 ( 61.62%) 1294.27
http(c) 2789741 ( 17.25%) 372245747 ( 3.71%) 133.43
squid 682711 ( 4.22%) 334661607 ( 3.34%) 490.20
smtp 591173 ( 3.66%) 121635932 ( 1.21%) 205.75
nntp 9 ( 0.00%) 1090 ( 0.00%) 121.11
ftp 144715 ( 0.90%) 121502102 ( 1.21%) 839.60
pop3 7620 ( 0.05%) 3082610 ( 0.03%) 404.54
imap 3915 ( 0.02%) 944338 ( 0.01%) 241.21
telnet 3192 ( 0.02%) 419068 ( 0.00%) 131.29
ssh 87491 ( 0.54%) 111334464 ( 1.11%) 1272.52
dns 3409 ( 0.02%) 269290 ( 0.00%) 78.99
bgp 215 ( 0.00%) 78147 ( 0.00%) 363.47
rtsp 101382 ( 0.63%) 98375336 ( 0.98%) 970.34
icecast 785 ( 0.00%) 63528 ( 0.00%) 80.93
hotline 6 ( 0.00%) 1518 ( 0.00%) 253.00
other 3245082 ( 20.07%) 1810469986 ( 18.05%) 557.91
udp 2809967 ( 17.38%) 770547959 ( 7.68%) 274.22
dns 1236225 ( 7.65%) 173335873 ( 1.73%) 140.21
realaud 10 ( 0.00%) 1061 ( 0.00%) 106.10
halflif 9 ( 0.00%) 1354 ( 0.00%) 150.44
starcra 22 ( 0.00%) 3481 ( 0.00%) 158.23
everque 13 ( 0.00%) 1260 ( 0.00%) 96.92
unreal 15 ( 0.00%) 2292 ( 0.00%) 152.80
quake 20 ( 0.00%) 2416 ( 0.00%) 120.80
cuseeme 6 ( 0.00%) 904 ( 0.00%) 150.67
other 1573599 ( 9.73%) 597178156 ( 5.95%) 379.50
icmp 709588 ( 4.39%) 63613564 ( 0.63%) 89.65
ipip 334 ( 0.00%) 39186 ( 0.00%) 117.32
ipsec 15802 ( 0.10%) 5715458 ( 0.06%) 361.69
ip6 660 ( 0.00%) 83320 ( 0.00%) 126.24
other 177634 ( 1.10%) 31207474 ( 0.31%) 175.68
frag 1427 ( 0.01%) 1104211 ( 0.01%) 773.80
ip6 17549 ( 0.11%) 3388174 ( 0.03%) 193.07
tcp6 2036 ( 0.01%) 646523 ( 0.01%) 317.55
http(s) 229 ( 0.00%) 321967 ( 0.00%) 1405.97
http(c) 473 ( 0.00%) 49651 ( 0.00%) 104.97
smtp 227 ( 0.00%) 157599 ( 0.00%) 694.27
dns 8 ( 0.00%) 919 ( 0.00%) 114.88
bgp 88 ( 0.00%) 10325 ( 0.00%) 117.33
other 1011 ( 0.01%) 106062 ( 0.00%) 104.91
udp6 11351 ( 0.07%) 2226229 ( 0.02%) 196.13
dns 10711 ( 0.07%) 2091804 ( 0.02%) 195.29
other 640 ( 0.00%) 134425 ( 0.00%) 210.04
icmp6 4132 ( 0.03%) 511342 ( 0.01%) 123.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200805061400.dump.gz (412.08 MB)