Traffic Trace Info
DumpFile: 200805121400.dump
FileSize: 1921.81MB
Id: 200805121400
StartTime: Mon May 12 14:00:00 2008
EndTime: Mon May 12 14:15:01 2008
TotalTime: 900.30 seconds
TotalCapSize: 1509.67MB CapLen: 96 bytes
# of packets: 27009096 (17709.56MB)
AvgRate: 165.00Mbps stddev:20.78M
IP flow (unique src/dst pair) Information
# of flows: 686694 (avg. 39.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 299693
Top 10 bandwidth usage (bytes/total in %):
4.1% 3.8% 3.1% 2.4% 2.2% 1.9% 1.8% 1.7% 1.7% 1.6%
# of IPv6 addresses: 1542
Top 10 bandwidth usage (bytes/total in %):
13.2% 11.8% 8.3% 8.2% 6.2% 5.6% 5.6% 4.7% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805121400.pktlen.png)
detailed numbers
[ 32- 63]: 5201477
[ 64- 127]: 7429265
[ 128- 255]: 1304758
[ 256- 511]: 880406
[ 512- 1023]: 1074697
[ 1024- 2047]: 11118493
Protocol Breakdown
![[protocol breakdown chart]](200805121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27009096 (100.00%) 18569824371 (100.00%) 687.54
ip 26987016 ( 99.92%) 18565784412 ( 99.98%) 687.95
tcp 23934229 ( 88.62%) 17832202552 ( 96.03%) 745.05
http(s) 9513281 ( 35.22%) 12155581137 ( 65.46%) 1277.75
http(c) 5285763 ( 19.57%) 742305998 ( 4.00%) 140.43
squid 811907 ( 3.01%) 373272303 ( 2.01%) 459.75
smtp 850696 ( 3.15%) 207113684 ( 1.12%) 243.46
nntp 323 ( 0.00%) 42666 ( 0.00%) 132.09
ftp 62839 ( 0.23%) 30046903 ( 0.16%) 478.16
pop3 53970 ( 0.20%) 43686631 ( 0.24%) 809.46
imap 11793 ( 0.04%) 5694526 ( 0.03%) 482.87
telnet 2711 ( 0.01%) 305820 ( 0.00%) 112.81
ssh 2087754 ( 7.73%) 304062391 ( 1.64%) 145.64
dns 11264 ( 0.04%) 5332556 ( 0.03%) 473.42
bgp 200 ( 0.00%) 61057 ( 0.00%) 305.29
napster 21 ( 0.00%) 6786 ( 0.00%) 323.14
realaud 26 ( 0.00%) 2010 ( 0.00%) 77.31
rtsp 983073 ( 3.64%) 1003982888 ( 5.41%) 1021.27
icecast 17377 ( 0.06%) 15359159 ( 0.08%) 883.88
hotline 33 ( 0.00%) 2511 ( 0.00%) 76.09
other 4241195 ( 15.70%) 2945343346 ( 15.86%) 694.46
udp 2459628 ( 9.11%) 672113979 ( 3.62%) 273.26
dns 1744523 ( 6.46%) 389941885 ( 2.10%) 223.52
realaud 23727 ( 0.09%) 16715104 ( 0.09%) 704.48
halflif 8 ( 0.00%) 1247 ( 0.00%) 155.88
starcra 29 ( 0.00%) 2707 ( 0.00%) 93.34
everque 42 ( 0.00%) 4675 ( 0.00%) 111.31
unreal 7 ( 0.00%) 821 ( 0.00%) 117.29
quake 11 ( 0.00%) 1222 ( 0.00%) 111.09
cuseeme 7 ( 0.00%) 931 ( 0.00%) 133.00
other 691217 ( 2.56%) 265415740 ( 1.43%) 383.98
icmp 488244 ( 1.81%) 43842285 ( 0.24%) 89.80
ipip 324 ( 0.00%) 39782 ( 0.00%) 122.78
ipsec 3812 ( 0.01%) 921088 ( 0.00%) 241.63
ip6 1261 ( 0.00%) 223875 ( 0.00%) 177.54
other 99518 ( 0.37%) 16440851 ( 0.09%) 165.20
frag 14874 ( 0.06%) 13957316 ( 0.08%) 938.37
ip6 22078 ( 0.08%) 4039839 ( 0.02%) 182.98
tcp6 1909 ( 0.01%) 274244 ( 0.00%) 143.66
http(s) 1 ( 0.00%) 74 ( 0.00%) 74.00
http(c) 360 ( 0.00%) 38294 ( 0.00%) 106.37
smtp 345 ( 0.00%) 107403 ( 0.00%) 311.31
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 1136 ( 0.00%) 121466 ( 0.00%) 106.92
udp6 14836 ( 0.05%) 3106234 ( 0.02%) 209.37
dns 13364 ( 0.05%) 2629118 ( 0.01%) 196.73
other 1472 ( 0.01%) 477116 ( 0.00%) 324.13
icmp6 5297 ( 0.02%) 649686 ( 0.00%) 122.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5595 ( 0.00%) 932.50
tcpdump file: 200805121400.dump.gz (702.73 MB)