Traffic Trace Info
DumpFile: 200805131400.dump
FileSize: 1988.78MB
Id: 200805131400
StartTime: Tue May 13 14:00:00 2008
EndTime: Tue May 13 14:15:01 2008
TotalTime: 900.47 seconds
TotalCapSize: 1560.05MB CapLen: 96 bytes
# of packets: 28096588 (19655.80MB)
AvgRate: 183.11Mbps stddev:22.03M
IP flow (unique src/dst pair) Information
# of flows: 778250 (avg. 36.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.7% 2.9% 1.9% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 389550
Top 10 bandwidth usage (bytes/total in %):
6.5% 4.3% 4.0% 3.8% 3.6% 3.1% 2.7% 2.5% 2.2% 2.1%
# of IPv6 addresses: 1280
Top 10 bandwidth usage (bytes/total in %):
11.6% 11.5% 8.4% 7.7% 5.8% 5.7% 5.1% 4.8% 4.8% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805131400.pktlen.png)
detailed numbers
[ 32- 63]: 5705620
[ 64- 127]: 6782722
[ 128- 255]: 1188414
[ 256- 511]: 915225
[ 512- 1023]: 1035219
[ 1024- 2047]: 12469388
Protocol Breakdown
![[protocol breakdown chart]](200805131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28096588 (100.00%) 20610596186 (100.00%) 733.56
ip 28072452 ( 99.91%) 20606091387 ( 99.98%) 734.03
tcp 24545666 ( 87.36%) 19730328665 ( 95.73%) 803.82
http(s) 10898378 ( 38.79%) 13944675889 ( 67.66%) 1279.52
http(c) 6224777 ( 22.15%) 1361422045 ( 6.61%) 218.71
squid 1117177 ( 3.98%) 509688289 ( 2.47%) 456.23
smtp 709327 ( 2.52%) 201460203 ( 0.98%) 284.02
nntp 144 ( 0.00%) 17411 ( 0.00%) 120.91
ftp 54597 ( 0.19%) 15830489 ( 0.08%) 289.95
pop3 16708 ( 0.06%) 7294246 ( 0.04%) 436.57
imap 12087 ( 0.04%) 4940323 ( 0.02%) 408.73
telnet 4118 ( 0.01%) 943806 ( 0.00%) 229.19
ssh 698361 ( 2.49%) 96151998 ( 0.47%) 137.68
dns 4345 ( 0.02%) 369653 ( 0.00%) 85.08
bgp 192 ( 0.00%) 53481 ( 0.00%) 278.55
napster 21 ( 0.00%) 1752 ( 0.00%) 83.43
realaud 50 ( 0.00%) 4531 ( 0.00%) 90.62
rtsp 531148 ( 1.89%) 622909096 ( 3.02%) 1172.76
icecast 2312 ( 0.01%) 317743 ( 0.00%) 137.43
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 4271832 ( 15.20%) 2964242172 ( 14.38%) 693.90
udp 2847148 ( 10.13%) 800534857 ( 3.88%) 281.17
dns 1820434 ( 6.48%) 394520468 ( 1.91%) 216.72
realaud 10322 ( 0.04%) 4618442 ( 0.02%) 447.44
halflif 13 ( 0.00%) 1094 ( 0.00%) 84.15
starcra 26 ( 0.00%) 3159 ( 0.00%) 121.50
everque 44 ( 0.00%) 5577 ( 0.00%) 126.75
unreal 29 ( 0.00%) 6186 ( 0.00%) 213.31
quake 12 ( 0.00%) 957 ( 0.00%) 79.75
cuseeme 7 ( 0.00%) 846 ( 0.00%) 120.86
other 1016130 ( 3.62%) 401318400 ( 1.95%) 394.95
icmp 506020 ( 1.80%) 45705788 ( 0.22%) 90.32
ipip 355 ( 0.00%) 44340 ( 0.00%) 124.90
ipsec 3779 ( 0.01%) 665732 ( 0.00%) 176.17
ip6 872 ( 0.00%) 108917 ( 0.00%) 124.90
other 168612 ( 0.60%) 28703088 ( 0.14%) 170.23
frag 15050 ( 0.05%) 14054864 ( 0.07%) 933.88
ip6 24136 ( 0.09%) 4504799 ( 0.02%) 186.64
tcp6 2641 ( 0.01%) 483769 ( 0.00%) 183.18
http(s) 215 ( 0.00%) 183268 ( 0.00%) 852.41
http(c) 843 ( 0.00%) 82022 ( 0.00%) 97.30
smtp 225 ( 0.00%) 80275 ( 0.00%) 356.78
dns 6 ( 0.00%) 751 ( 0.00%) 125.17
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1290 ( 0.00%) 131017 ( 0.00%) 101.56
udp6 17063 ( 0.06%) 3449084 ( 0.02%) 202.14
dns 16171 ( 0.06%) 3241594 ( 0.02%) 200.46
other 892 ( 0.00%) 207490 ( 0.00%) 232.61
icmp6 4396 ( 0.02%) 562296 ( 0.00%) 127.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5570 ( 0.00%) 928.33
tcpdump file: 200805131400.dump.gz (701.56 MB)