Traffic Trace Info
DumpFile: 200805141400.dump
FileSize: 1910.77MB
Id: 200805141400
StartTime: Wed May 14 14:00:00 2008
EndTime: Wed May 14 14:15:01 2008
TotalTime: 900.73 seconds
TotalCapSize: 1499.88MB CapLen: 96 bytes
# of packets: 26927685 (18585.63MB)
AvgRate: 173.10Mbps stddev:25.01M
IP flow (unique src/dst pair) Information
# of flows: 795825 (avg. 33.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.2% 1.6% 1.6% 1.5% 1.3% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 383307
Top 10 bandwidth usage (bytes/total in %):
4.4% 4.2% 3.7% 3.2% 2.9% 2.6% 2.4% 2.3% 2.1% 1.7%
# of IPv6 addresses: 1313
Top 10 bandwidth usage (bytes/total in %):
9.9% 8.3% 8.2% 7.1% 7.0% 6.4% 5.6% 5.6% 5.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805141400.pktlen.png)
detailed numbers
[ 32- 63]: 5385271
[ 64- 127]: 6763050
[ 128- 255]: 1070543
[ 256- 511]: 866110
[ 512- 1023]: 1120124
[ 1024- 2047]: 11722587
Protocol Breakdown
![[protocol breakdown chart]](200805141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26927685 (100.00%) 19488442209 (100.00%) 723.73
ip 26898721 ( 99.89%) 19483279201 ( 99.97%) 724.32
tcp 23349975 ( 86.71%) 18592365351 ( 95.40%) 796.25
http(s) 11136344 ( 41.36%) 14454782997 ( 74.17%) 1297.98
http(c) 5812159 ( 21.58%) 650153687 ( 3.34%) 111.86
squid 791105 ( 2.94%) 278827602 ( 1.43%) 352.45
smtp 805099 ( 2.99%) 230610003 ( 1.18%) 286.44
nntp 119 ( 0.00%) 18847 ( 0.00%) 158.38
ftp 86737 ( 0.32%) 59493366 ( 0.31%) 685.91
pop3 29339 ( 0.11%) 16379451 ( 0.08%) 558.28
imap 6906 ( 0.03%) 2431317 ( 0.01%) 352.06
telnet 1944 ( 0.01%) 335027 ( 0.00%) 172.34
ssh 636700 ( 2.36%) 88795906 ( 0.46%) 139.46
dns 7540 ( 0.03%) 612675 ( 0.00%) 81.26
bgp 180 ( 0.00%) 53935 ( 0.00%) 299.64
napster 48 ( 0.00%) 5441 ( 0.00%) 113.35
realaud 16 ( 0.00%) 1021 ( 0.00%) 63.81
rtsp 222091 ( 0.82%) 225721480 ( 1.16%) 1016.35
icecast 25220 ( 0.09%) 25753815 ( 0.13%) 1021.17
hotline 5 ( 0.00%) 507 ( 0.00%) 101.40
other 3788390 ( 14.07%) 2558386294 ( 13.13%) 675.32
udp 2816939 ( 10.46%) 810176754 ( 4.16%) 287.61
dns 1864223 ( 6.92%) 423315123 ( 2.17%) 227.07
realaud 28860 ( 0.11%) 17132646 ( 0.09%) 593.65
halflif 23 ( 0.00%) 2260 ( 0.00%) 98.26
starcra 28 ( 0.00%) 3018 ( 0.00%) 107.79
everque 65 ( 0.00%) 7099 ( 0.00%) 109.22
unreal 14 ( 0.00%) 2004 ( 0.00%) 143.14
quake 14 ( 0.00%) 1088 ( 0.00%) 77.71
cuseeme 10 ( 0.00%) 1140 ( 0.00%) 114.00
other 923612 ( 3.43%) 369660159 ( 1.90%) 400.23
icmp 549361 ( 2.04%) 47923800 ( 0.25%) 87.24
ipip 339 ( 0.00%) 40914 ( 0.00%) 120.69
ipsec 2947 ( 0.01%) 613994 ( 0.00%) 208.35
ip6 1971 ( 0.01%) 346471 ( 0.00%) 175.78
other 177189 ( 0.66%) 31811917 ( 0.16%) 179.54
frag 16534 ( 0.06%) 15471748 ( 0.08%) 935.75
ip6 28964 ( 0.11%) 5163008 ( 0.03%) 178.26
tcp6 5520 ( 0.02%) 791955 ( 0.00%) 143.47
http(c) 981 ( 0.00%) 105935 ( 0.00%) 107.99
smtp 512 ( 0.00%) 232936 ( 0.00%) 454.95
ssh 267 ( 0.00%) 34831 ( 0.00%) 130.45
dns 12 ( 0.00%) 1179 ( 0.00%) 98.25
bgp 63 ( 0.00%) 6620 ( 0.00%) 105.08
other 3685 ( 0.01%) 410454 ( 0.00%) 111.39
udp6 19326 ( 0.07%) 3806836 ( 0.02%) 196.98
dns 18378 ( 0.07%) 3594513 ( 0.02%) 195.59
unreal 1 ( 0.00%) 137 ( 0.00%) 137.00
other 947 ( 0.00%) 212186 ( 0.00%) 224.06
icmp6 4042 ( 0.02%) 523790 ( 0.00%) 129.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 46 ( 0.00%) 36347 ( 0.00%) 790.15
tcpdump file: 200805141400.dump.gz (673.33 MB)