Traffic Trace Info
DumpFile: 200805151400.dump
FileSize: 2082.28MB
Id: 200805151400
StartTime: Thu May 15 14:00:01 2008
EndTime: Thu May 15 14:15:01 2008
TotalTime: 899.70 seconds
TotalCapSize: 1630.31MB CapLen: 96 bytes
# of packets: 29619693 (20406.00MB)
AvgRate: 190.26Mbps stddev:20.42M
IP flow (unique src/dst pair) Information
# of flows: 822446 (avg. 36.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.6% 2.6% 1.8% 1.3% 1.1% 1.1% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 381791
Top 10 bandwidth usage (bytes/total in %):
5.3% 4.5% 4.1% 3.9% 3.2% 3.1% 2.7% 2.6% 2.2% 2.0%
# of IPv6 addresses: 1406
Top 10 bandwidth usage (bytes/total in %):
71.3% 71.3% 6.3% 5.0% 3.0% 3.0% 1.6% 1.3% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805151400.pktlen.png)
detailed numbers
[ 32- 63]: 5275537
[ 64- 127]: 7779647
[ 128- 255]: 1149534
[ 256- 511]: 999348
[ 512- 1023]: 1664602
[ 1024- 2047]: 12751025
Protocol Breakdown
![[protocol breakdown chart]](200805151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29619693 (100.00%) 21397240194 (100.00%) 722.40
ip 29385603 ( 99.21%) 21372750388 ( 99.89%) 727.32
tcp 23722995 ( 80.09%) 19264640908 ( 90.03%) 812.07
http(s) 11503923 ( 38.84%) 14950533173 ( 69.87%) 1299.60
http(c) 5974510 ( 20.17%) 705858962 ( 3.30%) 118.15
squid 876735 ( 2.96%) 444375899 ( 2.08%) 506.85
smtp 792256 ( 2.67%) 240613848 ( 1.12%) 303.71
nntp 172 ( 0.00%) 22022 ( 0.00%) 128.03
ftp 55339 ( 0.19%) 11408578 ( 0.05%) 206.16
pop3 15610 ( 0.05%) 6399444 ( 0.03%) 409.96
imap 8420 ( 0.03%) 2775502 ( 0.01%) 329.63
telnet 2509 ( 0.01%) 418507 ( 0.00%) 166.80
ssh 560875 ( 1.89%) 104749594 ( 0.49%) 186.76
dns 5713 ( 0.02%) 491864 ( 0.00%) 86.10
bgp 211 ( 0.00%) 67399 ( 0.00%) 319.43
napster 35 ( 0.00%) 7409 ( 0.00%) 211.69
realaud 20 ( 0.00%) 2521 ( 0.00%) 126.05
rtsp 387441 ( 1.31%) 383868573 ( 1.79%) 990.78
icecast 23611 ( 0.08%) 22405877 ( 0.10%) 948.96
hotline 25 ( 0.00%) 4628 ( 0.00%) 185.12
other 3515588 ( 11.87%) 2390636988 ( 11.17%) 680.01
udp 5018998 ( 16.94%) 2040200780 ( 9.53%) 406.50
dns 1909534 ( 6.45%) 427400770 ( 2.00%) 223.82
realaud 9702 ( 0.03%) 4832028 ( 0.02%) 498.04
halflif 21 ( 0.00%) 4409 ( 0.00%) 209.95
starcra 20 ( 0.00%) 4169 ( 0.00%) 208.45
everque 560 ( 0.00%) 116753 ( 0.00%) 208.49
unreal 25 ( 0.00%) 5159 ( 0.00%) 206.36
quake 12 ( 0.00%) 1026 ( 0.00%) 85.50
cuseeme 13 ( 0.00%) 2027 ( 0.00%) 155.92
other 3098811 ( 10.46%) 1607765947 ( 7.51%) 518.83
icmp 525691 ( 1.77%) 46615393 ( 0.22%) 88.67
ipip 320 ( 0.00%) 39080 ( 0.00%) 122.12
ipsec 5123 ( 0.02%) 1224804 ( 0.01%) 239.08
ip6 670 ( 0.00%) 84597 ( 0.00%) 126.26
other 111806 ( 0.38%) 19944826 ( 0.09%) 178.39
frag 20139 ( 0.07%) 18491359 ( 0.09%) 918.19
ip6 234090 ( 0.79%) 24489806 ( 0.11%) 104.62
tcp6 207427 ( 0.70%) 19817333 ( 0.09%) 95.54
http(s) 1400 ( 0.00%) 1826396 ( 0.01%) 1304.57
http(c) 671 ( 0.00%) 96543 ( 0.00%) 143.88
smtp 674 ( 0.00%) 263836 ( 0.00%) 391.45
ssh 706 ( 0.00%) 61292 ( 0.00%) 86.82
dns 13 ( 0.00%) 1273 ( 0.00%) 97.92
bgp 81 ( 0.00%) 11929 ( 0.00%) 147.27
other 203882 ( 0.69%) 17556064 ( 0.08%) 86.11
udp6 22310 ( 0.08%) 4113008 ( 0.02%) 184.36
dns 21300 ( 0.07%) 3876204 ( 0.02%) 181.98
other 1010 ( 0.00%) 236804 ( 0.00%) 234.46
icmp6 4321 ( 0.01%) 553554 ( 0.00%) 128.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1831 ( 0.00%) 915.50
tcpdump file: 200805151400.dump.gz (722.65 MB)