Traffic Trace Info
DumpFile: 200805161400.dump
FileSize: 1743.11MB
Id: 200805161400
StartTime: Fri May 16 14:00:01 2008
EndTime: Fri May 16 14:15:00 2008
TotalTime: 899.62 seconds
TotalCapSize: 1368.46MB CapLen: 96 bytes
# of packets: 24552802 (17268.50MB)
AvgRate: 161.01Mbps stddev:25.37M
IP flow (unique src/dst pair) Information
# of flows: 757583 (avg. 32.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.8% 2.3% 2.0% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 371631
Top 10 bandwidth usage (bytes/total in %):
5.7% 4.7% 4.4% 4.0% 3.9% 3.5% 2.5% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1264
Top 10 bandwidth usage (bytes/total in %):
8.2% 6.6% 6.6% 5.5% 5.2% 5.2% 5.2% 5.2% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805161400.pktlen.png)
detailed numbers
[ 32- 63]: 4843367
[ 64- 127]: 6062040
[ 128- 255]: 889433
[ 256- 511]: 895970
[ 512- 1023]: 849848
[ 1024- 2047]: 11012144
Protocol Breakdown
![[protocol breakdown chart]](200805161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24552802 (100.00%) 18107333054 (100.00%) 737.49
ip 24525564 ( 99.89%) 18102347653 ( 99.97%) 738.10
tcp 20983505 ( 85.46%) 17379225896 ( 95.98%) 828.23
http(s) 10438693 ( 42.52%) 13514379950 ( 74.63%) 1294.64
http(c) 5429974 ( 22.12%) 616558959 ( 3.41%) 113.55
squid 676534 ( 2.76%) 220667140 ( 1.22%) 326.17
smtp 675712 ( 2.75%) 180148744 ( 0.99%) 266.61
nntp 48 ( 0.00%) 6927 ( 0.00%) 144.31
ftp 68853 ( 0.28%) 11124204 ( 0.06%) 161.56
pop3 13819 ( 0.06%) 8061626 ( 0.04%) 583.37
imap 9206 ( 0.04%) 3155421 ( 0.02%) 342.76
telnet 1673 ( 0.01%) 186578 ( 0.00%) 111.52
ssh 21897 ( 0.09%) 15569719 ( 0.09%) 711.04
dns 6120 ( 0.02%) 1469631 ( 0.01%) 240.14
bgp 457 ( 0.00%) 267696 ( 0.00%) 585.77
napster 201 ( 0.00%) 14917 ( 0.00%) 74.21
realaud 7243 ( 0.03%) 9072622 ( 0.05%) 1252.61
rtsp 462652 ( 1.88%) 483899040 ( 2.67%) 1045.92
icecast 43652 ( 0.18%) 44420732 ( 0.25%) 1017.61
other 3126769 ( 12.73%) 2270221870 ( 12.54%) 726.06
udp 2631020 ( 10.72%) 635740403 ( 3.51%) 241.63
dns 1604213 ( 6.53%) 368350860 ( 2.03%) 229.61
realaud 17083 ( 0.07%) 4631973 ( 0.03%) 271.15
halflif 22 ( 0.00%) 3715 ( 0.00%) 168.86
starcra 86 ( 0.00%) 12298 ( 0.00%) 143.00
everque 46 ( 0.00%) 8843 ( 0.00%) 192.24
unreal 36 ( 0.00%) 6150 ( 0.00%) 170.83
quake 62 ( 0.00%) 7230 ( 0.00%) 116.61
cuseeme 2 ( 0.00%) 155 ( 0.00%) 77.50
other 1009403 ( 4.11%) 262676167 ( 1.45%) 260.23
icmp 766513 ( 3.12%) 62427909 ( 0.34%) 81.44
ipip 344 ( 0.00%) 47933 ( 0.00%) 139.34
ipsec 3787 ( 0.02%) 1040618 ( 0.01%) 274.79
ip6 1001 ( 0.00%) 136612 ( 0.00%) 136.48
other 139394 ( 0.57%) 23728282 ( 0.13%) 170.22
frag 11945 ( 0.05%) 11199290 ( 0.06%) 937.57
ip6 27238 ( 0.11%) 4985401 ( 0.03%) 183.03
tcp6 5778 ( 0.02%) 1251077 ( 0.01%) 216.52
http(s) 483 ( 0.00%) 556712 ( 0.00%) 1152.61
http(c) 3420 ( 0.01%) 326244 ( 0.00%) 95.39
smtp 631 ( 0.00%) 215672 ( 0.00%) 341.79
dns 1 ( 0.00%) 94 ( 0.00%) 94.00
bgp 196 ( 0.00%) 38117 ( 0.00%) 194.47
other 1047 ( 0.00%) 114238 ( 0.00%) 109.11
udp6 17125 ( 0.07%) 3177423 ( 0.02%) 185.54
dns 16299 ( 0.07%) 2973992 ( 0.02%) 182.46
other 826 ( 0.00%) 203431 ( 0.00%) 246.28
icmp6 4297 ( 0.02%) 545400 ( 0.00%) 126.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7421 ( 0.00%) 927.62
tcpdump file: 200805161400.dump.gz (598.28 MB)