Traffic Trace Info
DumpFile: 200805171400.dump
FileSize: 1812.77MB
Id: 200805171400
StartTime: Sat May 17 14:00:01 2008
EndTime: Sat May 17 14:15:00 2008
TotalTime: 899.30 seconds
TotalCapSize: 1421.23MB CapLen: 96 bytes
# of packets: 25659524 (17570.99MB)
AvgRate: 163.89Mbps stddev:24.48M
IP flow (unique src/dst pair) Information
# of flows: 648458 (avg. 39.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.6% 8.5% 4.4% 2.1% 1.7% 1.5% 1.3% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 307294
Top 10 bandwidth usage (bytes/total in %):
10.9% 10.9% 10.7% 8.7% 8.1% 4.8% 4.5% 2.7% 2.5% 2.5%
# of IPv6 addresses: 1201
Top 10 bandwidth usage (bytes/total in %):
7.5% 6.9% 6.6% 6.6% 6.3% 6.3% 6.1% 6.1% 5.7% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805171400.pktlen.png)
detailed numbers
[ 32- 63]: 5032020
[ 64- 127]: 6942001
[ 128- 255]: 890645
[ 256- 511]: 763451
[ 512- 1023]: 722837
[ 1024- 2047]: 11308570
Protocol Breakdown
![[protocol breakdown chart]](200805171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25659524 (100.00%) 18424521208 (100.00%) 718.04
ip 25637861 ( 99.92%) 18420955887 ( 99.98%) 718.51
tcp 21746889 ( 84.75%) 17030531869 ( 92.43%) 783.12
http(s) 7571722 ( 29.51%) 10156643351 ( 55.13%) 1341.39
http(c) 4118866 ( 16.05%) 410190599 ( 2.23%) 99.59
squid 1485641 ( 5.79%) 280203972 ( 1.52%) 188.61
smtp 633750 ( 2.47%) 118069286 ( 0.64%) 186.30
ftp 263215 ( 1.03%) 253147543 ( 1.37%) 961.75
pop3 13171 ( 0.05%) 5069844 ( 0.03%) 384.92
imap 7819 ( 0.03%) 3437553 ( 0.02%) 439.64
telnet 1595 ( 0.01%) 210685 ( 0.00%) 132.09
ssh 103305 ( 0.40%) 25617333 ( 0.14%) 247.98
dns 3880 ( 0.02%) 340253 ( 0.00%) 87.69
bgp 190 ( 0.00%) 53413 ( 0.00%) 281.12
napster 8 ( 0.00%) 496 ( 0.00%) 62.00
realaud 6 ( 0.00%) 521 ( 0.00%) 86.83
rtsp 513870 ( 2.00%) 534976664 ( 2.90%) 1041.07
icecast 42573 ( 0.17%) 46360261 ( 0.25%) 1088.96
hotline 5 ( 0.00%) 588 ( 0.00%) 117.60
other 6987273 ( 27.23%) 5196209507 ( 28.20%) 743.67
udp 3145151 ( 12.26%) 1304710561 ( 7.08%) 414.83
dns 1436174 ( 5.60%) 357737175 ( 1.94%) 249.09
realaud 14 ( 0.00%) 1829 ( 0.00%) 130.64
halflif 17 ( 0.00%) 2527 ( 0.00%) 148.65
starcra 28 ( 0.00%) 4406 ( 0.00%) 157.36
everque 489 ( 0.00%) 148041 ( 0.00%) 302.74
unreal 1 ( 0.00%) 80 ( 0.00%) 80.00
quake 13 ( 0.00%) 2616 ( 0.00%) 201.23
cuseeme 4 ( 0.00%) 360 ( 0.00%) 90.00
other 1708186 ( 6.66%) 946734992 ( 5.14%) 554.23
icmp 528658 ( 2.06%) 46951741 ( 0.25%) 88.81
ipip 350 ( 0.00%) 42790 ( 0.00%) 122.26
ipsec 809 ( 0.00%) 108406 ( 0.00%) 134.00
ip6 882 ( 0.00%) 108695 ( 0.00%) 123.24
other 215122 ( 0.84%) 38501825 ( 0.21%) 178.98
frag 16946 ( 0.07%) 15498582 ( 0.08%) 914.59
ip6 21663 ( 0.08%) 3565321 ( 0.02%) 164.58
tcp6 2606 ( 0.01%) 325617 ( 0.00%) 124.95
http(s) 5 ( 0.00%) 730 ( 0.00%) 146.00
http(c) 333 ( 0.00%) 33915 ( 0.00%) 101.85
smtp 223 ( 0.00%) 88177 ( 0.00%) 395.41
ftp 1 ( 0.00%) 82 ( 0.00%) 82.00
pop3 34 ( 0.00%) 3790 ( 0.00%) 111.47
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1948 ( 0.01%) 192487 ( 0.00%) 98.81
udp6 14685 ( 0.06%) 2688955 ( 0.01%) 183.11
dns 13856 ( 0.05%) 2471157 ( 0.01%) 178.35
other 829 ( 0.00%) 217798 ( 0.00%) 262.72
icmp6 4336 ( 0.02%) 541196 ( 0.00%) 124.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5473 ( 0.00%) 912.17
tcpdump file: 200805171400.dump.gz (619.50 MB)