Traffic Trace Info
DumpFile: 200805231400.dump
FileSize: 1793.32MB
Id: 200805231400
StartTime: Fri May 23 14:00:01 2008
EndTime: Fri May 23 14:15:01 2008
TotalTime: 899.86 seconds
TotalCapSize: 1406.22MB CapLen: 96 bytes
# of packets: 25368361 (17108.47MB)
AvgRate: 159.49Mbps stddev:26.15M
IP flow (unique src/dst pair) Information
# of flows: 927114 (avg. 27.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.4% 2.1% 1.8% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 504380
Top 10 bandwidth usage (bytes/total in %):
6.0% 5.5% 4.7% 4.3% 3.6% 3.4% 2.5% 2.4% 2.4% 2.1%
# of IPv6 addresses: 1545
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.2% 7.2% 6.2% 6.2% 6.1% 6.0% 4.9% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805231400.pktlen.png)
detailed numbers
[ 32- 63]: 5530207
[ 64- 127]: 6057418
[ 128- 255]: 1066674
[ 256- 511]: 923082
[ 512- 1023]: 972275
[ 1024- 2047]: 10818705
Protocol Breakdown
![[protocol breakdown chart]](200805231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25368361 (100.00%) 17939532976 (100.00%) 707.16
ip 25339518 ( 99.89%) 17934337492 ( 99.97%) 707.76
tcp 21236062 ( 83.71%) 17019768808 ( 94.87%) 801.46
http(s) 10193174 ( 40.18%) 13285344765 ( 74.06%) 1303.36
http(c) 5251314 ( 20.70%) 630155106 ( 3.51%) 120.00
squid 1079337 ( 4.25%) 364048650 ( 2.03%) 337.29
smtp 800756 ( 3.16%) 251597231 ( 1.40%) 314.20
nntp 36 ( 0.00%) 3869 ( 0.00%) 107.47
ftp 164511 ( 0.65%) 111618789 ( 0.62%) 678.49
pop3 29337 ( 0.12%) 21330023 ( 0.12%) 727.07
imap 7807 ( 0.03%) 2822292 ( 0.02%) 361.51
telnet 1556 ( 0.01%) 165992 ( 0.00%) 106.68
ssh 20828 ( 0.08%) 5558253 ( 0.03%) 266.86
dns 5054 ( 0.02%) 382237 ( 0.00%) 75.63
bgp 225 ( 0.00%) 79653 ( 0.00%) 354.01
napster 39 ( 0.00%) 7468 ( 0.00%) 191.49
realaud 9 ( 0.00%) 1767 ( 0.00%) 196.33
rtsp 415092 ( 1.64%) 399615992 ( 2.23%) 962.72
icecast 44541 ( 0.18%) 39354006 ( 0.22%) 883.55
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 3222433 ( 12.70%) 1907681506 ( 10.63%) 592.00
udp 3003462 ( 11.84%) 809582087 ( 4.51%) 269.55
dns 1683020 ( 6.63%) 377635230 ( 2.11%) 224.38
realaud 14289 ( 0.06%) 9636146 ( 0.05%) 674.38
halflif 26 ( 0.00%) 3192 ( 0.00%) 122.77
starcra 66 ( 0.00%) 12052 ( 0.00%) 182.61
everque 87 ( 0.00%) 13854 ( 0.00%) 159.24
unreal 18 ( 0.00%) 2832 ( 0.00%) 157.33
quake 26 ( 0.00%) 3298 ( 0.00%) 126.85
other 1305829 ( 5.15%) 422231127 ( 2.35%) 323.34
icmp 954387 ( 3.76%) 76713984 ( 0.43%) 80.38
ipip 304 ( 0.00%) 35864 ( 0.00%) 117.97
ipsec 2276 ( 0.01%) 538980 ( 0.00%) 236.81
ip6 1035 ( 0.00%) 125640 ( 0.00%) 121.39
other 141992 ( 0.56%) 27572129 ( 0.15%) 194.18
frag 1624 ( 0.01%) 1395935 ( 0.01%) 859.57
ip6 28843 ( 0.11%) 5195484 ( 0.03%) 180.13
tcp6 5441 ( 0.02%) 1107113 ( 0.01%) 203.48
http(s) 1055 ( 0.00%) 479584 ( 0.00%) 454.58
http(c) 371 ( 0.00%) 38722 ( 0.00%) 104.37
smtp 678 ( 0.00%) 251945 ( 0.00%) 371.60
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
dns 11 ( 0.00%) 1094 ( 0.00%) 99.45
bgp 96 ( 0.00%) 11884 ( 0.00%) 123.79
other 3197 ( 0.01%) 321034 ( 0.00%) 100.42
udp6 18963 ( 0.07%) 3529468 ( 0.02%) 186.12
dns 17627 ( 0.07%) 3234602 ( 0.02%) 183.50
other 1336 ( 0.01%) 294866 ( 0.00%) 220.71
icmp6 4404 ( 0.02%) 551389 ( 0.00%) 125.20
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3298 ( 0.00%) 824.50
tcpdump file: 200805231400.dump.gz (624.01 MB)