Traffic Trace Info
DumpFile: 200805241400.dump
FileSize: 1454.35MB
Id: 200805241400
StartTime: Sat May 24 14:00:00 2008
EndTime: Sat May 24 14:15:00 2008
TotalTime: 899.52 seconds
TotalCapSize: 1140.84MB CapLen: 96 bytes
# of packets: 20545474 (14522.67MB)
AvgRate: 135.43Mbps stddev:35.85M
IP flow (unique src/dst pair) Information
# of flows: 686408 (avg. 29.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.5% 2.4% 2.3% 1.4% 1.3% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 366110
Top 10 bandwidth usage (bytes/total in %):
14.3% 6.1% 5.9% 4.0% 4.0% 2.6% 2.4% 2.4% 2.4% 2.3%
# of IPv6 addresses: 1491
Top 10 bandwidth usage (bytes/total in %):
9.3% 7.7% 6.8% 6.3% 5.7% 5.4% 5.3% 5.3% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805241400.pktlen.png)
detailed numbers
[ 32- 63]: 3999346
[ 64- 127]: 4781770
[ 128- 255]: 1060451
[ 256- 511]: 667248
[ 512- 1023]: 774533
[ 1024- 2047]: 9262126
Protocol Breakdown
![[protocol breakdown chart]](200805241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20545474 (100.00%) 15228123436 (100.00%) 741.19
ip 20521380 ( 99.88%) 15224124160 ( 99.97%) 741.87
tcp 16992471 ( 82.71%) 14037209239 ( 92.18%) 826.08
http(s) 8147686 ( 39.66%) 11036648485 ( 72.48%) 1354.57
http(c) 3612003 ( 17.58%) 397923099 ( 2.61%) 110.17
squid 839727 ( 4.09%) 246527062 ( 1.62%) 293.58
smtp 674324 ( 3.28%) 144716829 ( 0.95%) 214.61
nntp 6 ( 0.00%) 738 ( 0.00%) 123.00
ftp 198902 ( 0.97%) 158960558 ( 1.04%) 799.19
pop3 6614 ( 0.03%) 2055728 ( 0.01%) 310.81
imap 4417 ( 0.02%) 1419200 ( 0.01%) 321.30
telnet 1512 ( 0.01%) 162789 ( 0.00%) 107.66
ssh 78572 ( 0.38%) 23297782 ( 0.15%) 296.52
dns 5204 ( 0.03%) 384758 ( 0.00%) 73.94
bgp 206 ( 0.00%) 61589 ( 0.00%) 298.98
realaud 47 ( 0.00%) 4852 ( 0.00%) 103.23
rtsp 251491 ( 1.22%) 272999045 ( 1.79%) 1085.52
icecast 33070 ( 0.16%) 31834762 ( 0.21%) 962.65
hotline 12 ( 0.00%) 3191 ( 0.00%) 265.92
other 3138675 ( 15.28%) 1720208592 ( 11.30%) 548.07
udp 2655422 ( 12.92%) 766812075 ( 5.04%) 288.77
dns 1133741 ( 5.52%) 164640174 ( 1.08%) 145.22
realaud 17707 ( 0.09%) 10299851 ( 0.07%) 581.68
halflif 16 ( 0.00%) 1623 ( 0.00%) 101.44
starcra 25 ( 0.00%) 5630 ( 0.00%) 225.20
everque 76116 ( 0.37%) 27917821 ( 0.18%) 366.78
unreal 14 ( 0.00%) 1904 ( 0.00%) 136.00
quake 16 ( 0.00%) 1662 ( 0.00%) 103.88
cuseeme 4 ( 0.00%) 537 ( 0.00%) 134.25
other 1427766 ( 6.95%) 563933571 ( 3.70%) 394.98
icmp 491684 ( 2.39%) 44804455 ( 0.29%) 91.12
ipip 324 ( 0.00%) 38740 ( 0.00%) 119.57
ipsec 815 ( 0.00%) 111599 ( 0.00%) 136.93
ip6 1017 ( 0.00%) 123113 ( 0.00%) 121.06
other 379647 ( 1.85%) 375024939 ( 2.46%) 987.83
frag 1080 ( 0.01%) 883291 ( 0.01%) 817.86
ip6 24094 ( 0.12%) 3999276 ( 0.03%) 165.99
tcp6 3721 ( 0.02%) 597959 ( 0.00%) 160.70
http(c) 410 ( 0.00%) 42632 ( 0.00%) 103.98
smtp 184 ( 0.00%) 70388 ( 0.00%) 382.54
pop3 57 ( 0.00%) 5443 ( 0.00%) 95.49
ssh 1087 ( 0.01%) 252130 ( 0.00%) 231.95
bgp 78 ( 0.00%) 8758 ( 0.00%) 112.28
other 1905 ( 0.01%) 218608 ( 0.00%) 114.75
udp6 15144 ( 0.07%) 2746994 ( 0.02%) 181.39
dns 13854 ( 0.07%) 2462995 ( 0.02%) 177.78
other 1290 ( 0.01%) 283999 ( 0.00%) 220.15
icmp6 5197 ( 0.03%) 648437 ( 0.00%) 124.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1806 ( 0.00%) 903.00
tcpdump file: 200805241400.dump.gz (506.21 MB)