Traffic Trace Info
DumpFile: 200805261400.dump
FileSize: 1412.64MB
Id: 200805261400
StartTime: Mon May 26 14:00:01 2008
EndTime: Mon May 26 14:15:01 2008
TotalTime: 899.91 seconds
TotalCapSize: 1108.39MB CapLen: 96 bytes
# of packets: 19938646 (11987.70MB)
AvgRate: 111.76Mbps stddev:24.61M
IP flow (unique src/dst pair) Information
# of flows: 704131 (avg. 28.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.2% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 365239
Top 10 bandwidth usage (bytes/total in %):
5.8% 3.4% 3.4% 2.3% 2.2% 2.1% 2.0% 2.0% 1.6% 1.5%
# of IPv6 addresses: 1579
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.5% 7.8% 7.2% 7.2% 6.4% 5.4% 4.6% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805261400.pktlen.png)
detailed numbers
[ 32- 63]: 4630692
[ 64- 127]: 5560422
[ 128- 255]: 927955
[ 256- 511]: 702816
[ 512- 1023]: 706796
[ 1024- 2047]: 7409965
Protocol Breakdown
![[protocol breakdown chart]](200805261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19938646 (100.00%) 12570019090 (100.00%) 630.43
ip 19913598 ( 99.87%) 12564842906 ( 99.96%) 630.97
tcp 17296178 ( 86.75%) 12080434164 ( 96.11%) 698.45
http(s) 6543421 ( 32.82%) 8324805605 ( 66.23%) 1272.24
http(c) 4677464 ( 23.46%) 630847886 ( 5.02%) 134.87
squid 842072 ( 4.22%) 323876988 ( 2.58%) 384.62
smtp 917301 ( 4.60%) 397629400 ( 3.16%) 433.48
nntp 51 ( 0.00%) 5891 ( 0.00%) 115.51
ftp 92210 ( 0.46%) 23745114 ( 0.19%) 257.51
pop3 9261 ( 0.05%) 3976810 ( 0.03%) 429.41
imap 8020 ( 0.04%) 1174307 ( 0.01%) 146.42
telnet 1718 ( 0.01%) 208465 ( 0.00%) 121.34
ssh 606785 ( 3.04%) 112358133 ( 0.89%) 185.17
dns 4319 ( 0.02%) 383981 ( 0.00%) 88.91
bgp 196 ( 0.00%) 57133 ( 0.00%) 291.49
napster 12 ( 0.00%) 1777 ( 0.00%) 148.08
realaud 107 ( 0.00%) 12837 ( 0.00%) 119.97
rtsp 536510 ( 2.69%) 560120491 ( 4.46%) 1044.01
icecast 29804 ( 0.15%) 9305963 ( 0.07%) 312.24
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 3026915 ( 15.18%) 1691918367 ( 13.46%) 558.96
udp 1887187 ( 9.46%) 406619722 ( 3.23%) 215.46
dns 1129550 ( 5.67%) 170505756 ( 1.36%) 150.95
realaud 24081 ( 0.12%) 8810407 ( 0.07%) 365.87
halflif 29 ( 0.00%) 6031 ( 0.00%) 207.97
starcra 43 ( 0.00%) 5810 ( 0.00%) 135.12
everque 52 ( 0.00%) 8871 ( 0.00%) 170.60
unreal 18 ( 0.00%) 2456 ( 0.00%) 136.44
quake 48 ( 0.00%) 7117 ( 0.00%) 148.27
cuseeme 9 ( 0.00%) 800 ( 0.00%) 88.89
other 733318 ( 3.68%) 227258242 ( 1.81%) 309.90
icmp 521789 ( 2.62%) 44917999 ( 0.36%) 86.08
ipip 343 ( 0.00%) 41966 ( 0.00%) 122.35
ipsec 22402 ( 0.11%) 6220410 ( 0.05%) 277.67
ip6 1047 ( 0.01%) 129999 ( 0.00%) 124.16
other 184652 ( 0.93%) 26478646 ( 0.21%) 143.40
frag 1443 ( 0.01%) 1182383 ( 0.01%) 819.39
ip6 25048 ( 0.13%) 5176184 ( 0.04%) 206.65
tcp6 3352 ( 0.02%) 1424232 ( 0.01%) 424.89
http(s) 127 ( 0.00%) 124486 ( 0.00%) 980.20
http(c) 455 ( 0.00%) 55127 ( 0.00%) 121.16
smtp 1190 ( 0.01%) 433208 ( 0.00%) 364.04
ftp 39 ( 0.00%) 4575 ( 0.00%) 117.31
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 76 ( 0.00%) 8569 ( 0.00%) 112.75
other 1425 ( 0.01%) 794782 ( 0.01%) 557.74
udp6 15685 ( 0.08%) 3020546 ( 0.02%) 192.58
dns 14288 ( 0.07%) 2721176 ( 0.02%) 190.45
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1396 ( 0.01%) 299233 ( 0.00%) 214.35
icmp6 5976 ( 0.03%) 723932 ( 0.01%) 121.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3258 ( 0.00%) 814.50
tcpdump file: 200805261400.dump.gz (524.22 MB)