Traffic Trace Info
DumpFile: 200805281400.dump
FileSize: 1616.12MB
Id: 200805281400
StartTime: Wed May 28 14:00:00 2008
EndTime: Wed May 28 14:15:00 2008
TotalTime: 899.71 seconds
TotalCapSize: 1262.88MB CapLen: 96 bytes
# of packets: 23148975 (15308.66MB)
AvgRate: 142.71Mbps stddev:23.86M
IP flow (unique src/dst pair) Information
# of flows: 681226 (avg. 33.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 1.6% 1.5% 1.2% 1.1% 1.1% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 352057
Top 10 bandwidth usage (bytes/total in %):
12.0% 12.0% 5.5% 3.2% 2.7% 2.7% 2.5% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1598
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.3% 6.6% 6.2% 6.1% 5.9% 5.8% 5.3% 5.3% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805281400.pktlen.png)
detailed numbers
[ 32- 63]: 5608156
[ 64- 127]: 5325423
[ 128- 255]: 1134193
[ 256- 511]: 652920
[ 512- 1023]: 669867
[ 1024- 2047]: 9758416
Protocol Breakdown
![[protocol breakdown chart]](200805281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23148975 (100.00%) 16052290025 (100.00%) 693.43
ip 23121965 ( 99.88%) 16047740890 ( 99.97%) 694.05
tcp 19708572 ( 85.14%) 15124100815 ( 94.22%) 767.39
http(s) 7684806 ( 33.20%) 10076108965 ( 62.77%) 1311.17
http(c) 4881133 ( 21.09%) 598547088 ( 3.73%) 122.62
squid 475935 ( 2.06%) 329126277 ( 2.05%) 691.54
smtp 787060 ( 3.40%) 199240434 ( 1.24%) 253.15
nntp 109 ( 0.00%) 13645 ( 0.00%) 125.18
ftp 137255 ( 0.59%) 77604622 ( 0.48%) 565.40
pop3 13471 ( 0.06%) 8195667 ( 0.05%) 608.39
imap 6463 ( 0.03%) 2542405 ( 0.02%) 393.38
telnet 1945 ( 0.01%) 222977 ( 0.00%) 114.64
ssh 787698 ( 3.40%) 129008580 ( 0.80%) 163.78
dns 8704 ( 0.04%) 761221 ( 0.00%) 87.46
bgp 214 ( 0.00%) 67120 ( 0.00%) 313.64
napster 14 ( 0.00%) 1419 ( 0.00%) 101.36
realaud 4574 ( 0.02%) 4193314 ( 0.03%) 916.77
rtsp 502301 ( 2.17%) 507506457 ( 3.16%) 1010.36
icecast 18592 ( 0.08%) 22632396 ( 0.14%) 1217.32
hotline 26 ( 0.00%) 2866 ( 0.00%) 110.23
other 4398272 ( 19.00%) 3168325362 ( 19.74%) 720.36
udp 2703255 ( 11.68%) 861666303 ( 5.37%) 318.75
dns 1177838 ( 5.09%) 182846198 ( 1.14%) 155.24
realaud 20912 ( 0.09%) 10786418 ( 0.07%) 515.80
halflif 28 ( 0.00%) 3768 ( 0.00%) 134.57
starcra 24 ( 0.00%) 4336 ( 0.00%) 180.67
everque 16 ( 0.00%) 2249 ( 0.00%) 140.56
unreal 22 ( 0.00%) 2892 ( 0.00%) 131.45
quake 7 ( 0.00%) 881 ( 0.00%) 125.86
cuseeme 3 ( 0.00%) 236 ( 0.00%) 78.67
other 1501688 ( 6.49%) 667526663 ( 4.16%) 444.52
icmp 683093 ( 2.95%) 57398019 ( 0.36%) 84.03
ipip 341 ( 0.00%) 41892 ( 0.00%) 122.85
ipsec 2539 ( 0.01%) 461006 ( 0.00%) 181.57
ip6 1065 ( 0.00%) 130878 ( 0.00%) 122.89
other 23100 ( 0.10%) 3941977 ( 0.02%) 170.65
frag 30728 ( 0.13%) 23910658 ( 0.15%) 778.14
ip6 27010 ( 0.12%) 4549135 ( 0.03%) 168.42
tcp6 3555 ( 0.02%) 506002 ( 0.00%) 142.34
http(s) 69 ( 0.00%) 42114 ( 0.00%) 610.35
http(c) 468 ( 0.00%) 51409 ( 0.00%) 109.85
smtp 417 ( 0.00%) 148120 ( 0.00%) 355.20
pop3 31 ( 0.00%) 2686 ( 0.00%) 86.65
bgp 104 ( 0.00%) 16336 ( 0.00%) 157.08
other 2466 ( 0.01%) 245337 ( 0.00%) 99.49
udp6 18740 ( 0.08%) 3434523 ( 0.02%) 183.27
dns 17303 ( 0.07%) 3127810 ( 0.02%) 180.77
halflif 1 ( 0.00%) 139 ( 0.00%) 139.00
unreal 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1434 ( 0.01%) 306321 ( 0.00%) 213.61
icmp6 4681 ( 0.02%) 600926 ( 0.00%) 128.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3604 ( 0.00%) 901.00
tcpdump file: 200805281400.dump.gz (567.56 MB)