Traffic Trace Info
DumpFile: 200805291400.dump
FileSize: 1560.31MB
Id: 200805291400
StartTime: Thu May 29 14:00:00 2008
EndTime: Thu May 29 14:15:01 2008
TotalTime: 900.89 seconds
TotalCapSize: 1222.61MB CapLen: 96 bytes
# of packets: 22130842 (14860.87MB)
AvgRate: 138.39Mbps stddev:23.21M
IP flow (unique src/dst pair) Information
# of flows: 752827 (avg. 29.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 2.1% 1.7% 1.3% 1.3% 1.2% 1.2% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 387773
Top 10 bandwidth usage (bytes/total in %):
5.4% 3.6% 3.4% 3.3% 3.1% 2.8% 2.8% 2.4% 2.4% 2.3%
# of IPv6 addresses: 1949
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.5% 7.7% 7.4% 6.5% 5.5% 5.0% 5.0% 4.5% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805291400.pktlen.png)
detailed numbers
[ 32- 63]: 5011426
[ 64- 127]: 5403621
[ 128- 255]: 857823
[ 256- 511]: 662844
[ 512- 1023]: 606776
[ 1024- 2047]: 9588352
Protocol Breakdown
![[protocol breakdown chart]](200805291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22130842 (100.00%) 15582756353 (100.00%) 704.12
ip 22099171 ( 99.86%) 15577163593 ( 99.96%) 704.88
tcp 18825732 ( 85.07%) 14806414792 ( 95.02%) 786.50
http(s) 8159274 ( 36.87%) 10570340910 ( 67.83%) 1295.50
http(c) 5471210 ( 24.72%) 636428935 ( 4.08%) 116.32
squid 494418 ( 2.23%) 334029471 ( 2.14%) 675.60
smtp 760477 ( 3.44%) 171165249 ( 1.10%) 225.08
nntp 49 ( 0.00%) 5636 ( 0.00%) 115.02
ftp 241945 ( 1.09%) 255549578 ( 1.64%) 1056.23
pop3 12724 ( 0.06%) 8474930 ( 0.05%) 666.06
imap 8286 ( 0.04%) 3104896 ( 0.02%) 374.72
telnet 3727 ( 0.02%) 561814 ( 0.00%) 150.74
ssh 16693 ( 0.08%) 6289309 ( 0.04%) 376.76
dns 7130 ( 0.03%) 660232 ( 0.00%) 92.60
bgp 191 ( 0.00%) 55341 ( 0.00%) 289.74
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 30 ( 0.00%) 4557 ( 0.00%) 151.90
rtsp 1309158 ( 5.92%) 1314126891 ( 8.43%) 1003.80
icecast 18602 ( 0.08%) 12685782 ( 0.08%) 681.96
hotline 20 ( 0.00%) 2827 ( 0.00%) 141.35
other 2321795 ( 10.49%) 1492928254 ( 9.58%) 643.01
udp 2578424 ( 11.65%) 700229047 ( 4.49%) 271.57
dns 1224762 ( 5.53%) 192022114 ( 1.23%) 156.78
realaud 53444 ( 0.24%) 35175965 ( 0.23%) 658.18
halflif 29 ( 0.00%) 3370 ( 0.00%) 116.21
starcra 28 ( 0.00%) 4378 ( 0.00%) 156.36
everque 87 ( 0.00%) 12180 ( 0.00%) 140.00
unreal 7 ( 0.00%) 785 ( 0.00%) 112.14
quake 4 ( 0.00%) 296 ( 0.00%) 74.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1300016 ( 5.87%) 472988931 ( 3.04%) 363.83
icmp 561452 ( 2.54%) 50367427 ( 0.32%) 89.71
ipip 325 ( 0.00%) 39352 ( 0.00%) 121.08
ipsec 2870 ( 0.01%) 666324 ( 0.00%) 232.17
ip6 1010 ( 0.00%) 122291 ( 0.00%) 121.08
other 129358 ( 0.58%) 19324360 ( 0.12%) 149.39
frag 18955 ( 0.09%) 16488863 ( 0.11%) 869.90
ip6 31671 ( 0.14%) 5592760 ( 0.04%) 176.59
tcp6 9523 ( 0.04%) 1669190 ( 0.01%) 175.28
http(s) 501 ( 0.00%) 609630 ( 0.00%) 1216.83
http(c) 4752 ( 0.02%) 429592 ( 0.00%) 90.40
smtp 584 ( 0.00%) 189425 ( 0.00%) 324.36
ftp 57 ( 0.00%) 5394 ( 0.00%) 94.63
pop3 32 ( 0.00%) 2768 ( 0.00%) 86.50
ssh 52 ( 0.00%) 7976 ( 0.00%) 153.38
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 77 ( 0.00%) 8598 ( 0.00%) 111.66
other 3463 ( 0.02%) 415262 ( 0.00%) 119.91
udp6 17541 ( 0.08%) 3315389 ( 0.02%) 189.01
dns 15546 ( 0.07%) 2929153 ( 0.02%) 188.42
starcra 2 ( 0.00%) 274 ( 0.00%) 137.00
other 1993 ( 0.01%) 385962 ( 0.00%) 193.66
icmp6 4551 ( 0.02%) 580229 ( 0.00%) 127.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 23872 ( 0.00%) 918.15
tcpdump file: 200805291400.dump.gz (547.27 MB)