Traffic Trace Info
DumpFile: 200805301400.dump
FileSize: 1330.72MB
Id: 200805301400
StartTime: Fri May 30 14:00:00 2008
EndTime: Fri May 30 14:15:00 2008
TotalTime: 899.48 seconds
TotalCapSize: 1040.81MB CapLen: 96 bytes
# of packets: 18998369 (12994.39MB)
AvgRate: 121.18Mbps stddev:30.62M
IP flow (unique src/dst pair) Information
# of flows: 717293 (avg. 26.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.8% 1.6% 1.2% 1.2% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 372800
Top 10 bandwidth usage (bytes/total in %):
4.9% 3.9% 3.9% 3.6% 3.5% 3.1% 3.1% 3.0% 2.2% 2.2%
# of IPv6 addresses: 1351
Top 10 bandwidth usage (bytes/total in %):
6.6% 5.8% 5.7% 5.5% 5.4% 5.3% 4.7% 4.3% 4.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805301400.pktlen.png)
detailed numbers
[ 32- 63]: 4576981
[ 64- 127]: 4285519
[ 128- 255]: 848143
[ 256- 511]: 495304
[ 512- 1023]: 454450
[ 1024- 2047]: 8337972
Protocol Breakdown
![[protocol breakdown chart]](200805301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18998369 (100.00%) 13625608864 (100.00%) 717.20
ip 18974352 ( 99.87%) 13621483570 ( 99.97%) 717.89
tcp 16037666 ( 84.42%) 12861441787 ( 94.39%) 801.95
http(s) 7621317 ( 40.12%) 10204414370 ( 74.89%) 1338.93
http(c) 4589147 ( 24.16%) 489358320 ( 3.59%) 106.63
squid 476532 ( 2.51%) 260369008 ( 1.91%) 546.38
smtp 583113 ( 3.07%) 132546786 ( 0.97%) 227.31
nntp 10 ( 0.00%) 1469 ( 0.00%) 146.90
ftp 11869 ( 0.06%) 1284994 ( 0.01%) 108.26
pop3 11001 ( 0.06%) 4860737 ( 0.04%) 441.85
imap 6327 ( 0.03%) 1494823 ( 0.01%) 236.26
telnet 317 ( 0.00%) 45573 ( 0.00%) 143.76
ssh 95767 ( 0.50%) 13172491 ( 0.10%) 137.55
dns 9221 ( 0.05%) 751877 ( 0.01%) 81.54
bgp 191 ( 0.00%) 53087 ( 0.00%) 277.94
napster 60 ( 0.00%) 13815 ( 0.00%) 230.25
realaud 7 ( 0.00%) 424 ( 0.00%) 60.57
rtsp 290489 ( 1.53%) 338268291 ( 2.48%) 1164.48
icecast 11281 ( 0.06%) 2682918 ( 0.02%) 237.83
hotline 106 ( 0.00%) 126220 ( 0.00%) 1190.75
other 2330909 ( 12.27%) 1411996464 ( 10.36%) 605.77
udp 2278935 ( 12.00%) 689460669 ( 5.06%) 302.54
dns 1250892 ( 6.58%) 192962824 ( 1.42%) 154.26
realaud 6636 ( 0.03%) 2723709 ( 0.02%) 410.44
halflif 26 ( 0.00%) 4962 ( 0.00%) 190.85
starcra 31 ( 0.00%) 4696 ( 0.00%) 151.48
everque 44 ( 0.00%) 5690 ( 0.00%) 129.32
unreal 19 ( 0.00%) 2697 ( 0.00%) 141.95
quake 13 ( 0.00%) 1225 ( 0.00%) 94.23
other 1021067 ( 5.37%) 493718857 ( 3.62%) 483.53
icmp 535062 ( 2.82%) 47949230 ( 0.35%) 89.61
ipip 310 ( 0.00%) 36706 ( 0.00%) 118.41
ipsec 855 ( 0.00%) 129682 ( 0.00%) 151.67
ip6 767 ( 0.00%) 95414 ( 0.00%) 124.40
other 120757 ( 0.64%) 22370082 ( 0.16%) 185.25
frag 20438 ( 0.11%) 17621212 ( 0.13%) 862.18
ip6 24017 ( 0.13%) 4125294 ( 0.03%) 171.77
tcp6 4020 ( 0.02%) 808646 ( 0.01%) 201.16
http(s) 121 ( 0.00%) 123859 ( 0.00%) 1023.63
http(c) 453 ( 0.00%) 48527 ( 0.00%) 107.12
smtp 634 ( 0.00%) 306971 ( 0.00%) 484.18
ssh 247 ( 0.00%) 23762 ( 0.00%) 96.20
dns 228 ( 0.00%) 27159 ( 0.00%) 119.12
bgp 111 ( 0.00%) 25925 ( 0.00%) 233.56
other 2226 ( 0.01%) 252443 ( 0.00%) 113.41
udp6 14491 ( 0.08%) 2664327 ( 0.02%) 183.86
dns 13432 ( 0.07%) 2437451 ( 0.02%) 181.47
starcra 3 ( 0.00%) 1566 ( 0.00%) 522.00
other 1056 ( 0.01%) 225310 ( 0.00%) 213.36
icmp6 5429 ( 0.03%) 639849 ( 0.00%) 117.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 8392 ( 0.00%) 178.55
tcpdump file: 200805301400.dump.gz (461.51 MB)