Traffic Trace Info
DumpFile: 200805311400.dump
FileSize: 1236.88MB
Id: 200805311400
StartTime: Sat May 31 14:00:00 2008
EndTime: Sat May 31 14:15:00 2008
TotalTime: 900.16 seconds
TotalCapSize: 972.73MB CapLen: 96 bytes
# of packets: 17310879 (10412.24MB)
AvgRate: 97.04Mbps stddev:13.62M
IP flow (unique src/dst pair) Information
# of flows: 937453 (avg. 18.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.5% 3.5% 2.4% 2.2% 1.8% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 479336
Top 10 bandwidth usage (bytes/total in %):
19.0% 11.8% 4.8% 3.6% 3.5% 3.3% 3.1% 2.6% 2.4% 2.4%
# of IPv6 addresses: 1705
Top 10 bandwidth usage (bytes/total in %):
16.7% 10.3% 6.0% 5.3% 4.9% 4.4% 4.3% 4.3% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805311400.pktlen.png)
detailed numbers
[ 32- 63]: 3981445
[ 64- 127]: 5173479
[ 128- 255]: 700222
[ 256- 511]: 566883
[ 512- 1023]: 358474
[ 1024- 2047]: 6530376
Protocol Breakdown
![[protocol breakdown chart]](200805311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17310879 (100.00%) 10918026543 (100.00%) 630.70
ip 17288717 ( 99.87%) 10914269066 ( 99.97%) 631.29
tcp 14506273 ( 83.80%) 10516922528 ( 96.33%) 724.99
http(s) 5618481 ( 32.46%) 7562493273 ( 69.27%) 1346.00
http(c) 3806714 ( 21.99%) 426358077 ( 3.91%) 112.00
squid 1264292 ( 7.30%) 431769095 ( 3.95%) 341.51
smtp 520750 ( 3.01%) 136816800 ( 1.25%) 262.73
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 164282 ( 0.95%) 163218427 ( 1.49%) 993.53
pop3 4750 ( 0.03%) 1748616 ( 0.02%) 368.13
imap 1968 ( 0.01%) 262437 ( 0.00%) 133.35
telnet 827 ( 0.00%) 77283 ( 0.00%) 93.45
ssh 129022 ( 0.75%) 35063747 ( 0.32%) 271.77
dns 4629 ( 0.03%) 453948 ( 0.00%) 98.07
bgp 185 ( 0.00%) 53015 ( 0.00%) 286.57
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 749 ( 0.00%) 47981 ( 0.00%) 64.06
rtsp 442833 ( 2.56%) 478014413 ( 4.38%) 1079.45
icecast 422 ( 0.00%) 31582 ( 0.00%) 74.84
hotline 10 ( 0.00%) 620 ( 0.00%) 62.00
other 2546355 ( 14.71%) 1280512974 ( 11.73%) 502.88
udp 1693743 ( 9.78%) 297271941 ( 2.72%) 175.51
dns 1026903 ( 5.93%) 162127577 ( 1.48%) 157.88
realaud 5883 ( 0.03%) 2664423 ( 0.02%) 452.90
halflif 22 ( 0.00%) 3322 ( 0.00%) 151.00
starcra 47 ( 0.00%) 9210 ( 0.00%) 195.96
everque 102 ( 0.00%) 17126 ( 0.00%) 167.90
unreal 14 ( 0.00%) 2414 ( 0.00%) 172.43
quake 11 ( 0.00%) 1358 ( 0.00%) 123.45
cuseeme 5 ( 0.00%) 980 ( 0.00%) 196.00
other 660707 ( 3.82%) 132419342 ( 1.21%) 200.42
icmp 872125 ( 5.04%) 70009123 ( 0.64%) 80.27
ipip 309 ( 0.00%) 38442 ( 0.00%) 124.41
ipsec 809 ( 0.00%) 108406 ( 0.00%) 134.00
ip6 1375 ( 0.01%) 275580 ( 0.00%) 200.42
other 214083 ( 1.24%) 29643046 ( 0.27%) 138.47
frag 18079 ( 0.10%) 15761560 ( 0.14%) 871.82
ip6 22162 ( 0.13%) 3757477 ( 0.03%) 169.55
tcp6 3932 ( 0.02%) 527854 ( 0.00%) 134.25
http(c) 561 ( 0.00%) 72894 ( 0.00%) 129.94
smtp 359 ( 0.00%) 112122 ( 0.00%) 312.32
ssh 763 ( 0.00%) 97784 ( 0.00%) 128.16
bgp 68 ( 0.00%) 7319 ( 0.00%) 107.63
other 2181 ( 0.01%) 237735 ( 0.00%) 109.00
udp6 12795 ( 0.07%) 2532733 ( 0.02%) 197.95
dns 10894 ( 0.06%) 1939468 ( 0.02%) 178.03
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1900 ( 0.01%) 593128 ( 0.01%) 312.17
icmp6 5394 ( 0.03%) 682887 ( 0.01%) 126.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 9923 ( 0.00%) 902.09
tcpdump file: 200805311400.dump.gz (425.42 MB)