Traffic Trace Info
DumpFile: 200806111400.dump
FileSize: 1597.07MB
Id: 200806111400
StartTime: Wed Jun 11 14:00:00 2008
EndTime: Wed Jun 11 14:15:00 2008
TotalTime: 899.56 seconds
TotalCapSize: 1247.33MB CapLen: 96 bytes
# of packets: 22920330 (13897.53MB)
AvgRate: 129.62Mbps stddev:21.69M
IP flow (unique src/dst pair) Information
# of flows: 735447 (avg. 31.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.1% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 396137
Top 10 bandwidth usage (bytes/total in %):
4.5% 4.3% 4.3% 3.3% 3.3% 3.3% 2.9% 2.9% 2.7% 2.2%
# of IPv6 addresses: 1694
Top 10 bandwidth usage (bytes/total in %):
25.3% 25.2% 8.1% 7.4% 4.7% 3.8% 3.8% 3.6% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806111400.pktlen.png)
detailed numbers
[ 32- 63]: 6433412
[ 64- 127]: 5421933
[ 128- 255]: 1073828
[ 256- 511]: 661101
[ 512- 1023]: 587815
[ 1024- 2047]: 8742241
Protocol Breakdown
![[protocol breakdown chart]](200806111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22920330 (100.00%) 14572620314 (100.00%) 635.79
ip 22893025 ( 99.88%) 14566246976 ( 99.96%) 636.27
tcp 19735288 ( 86.10%) 13762062698 ( 94.44%) 697.33
http(s) 7597816 ( 33.15%) 9844627740 ( 67.56%) 1295.72
http(c) 5375080 ( 23.45%) 608085408 ( 4.17%) 113.13
squid 668896 ( 2.92%) 433189148 ( 2.97%) 647.62
smtp 507228 ( 2.21%) 121689352 ( 0.84%) 239.91
nntp 955 ( 0.00%) 58386 ( 0.00%) 61.14
ftp 78869 ( 0.34%) 45059592 ( 0.31%) 571.32
pop3 13404 ( 0.06%) 6436697 ( 0.04%) 480.21
imap 5104 ( 0.02%) 1146190 ( 0.01%) 224.57
telnet 1996 ( 0.01%) 341346 ( 0.00%) 171.02
ssh 700287 ( 3.06%) 97269081 ( 0.67%) 138.90
dns 6190 ( 0.03%) 439577 ( 0.00%) 71.01
bgp 186 ( 0.00%) 52362 ( 0.00%) 281.52
napster 13 ( 0.00%) 1164 ( 0.00%) 89.54
realaud 112 ( 0.00%) 13164 ( 0.00%) 117.54
rtsp 308760 ( 1.35%) 308467894 ( 2.12%) 999.05
icecast 10840 ( 0.05%) 1096190 ( 0.01%) 101.12
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 4459551 ( 19.46%) 2294089347 ( 15.74%) 514.42
udp 2439873 ( 10.65%) 717003628 ( 4.92%) 293.87
dns 1077190 ( 4.70%) 167361956 ( 1.15%) 155.37
realaud 17987 ( 0.08%) 8745930 ( 0.06%) 486.24
halflif 14 ( 0.00%) 2199 ( 0.00%) 157.07
starcra 65 ( 0.00%) 10482 ( 0.00%) 161.26
everque 87 ( 0.00%) 13711 ( 0.00%) 157.60
unreal 30 ( 0.00%) 5110 ( 0.00%) 170.33
quake 7 ( 0.00%) 580 ( 0.00%) 82.86
cuseeme 4 ( 0.00%) 363 ( 0.00%) 90.75
other 1310364 ( 5.72%) 538509308 ( 3.70%) 410.96
icmp 509380 ( 2.22%) 44886539 ( 0.31%) 88.12
igmp 1 ( 0.00%) 60 ( 0.00%) 60.00
ipip 320 ( 0.00%) 39100 ( 0.00%) 122.19
ipsec 2524 ( 0.01%) 536272 ( 0.00%) 212.47
ip6 847 ( 0.00%) 111555 ( 0.00%) 131.71
other 204792 ( 0.89%) 41607124 ( 0.29%) 203.17
frag 217436 ( 0.95%) 166310542 ( 1.14%) 764.87
ip6 27305 ( 0.12%) 6373338 ( 0.04%) 233.41
tcp6 4740 ( 0.02%) 2368040 ( 0.02%) 499.59
http(s) 1343 ( 0.01%) 1880447 ( 0.01%) 1400.18
http(c) 1357 ( 0.01%) 138978 ( 0.00%) 102.42
smtp 638 ( 0.00%) 201132 ( 0.00%) 315.25
ssh 85 ( 0.00%) 9482 ( 0.00%) 111.55
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 66 ( 0.00%) 7018 ( 0.00%) 106.33
other 1244 ( 0.01%) 130348 ( 0.00%) 104.78
udp6 16154 ( 0.07%) 3240061 ( 0.02%) 200.57
dns 14707 ( 0.06%) 2794079 ( 0.02%) 189.98
other 1447 ( 0.01%) 445982 ( 0.00%) 308.21
icmp6 6379 ( 0.03%) 759326 ( 0.01%) 119.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1831 ( 0.00%) 915.50
tcpdump file: 200806111400.dump.gz (573.37 MB)