Traffic Trace Info
DumpFile: 200806131400.dump
FileSize: 1605.91MB
Id: 200806131400
StartTime: Fri Jun 13 14:00:01 2008
EndTime: Fri Jun 13 14:15:01 2008
TotalTime: 900.06 seconds
TotalCapSize: 1258.24MB CapLen: 96 bytes
# of packets: 22783952 (15212.84MB)
AvgRate: 141.80Mbps stddev:24.05M
IP flow (unique src/dst pair) Information
# of flows: 984632 (avg. 23.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.1% 1.7% 1.6% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 549794
Top 10 bandwidth usage (bytes/total in %):
4.6% 4.1% 3.9% 3.3% 3.1% 2.8% 2.7% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1650
Top 10 bandwidth usage (bytes/total in %):
15.5% 15.0% 8.3% 7.3% 6.6% 6.0% 4.6% 4.5% 4.5% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806131400.pktlen.png)
detailed numbers
[ 32- 63]: 4565085
[ 64- 127]: 6001384
[ 128- 255]: 1032315
[ 256- 511]: 684063
[ 512- 1023]: 755936
[ 1024- 2047]: 9745169
Protocol Breakdown
![[protocol breakdown chart]](200806131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22783952 (100.00%) 15951821053 (100.00%) 700.13
ip 22755650 ( 99.88%) 15946421277 ( 99.97%) 700.77
tcp 19002294 ( 83.40%) 14617861907 ( 91.64%) 769.27
http(s) 7734398 ( 33.95%) 10237516510 ( 64.18%) 1323.63
http(c) 4431877 ( 19.45%) 478788292 ( 3.00%) 108.03
squid 696218 ( 3.06%) 442371275 ( 2.77%) 635.39
smtp 633499 ( 2.78%) 145917412 ( 0.91%) 230.34
nntp 35 ( 0.00%) 3039 ( 0.00%) 86.83
ftp 221947 ( 0.97%) 193666566 ( 1.21%) 872.58
pop3 28227 ( 0.12%) 23031926 ( 0.14%) 815.95
imap 17280 ( 0.08%) 12576105 ( 0.08%) 727.78
telnet 1339 ( 0.01%) 107234 ( 0.00%) 80.09
ssh 698707 ( 3.07%) 97632655 ( 0.61%) 139.73
dns 2822 ( 0.01%) 239631 ( 0.00%) 84.92
bgp 516 ( 0.00%) 300526 ( 0.00%) 582.41
napster 6819 ( 0.03%) 491069 ( 0.00%) 72.01
realaud 57 ( 0.00%) 7049 ( 0.00%) 123.67
rtsp 564005 ( 2.48%) 602899756 ( 3.78%) 1068.96
icecast 10503 ( 0.05%) 1208921 ( 0.01%) 115.10
hotline 9 ( 0.00%) 1346 ( 0.00%) 149.56
other 3954035 ( 17.35%) 2381102535 ( 14.93%) 602.20
udp 3109102 ( 13.65%) 1261749422 ( 7.91%) 405.82
dns 1034265 ( 4.54%) 170717011 ( 1.07%) 165.06
realaud 23591 ( 0.10%) 8691197 ( 0.05%) 368.41
halflif 13 ( 0.00%) 1432 ( 0.00%) 110.15
starcra 68 ( 0.00%) 13081 ( 0.00%) 192.37
everque 57 ( 0.00%) 8788 ( 0.00%) 154.18
unreal 17 ( 0.00%) 3661 ( 0.00%) 215.35
quake 14 ( 0.00%) 1802 ( 0.00%) 128.71
cuseeme 7 ( 0.00%) 968 ( 0.00%) 138.29
other 2050710 ( 9.00%) 1082281677 ( 6.78%) 527.76
icmp 524279 ( 2.30%) 45691667 ( 0.29%) 87.15
ipip 309 ( 0.00%) 37204 ( 0.00%) 120.40
ipsec 1232 ( 0.01%) 232600 ( 0.00%) 188.80
ip6 1276 ( 0.01%) 152034 ( 0.00%) 119.15
other 117158 ( 0.51%) 20696443 ( 0.13%) 176.65
frag 3685 ( 0.02%) 2684149 ( 0.02%) 728.40
ip6 28302 ( 0.12%) 5399776 ( 0.03%) 190.79
tcp6 5573 ( 0.02%) 1453797 ( 0.01%) 260.86
http(s) 270 ( 0.00%) 195018 ( 0.00%) 722.29
http(c) 1845 ( 0.01%) 206370 ( 0.00%) 111.85
smtp 1612 ( 0.01%) 866811 ( 0.01%) 537.72
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1781 ( 0.01%) 178916 ( 0.00%) 100.46
udp6 17096 ( 0.08%) 3242847 ( 0.02%) 189.68
dns 15480 ( 0.07%) 2831430 ( 0.02%) 182.91
other 1616 ( 0.01%) 411417 ( 0.00%) 254.59
icmp6 5601 ( 0.02%) 697165 ( 0.00%) 124.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1887 ( 0.00%) 943.50
tcpdump file: 200806131400.dump.gz (573.39 MB)