Traffic Trace Info
DumpFile: 200806161400.dump
FileSize: 1666.90MB
Id: 200806161400
StartTime: Mon Jun 16 14:00:00 2008
EndTime: Mon Jun 16 14:15:01 2008
TotalTime: 900.46 seconds
TotalCapSize: 1308.81MB CapLen: 96 bytes
# of packets: 23467512 (15984.04MB)
AvgRate: 148.92Mbps stddev:24.08M
IP flow (unique src/dst pair) Information
# of flows: 668405 (avg. 35.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.5% 2.7% 2.3% 1.9% 1.5% 1.3% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 337917
Top 10 bandwidth usage (bytes/total in %):
5.1% 5.0% 4.4% 4.0% 3.6% 3.0% 2.7% 2.7% 2.3% 2.3%
# of IPv6 addresses: 775
Top 10 bandwidth usage (bytes/total in %):
87.5% 78.3% 9.1% 1.4% 1.2% 1.1% 0.8% 0.7% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806161400.pktlen.png)
detailed numbers
[ 32- 63]: 5741695
[ 64- 127]: 5117275
[ 128- 255]: 806946
[ 256- 511]: 733640
[ 512- 1023]: 934478
[ 1024- 2047]: 10133478
Protocol Breakdown
![[protocol breakdown chart]](200806161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23467512 (100.00%) 16760485141 (100.00%) 714.20
ip 23416547 ( 99.78%) 16725840096 ( 99.79%) 714.27
tcp 21060633 ( 89.74%) 16313516059 ( 97.33%) 774.60
http(s) 8892155 ( 37.89%) 11128043065 ( 66.39%) 1251.45
http(c) 6150608 ( 26.21%) 1491731341 ( 8.90%) 242.53
squid 555629 ( 2.37%) 230724723 ( 1.38%) 415.25
smtp 619381 ( 2.64%) 155776104 ( 0.93%) 251.50
nntp 24 ( 0.00%) 2250 ( 0.00%) 93.75
ftp 150280 ( 0.64%) 123538719 ( 0.74%) 822.06
pop3 14316 ( 0.06%) 5351751 ( 0.03%) 373.83
imap 7223 ( 0.03%) 2675819 ( 0.02%) 370.46
telnet 1839 ( 0.01%) 267970 ( 0.00%) 145.72
ssh 720888 ( 3.07%) 727488012 ( 4.34%) 1009.16
dns 4400 ( 0.02%) 330535 ( 0.00%) 75.12
bgp 233 ( 0.00%) 75545 ( 0.00%) 324.23
napster 24 ( 0.00%) 3366 ( 0.00%) 140.25
realaud 48 ( 0.00%) 4396 ( 0.00%) 91.58
rtsp 266191 ( 1.13%) 265357939 ( 1.58%) 996.87
icecast 359902 ( 1.53%) 351331953 ( 2.10%) 976.19
hotline 5 ( 0.00%) 544 ( 0.00%) 108.80
other 3317487 ( 14.14%) 1830812027 ( 10.92%) 551.87
udp 1736469 ( 7.40%) 344206346 ( 2.05%) 198.22
dns 1025703 ( 4.37%) 169459865 ( 1.01%) 165.21
realaud 27146 ( 0.12%) 13858125 ( 0.08%) 510.50
halflif 22 ( 0.00%) 2969 ( 0.00%) 134.95
starcra 41 ( 0.00%) 8395 ( 0.00%) 204.76
everque 37 ( 0.00%) 7022 ( 0.00%) 189.78
unreal 6 ( 0.00%) 978 ( 0.00%) 163.00
quake 8 ( 0.00%) 675 ( 0.00%) 84.38
cuseeme 3 ( 0.00%) 526 ( 0.00%) 175.33
other 683478 ( 2.91%) 160853274 ( 0.96%) 235.35
icmp 468993 ( 2.00%) 41660152 ( 0.25%) 88.83
ipip 311 ( 0.00%) 36328 ( 0.00%) 116.81
ipsec 921 ( 0.00%) 146886 ( 0.00%) 159.49
ip6 2302 ( 0.01%) 452414 ( 0.00%) 196.53
other 146918 ( 0.63%) 25821911 ( 0.15%) 175.76
frag 1277 ( 0.01%) 1049697 ( 0.01%) 822.00
ip6 50965 ( 0.22%) 34645045 ( 0.21%) 679.78
tcp6 28910 ( 0.12%) 30859225 ( 0.18%) 1067.42
http(c) 1117 ( 0.00%) 129038 ( 0.00%) 115.52
smtp 250 ( 0.00%) 72457 ( 0.00%) 289.83
ftp 728 ( 0.00%) 80257 ( 0.00%) 110.24
pop3 18 ( 0.00%) 2320 ( 0.00%) 128.89
ssh 899 ( 0.00%) 77410 ( 0.00%) 86.11
bgp 71 ( 0.00%) 7746 ( 0.00%) 109.10
other 25827 ( 0.11%) 30489997 ( 0.18%) 1180.55
udp6 16302 ( 0.07%) 3056814 ( 0.02%) 187.51
dns 16277 ( 0.07%) 3053342 ( 0.02%) 187.59
other 25 ( 0.00%) 3472 ( 0.00%) 138.88
icmp6 5715 ( 0.02%) 718410 ( 0.00%) 125.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 6516 ( 0.00%) 814.50
tcpdump file: 200806161400.dump.gz (579.98 MB)