Traffic Trace Info
DumpFile: 200806171400.dump
FileSize: 1675.66MB
Id: 200806171400
StartTime: Tue Jun 17 14:00:00 2008
EndTime: Tue Jun 17 14:15:00 2008
TotalTime: 899.97 seconds
TotalCapSize: 1306.37MB CapLen: 96 bytes
# of packets: 24200833 (16161.13MB)
AvgRate: 150.64Mbps stddev:36.77M
IP flow (unique src/dst pair) Information
# of flows: 788331 (avg. 30.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.5% 3.3% 2.5% 1.8% 1.8% 1.7% 1.4% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 451033
Top 10 bandwidth usage (bytes/total in %):
5.2% 5.2% 5.1% 5.1% 4.9% 4.7% 4.6% 3.2% 3.2% 3.0%
# of IPv6 addresses: 782
Top 10 bandwidth usage (bytes/total in %):
35.1% 34.4% 6.2% 6.1% 5.7% 4.1% 4.0% 3.9% 3.9% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806171400.pktlen.png)
detailed numbers
[ 32- 63]: 5950262
[ 64- 127]: 5739324
[ 128- 255]: 880971
[ 256- 511]: 598476
[ 512- 1023]: 568805
[ 1024- 2047]: 10462995
Protocol Breakdown
![[protocol breakdown chart]](200806171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24200833 (100.00%) 16946174926 (100.00%) 700.23
ip 24176196 ( 99.90%) 16940510879 ( 99.97%) 700.71
tcp 19149219 ( 79.13%) 15485146418 ( 91.38%) 808.66
http(s) 8805146 ( 36.38%) 11485223921 ( 67.77%) 1304.38
http(c) 5239797 ( 21.65%) 622568992 ( 3.67%) 118.82
squid 475170 ( 1.96%) 270377685 ( 1.60%) 569.01
smtp 561780 ( 2.32%) 137534884 ( 0.81%) 244.82
nntp 31 ( 0.00%) 3152 ( 0.00%) 101.68
ftp 498654 ( 2.06%) 423978921 ( 2.50%) 850.25
pop3 23506 ( 0.10%) 16476760 ( 0.10%) 700.96
imap 18701 ( 0.08%) 14320841 ( 0.08%) 765.78
telnet 3569 ( 0.01%) 594602 ( 0.00%) 166.60
ssh 788862 ( 3.26%) 582765237 ( 3.44%) 738.74
dns 9088 ( 0.04%) 4985957 ( 0.03%) 548.63
bgp 198 ( 0.00%) 59639 ( 0.00%) 301.21
napster 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 10 ( 0.00%) 1179 ( 0.00%) 117.90
rtsp 300941 ( 1.24%) 320599620 ( 1.89%) 1065.32
icecast 805 ( 0.00%) 80078 ( 0.00%) 99.48
other 2422958 ( 10.01%) 1605574770 ( 9.47%) 662.65
udp 2212707 ( 9.14%) 489049249 ( 2.89%) 221.02
dns 1088321 ( 4.50%) 263251408 ( 1.55%) 241.89
realaud 1838 ( 0.01%) 111521 ( 0.00%) 60.68
halflif 28 ( 0.00%) 4883 ( 0.00%) 174.39
starcra 54 ( 0.00%) 8450 ( 0.00%) 156.48
everque 64 ( 0.00%) 10552 ( 0.00%) 164.88
unreal 10 ( 0.00%) 1953 ( 0.00%) 195.30
quake 17 ( 0.00%) 2117 ( 0.00%) 124.53
cuseeme 26 ( 0.00%) 1865 ( 0.00%) 71.73
other 1122314 ( 4.64%) 225641655 ( 1.33%) 201.05
icmp 813074 ( 3.36%) 70471880 ( 0.42%) 86.67
ipip 303 ( 0.00%) 36286 ( 0.00%) 119.76
ipsec 1876701 ( 7.75%) 856447328 ( 5.05%) 456.36
ip6 2913 ( 0.01%) 584186 ( 0.00%) 200.54
other 121279 ( 0.50%) 38775532 ( 0.23%) 319.72
frag 2026 ( 0.01%) 1688723 ( 0.01%) 833.53
ip6 24637 ( 0.10%) 5664047 ( 0.03%) 229.90
tcp6 5608 ( 0.02%) 2439951 ( 0.01%) 435.08
http(s) 18 ( 0.00%) 5394 ( 0.00%) 299.67
http(c) 1250 ( 0.01%) 132159 ( 0.00%) 105.73
smtp 1702 ( 0.01%) 2056701 ( 0.01%) 1208.40
ssh 899 ( 0.00%) 77410 ( 0.00%) 86.11
dns 12 ( 0.00%) 1179 ( 0.00%) 98.25
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 1665 ( 0.01%) 160672 ( 0.00%) 96.50
udp6 14484 ( 0.06%) 2623317 ( 0.02%) 181.12
dns 14471 ( 0.06%) 2621887 ( 0.02%) 181.18
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 4515 ( 0.02%) 596699 ( 0.00%) 132.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200806171400.dump.gz (564.50 MB)