Traffic Trace Info
DumpFile: 200806211400.dump
FileSize: 1081.39MB
Id: 200806211400
StartTime: Sat Jun 21 14:00:00 2008
EndTime: Sat Jun 21 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 849.44MB CapLen: 96 bytes
# of packets: 15195437 (9546.74MB)
AvgRate: 89.02Mbps stddev:15.71M
IP flow (unique src/dst pair) Information
# of flows: 552071 (avg. 27.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.3% 1.9% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 328810
Top 10 bandwidth usage (bytes/total in %):
5.3% 4.1% 4.0% 3.9% 3.9% 3.6% 3.4% 3.4% 2.8% 2.6%
# of IPv6 addresses: 738
Top 10 bandwidth usage (bytes/total in %):
10.2% 8.8% 7.3% 7.2% 6.3% 6.3% 6.1% 5.7% 4.8% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806211400.pktlen.png)
detailed numbers
[ 32- 63]: 3337266
[ 64- 127]: 4291761
[ 128- 255]: 595267
[ 256- 511]: 501238
[ 512- 1023]: 412618
[ 1024- 2047]: 6057287
Protocol Breakdown
![[protocol breakdown chart]](200806211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15195437 (100.00%) 10010483226 (100.00%) 658.78
ip 15174056 ( 99.86%) 10006872553 ( 99.96%) 659.47
tcp 12408904 ( 81.66%) 9633481269 ( 96.23%) 776.34
http(s) 5151706 ( 33.90%) 6799303978 ( 67.92%) 1319.82
http(c) 2937979 ( 19.33%) 286396170 ( 2.86%) 97.48
squid 649004 ( 4.27%) 507689212 ( 5.07%) 782.26
smtp 501172 ( 3.30%) 89604413 ( 0.90%) 178.79
nntp 12 ( 0.00%) 1006 ( 0.00%) 83.83
ftp 438708 ( 2.89%) 510251700 ( 5.10%) 1163.08
pop3 14708 ( 0.10%) 15673519 ( 0.16%) 1065.65
imap 4265 ( 0.03%) 2442181 ( 0.02%) 572.61
telnet 1463 ( 0.01%) 150848 ( 0.00%) 103.11
ssh 493235 ( 3.25%) 136999881 ( 1.37%) 277.76
dns 5273 ( 0.03%) 964650 ( 0.01%) 182.94
bgp 224 ( 0.00%) 83838 ( 0.00%) 374.28
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 59 ( 0.00%) 6509 ( 0.00%) 110.32
rtsp 261350 ( 1.72%) 235226216 ( 2.35%) 900.04
icecast 12475 ( 0.08%) 1810748 ( 0.02%) 145.15
hotline 37 ( 0.00%) 2663 ( 0.00%) 71.97
other 1937230 ( 12.75%) 1046873491 ( 10.46%) 540.40
udp 1197168 ( 7.88%) 231391016 ( 2.31%) 193.28
dns 878248 ( 5.78%) 145807708 ( 1.46%) 166.02
realaud 15 ( 0.00%) 1806 ( 0.00%) 120.40
halflif 4427 ( 0.03%) 419252 ( 0.00%) 94.70
starcra 15 ( 0.00%) 2769 ( 0.00%) 184.60
everque 31 ( 0.00%) 6531 ( 0.00%) 210.68
unreal 2 ( 0.00%) 244 ( 0.00%) 122.00
quake 6 ( 0.00%) 447 ( 0.00%) 74.50
cuseeme 2 ( 0.00%) 175 ( 0.00%) 87.50
other 314402 ( 2.07%) 85138965 ( 0.85%) 270.80
icmp 1234088 ( 8.12%) 92779150 ( 0.93%) 75.18
ipip 313 ( 0.00%) 39560 ( 0.00%) 126.39
ipsec 3818 ( 0.03%) 3068036 ( 0.03%) 803.57
ip6 1013 ( 0.01%) 126969 ( 0.00%) 125.34
other 328752 ( 2.16%) 45986553 ( 0.46%) 139.88
frag 1084 ( 0.01%) 881435 ( 0.01%) 813.13
ip6 21379 ( 0.14%) 3610553 ( 0.04%) 168.88
tcp6 3096 ( 0.02%) 515918 ( 0.01%) 166.64
http(s) 127 ( 0.00%) 165922 ( 0.00%) 1306.47
http(c) 1306 ( 0.01%) 145481 ( 0.00%) 111.39
smtp 396 ( 0.00%) 72749 ( 0.00%) 183.71
pop3 42 ( 0.00%) 4225 ( 0.00%) 100.60
bgp 65 ( 0.00%) 6909 ( 0.00%) 106.29
other 1160 ( 0.01%) 120632 ( 0.00%) 103.99
udp6 13669 ( 0.09%) 2486145 ( 0.02%) 181.88
dns 13649 ( 0.09%) 2483945 ( 0.02%) 181.99
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 4582 ( 0.03%) 603494 ( 0.01%) 131.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 916 ( 0.00%) 458.00
tcpdump file: 200806211400.dump.gz (367.97 MB)