Traffic Trace Info
DumpFile: 200806261400.dump
FileSize: 1543.67MB
Id: 200806261400
StartTime: Thu Jun 26 14:00:01 2008
EndTime: Thu Jun 26 14:15:00 2008
TotalTime: 899.65 seconds
TotalCapSize: 1212.02MB CapLen: 96 bytes
# of packets: 21734271 (14275.56MB)
AvgRate: 133.03Mbps stddev:33.63M
IP flow (unique src/dst pair) Information
# of flows: 754407 (avg. 28.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.5% 1.4% 1.4% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 468429
Top 10 bandwidth usage (bytes/total in %):
6.5% 3.7% 3.0% 2.3% 2.3% 2.1% 2.1% 2.1% 2.0% 1.9%
# of IPv6 addresses: 975
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.5% 7.3% 7.3% 7.0% 5.8% 5.8% 5.6% 5.2% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806261400.pktlen.png)
detailed numbers
[ 32- 63]: 5640709
[ 64- 127]: 4986432
[ 128- 255]: 775922
[ 256- 511]: 646799
[ 512- 1023]: 522262
[ 1024- 2047]: 9162147
Protocol Breakdown
![[protocol breakdown chart]](200806261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21734271 (100.00%) 14969007454 (100.00%) 688.73
ip 21693745 ( 99.81%) 14961439272 ( 99.95%) 689.67
tcp 19490080 ( 89.67%) 14427673396 ( 96.38%) 740.26
http(s) 8750124 ( 40.26%) 11360573988 ( 75.89%) 1298.33
http(c) 5474384 ( 25.19%) 694967722 ( 4.64%) 126.95
squid 681447 ( 3.14%) 360568315 ( 2.41%) 529.12
smtp 704985 ( 3.24%) 146266684 ( 0.98%) 207.47
nntp 72 ( 0.00%) 5321 ( 0.00%) 73.90
ftp 180647 ( 0.83%) 189786711 ( 1.27%) 1050.59
pop3 25371 ( 0.12%) 20502589 ( 0.14%) 808.11
imap 10413 ( 0.05%) 7899704 ( 0.05%) 758.64
telnet 2828 ( 0.01%) 520038 ( 0.00%) 183.89
ssh 23291 ( 0.11%) 13443805 ( 0.09%) 577.21
dns 50993 ( 0.23%) 30368729 ( 0.20%) 595.55
bgp 379 ( 0.00%) 196654 ( 0.00%) 518.88
napster 27 ( 0.00%) 4881 ( 0.00%) 180.78
realaud 5 ( 0.00%) 695 ( 0.00%) 139.00
rtsp 236214 ( 1.09%) 245673511 ( 1.64%) 1040.05
icecast 11211 ( 0.05%) 1084991 ( 0.01%) 96.78
hotline 34 ( 0.00%) 4278 ( 0.00%) 125.82
other 3337643 ( 15.36%) 1355804060 ( 9.06%) 406.22
udp 1736721 ( 7.99%) 481419404 ( 3.22%) 277.20
dns 1015705 ( 4.67%) 159937838 ( 1.07%) 157.46
realaud 13534 ( 0.06%) 2591296 ( 0.02%) 191.47
halflif 23 ( 0.00%) 3799 ( 0.00%) 165.17
starcra 39 ( 0.00%) 7874 ( 0.00%) 201.90
everque 64 ( 0.00%) 11572 ( 0.00%) 180.81
unreal 3 ( 0.00%) 869 ( 0.00%) 289.67
quake 6 ( 0.00%) 457 ( 0.00%) 76.17
cuseeme 6 ( 0.00%) 883 ( 0.00%) 147.17
other 706921 ( 3.25%) 318822614 ( 2.13%) 451.00
icmp 334180 ( 1.54%) 29891520 ( 0.20%) 89.45
ipip 313 ( 0.00%) 38330 ( 0.00%) 122.46
ipsec 879 ( 0.00%) 140258 ( 0.00%) 159.57
ip6 1557 ( 0.01%) 234917 ( 0.00%) 150.88
other 130015 ( 0.60%) 22041447 ( 0.15%) 169.53
frag 3795 ( 0.02%) 2693624 ( 0.02%) 709.78
ip6 40526 ( 0.19%) 7568182 ( 0.05%) 186.75
tcp6 6422 ( 0.03%) 1560718 ( 0.01%) 243.03
http(s) 496 ( 0.00%) 651300 ( 0.00%) 1313.10
http(c) 1681 ( 0.01%) 206715 ( 0.00%) 122.97
smtp 610 ( 0.00%) 174723 ( 0.00%) 286.43
ftp 221 ( 0.00%) 188775 ( 0.00%) 854.19
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 85 ( 0.00%) 11854 ( 0.00%) 139.46
bgp 1357 ( 0.01%) 124497 ( 0.00%) 91.74
other 1942 ( 0.01%) 200250 ( 0.00%) 103.12
udp6 26580 ( 0.12%) 4959701 ( 0.03%) 186.60
dns 26563 ( 0.12%) 4957825 ( 0.03%) 186.64
other 17 ( 0.00%) 1876 ( 0.00%) 110.35
icmp6 7488 ( 0.03%) 1041136 ( 0.01%) 139.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 2547 ( 0.00%) 424.50
tcpdump file: 200806261400.dump.gz (537.67 MB)