Traffic Trace Info
DumpFile: 200806271400.dump
FileSize: 1753.45MB
Id: 200806271400
StartTime: Fri Jun 27 14:00:00 2008
EndTime: Fri Jun 27 14:15:00 2008
TotalTime: 900.04 seconds
TotalCapSize: 1368.11MB CapLen: 96 bytes
# of packets: 25252770 (19289.87MB)
AvgRate: 179.79Mbps stddev:37.23M
IP flow (unique src/dst pair) Information
# of flows: 676031 (avg. 37.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 6.5% 1.8% 1.5% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 377776
Top 10 bandwidth usage (bytes/total in %):
17.3% 8.6% 8.1% 7.0% 4.5% 3.6% 3.5% 2.5% 2.2% 1.9%
# of IPv6 addresses: 880
Top 10 bandwidth usage (bytes/total in %):
79.5% 79.5% 4.1% 4.0% 2.2% 2.0% 1.4% 1.2% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200806271400.pktlen.png)
detailed numbers
[ 32- 63]: 4702013
[ 64- 127]: 5761464
[ 128- 255]: 928656
[ 256- 511]: 587729
[ 512- 1023]: 702267
[ 1024- 2047]: 12570641
Protocol Breakdown
![[protocol breakdown chart]](200806271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25252770 (100.00%) 20226895488 (100.00%) 800.98
ip 25186794 ( 99.74%) 20184034181 ( 99.79%) 801.37
tcp 21330784 ( 84.47%) 18711502879 ( 92.51%) 877.21
http(s) 10941633 ( 43.33%) 14771773469 ( 73.03%) 1350.05
http(c) 5130077 ( 20.31%) 807474185 ( 3.99%) 157.40
squid 788982 ( 3.12%) 563484449 ( 2.79%) 714.19
smtp 691399 ( 2.74%) 120243940 ( 0.59%) 173.91
nntp 66 ( 0.00%) 6899 ( 0.00%) 104.53
ftp 249411 ( 0.99%) 271369011 ( 1.34%) 1088.04
pop3 11243 ( 0.04%) 6121031 ( 0.03%) 544.43
imap 6154 ( 0.02%) 659161 ( 0.00%) 107.11
telnet 20036 ( 0.08%) 1503546 ( 0.01%) 75.04
ssh 39754 ( 0.16%) 6159033 ( 0.03%) 154.93
dns 4744 ( 0.02%) 432233 ( 0.00%) 91.11
bgp 201 ( 0.00%) 64115 ( 0.00%) 318.98
napster 20 ( 0.00%) 2187 ( 0.00%) 109.35
realaud 9 ( 0.00%) 1312 ( 0.00%) 145.78
rtsp 322979 ( 1.28%) 388767587 ( 1.92%) 1203.69
icecast 37223 ( 0.15%) 24509890 ( 0.12%) 658.46
hotline 1 ( 0.00%) 1038 ( 0.00%) 1038.00
other 3086851 ( 12.22%) 1748929733 ( 8.65%) 566.57
udp 3296335 ( 13.05%) 1408292153 ( 6.96%) 427.23
dns 1058768 ( 4.19%) 166911569 ( 0.83%) 157.65
realaud 25055 ( 0.10%) 8767676 ( 0.04%) 349.94
halflif 17 ( 0.00%) 2080 ( 0.00%) 122.35
starcra 50 ( 0.00%) 10374 ( 0.00%) 207.48
everque 46 ( 0.00%) 6877 ( 0.00%) 149.50
unreal 9 ( 0.00%) 1561 ( 0.00%) 173.44
quake 322 ( 0.00%) 46501 ( 0.00%) 144.41
cuseeme 1 ( 0.00%) 314 ( 0.00%) 314.00
other 2211806 ( 8.76%) 1232525619 ( 6.09%) 557.25
icmp 361356 ( 1.43%) 31854432 ( 0.16%) 88.15
ipip 333 ( 0.00%) 39688 ( 0.00%) 119.18
ipsec 1043 ( 0.00%) 144442 ( 0.00%) 138.49
ip6 987 ( 0.00%) 126155 ( 0.00%) 127.82
other 195956 ( 0.78%) 32074432 ( 0.16%) 163.68
frag 59173 ( 0.23%) 31736424 ( 0.16%) 536.33
ip6 65976 ( 0.26%) 42861307 ( 0.21%) 649.65
tcp6 30799 ( 0.12%) 36804113 ( 0.18%) 1194.98
http(s) 23008 ( 0.09%) 34281172 ( 0.17%) 1489.97
http(c) 2002 ( 0.01%) 200227 ( 0.00%) 100.01
smtp 1830 ( 0.01%) 1880935 ( 0.01%) 1027.83
ftp 9 ( 0.00%) 909 ( 0.00%) 101.00
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 957 ( 0.00%) 148459 ( 0.00%) 155.13
bgp 918 ( 0.00%) 78009 ( 0.00%) 84.98
other 2045 ( 0.01%) 211798 ( 0.00%) 103.57
udp6 26960 ( 0.11%) 5017703 ( 0.02%) 186.12
dns 26945 ( 0.11%) 5016053 ( 0.02%) 186.16
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 8185 ( 0.03%) 1035084 ( 0.01%) 126.46
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1 ( 0.00%) 191 ( 0.00%) 191.00
tcpdump file: 200806271400.dump.gz (609.15 MB)