Traffic Trace Info
DumpFile: 200807011400.dump
FileSize: 1436.02MB
Id: 200807011400
StartTime: Tue Jul 1 14:00:00 2008
EndTime: Tue Jul 1 14:15:00 2008
TotalTime: 899.94 seconds
TotalCapSize: 1124.95MB CapLen: 96 bytes
# of packets: 20385754 (12164.90MB)
AvgRate: 113.36Mbps stddev:14.45M
IP flow (unique src/dst pair) Information
# of flows: 677427 (avg. 30.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.1% 2.4% 1.6% 1.3% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 374173
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.8% 4.8% 4.2% 3.2% 2.7% 2.5% 2.5% 2.5% 2.4%
# of IPv6 addresses: 1217
Top 10 bandwidth usage (bytes/total in %):
17.7% 15.0% 7.6% 5.4% 5.1% 5.0% 4.9% 4.7% 4.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807011400.pktlen.png)
detailed numbers
[ 32- 63]: 5111019
[ 64- 127]: 5404815
[ 128- 255]: 961724
[ 256- 511]: 809256
[ 512- 1023]: 511938
[ 1024- 2047]: 7587002
Protocol Breakdown
![[protocol breakdown chart]](200807011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20385754 (100.00%) 12755821247 (100.00%) 625.72
ip 20351599 ( 99.83%) 12749254007 ( 99.95%) 626.45
tcp 17330642 ( 85.01%) 12131012275 ( 95.10%) 699.97
http(s) 6601683 ( 32.38%) 8197624029 ( 64.27%) 1241.75
http(c) 5084746 ( 24.94%) 703838928 ( 5.52%) 138.42
squid 797295 ( 3.91%) 330047304 ( 2.59%) 413.96
smtp 388833 ( 1.91%) 83981643 ( 0.66%) 215.98
nntp 130 ( 0.00%) 11191 ( 0.00%) 86.08
ftp 63911 ( 0.31%) 15767513 ( 0.12%) 246.71
pop3 15171 ( 0.07%) 8548909 ( 0.07%) 563.50
imap 16380 ( 0.08%) 11043408 ( 0.09%) 674.20
telnet 5634 ( 0.03%) 517221 ( 0.00%) 91.80
ssh 1152768 ( 5.65%) 874779150 ( 6.86%) 758.85
dns 5550 ( 0.03%) 425255 ( 0.00%) 76.62
bgp 230 ( 0.00%) 77491 ( 0.00%) 336.92
napster 14 ( 0.00%) 1507 ( 0.00%) 107.64
realaud 25 ( 0.00%) 4639 ( 0.00%) 185.56
rtsp 185635 ( 0.91%) 189281487 ( 1.48%) 1019.64
icecast 4077 ( 0.02%) 292482 ( 0.00%) 71.74
hotline 11 ( 0.00%) 1364 ( 0.00%) 124.00
other 3008549 ( 14.76%) 1714768754 ( 13.44%) 569.97
udp 2247126 ( 11.02%) 535280685 ( 4.20%) 238.21
dns 1608020 ( 7.89%) 265513381 ( 2.08%) 165.12
realaud 16516 ( 0.08%) 9779364 ( 0.08%) 592.11
halflif 22 ( 0.00%) 2574 ( 0.00%) 117.00
starcra 28 ( 0.00%) 4977 ( 0.00%) 177.75
everque 38 ( 0.00%) 7248 ( 0.00%) 190.74
unreal 13 ( 0.00%) 1991 ( 0.00%) 153.15
quake 9 ( 0.00%) 759 ( 0.00%) 84.33
cuseeme 3 ( 0.00%) 292 ( 0.00%) 97.33
other 622398 ( 3.05%) 259941315 ( 2.04%) 417.64
icmp 611406 ( 3.00%) 50658924 ( 0.40%) 82.86
ipip 308 ( 0.00%) 38318 ( 0.00%) 124.41
ipsec 1983 ( 0.01%) 445842 ( 0.00%) 224.83
ip6 927 ( 0.00%) 113234 ( 0.00%) 122.15
other 159207 ( 0.78%) 31704729 ( 0.25%) 199.14
frag 2613 ( 0.01%) 2132143 ( 0.02%) 815.98
ip6 34155 ( 0.17%) 6567240 ( 0.05%) 192.28
tcp6 7406 ( 0.04%) 2449958 ( 0.02%) 330.81
http(s) 542 ( 0.00%) 721588 ( 0.01%) 1331.34
http(c) 2104 ( 0.01%) 207797 ( 0.00%) 98.76
smtp 559 ( 0.00%) 181990 ( 0.00%) 325.56
ftp 52 ( 0.00%) 5978 ( 0.00%) 114.96
pop3 32 ( 0.00%) 2768 ( 0.00%) 86.50
ssh 195 ( 0.00%) 34818 ( 0.00%) 178.55
dns 19 ( 0.00%) 1763 ( 0.00%) 92.79
bgp 909 ( 0.00%) 76297 ( 0.00%) 83.94
other 2994 ( 0.01%) 1216959 ( 0.01%) 406.47
udp6 20593 ( 0.10%) 3294479 ( 0.03%) 159.98
dns 20123 ( 0.10%) 3232775 ( 0.03%) 160.65
other 470 ( 0.00%) 61704 ( 0.00%) 131.29
icmp6 6125 ( 0.03%) 818265 ( 0.01%) 133.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 458 ( 0.00%) 458.00
tcpdump file: 200807011400.dump.gz (501.79 MB)