Traffic Trace Info
DumpFile: 200807101400.dump
FileSize: 1728.95MB
Id: 200807101400
StartTime: Thu Jul 10 14:00:01 2008
EndTime: Thu Jul 10 14:15:00 2008
TotalTime: 899.11 seconds
TotalCapSize: 1351.08MB CapLen: 96 bytes
# of packets: 24763452 (14938.38MB)
AvgRate: 139.41Mbps stddev:25.37M
IP flow (unique src/dst pair) Information
# of flows: 679413 (avg. 36.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.8% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 373178
Top 10 bandwidth usage (bytes/total in %):
6.5% 5.5% 5.1% 4.6% 3.2% 3.0% 2.9% 2.3% 2.3% 2.2%
# of IPv6 addresses: 852
Top 10 bandwidth usage (bytes/total in %):
8.4% 8.4% 6.9% 6.2% 6.2% 6.1% 5.8% 5.8% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807101400.pktlen.png)
detailed numbers
[ 32- 63]: 6612063
[ 64- 127]: 6283954
[ 128- 255]: 1020758
[ 256- 511]: 729969
[ 512- 1023]: 666435
[ 1024- 2047]: 9450273
Protocol Breakdown
![[protocol breakdown chart]](200807101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24763452 (100.00%) 15664023259 (100.00%) 632.55
ip 24734336 ( 99.88%) 15658519867 ( 99.96%) 633.07
tcp 19335754 ( 78.08%) 14456413716 ( 92.29%) 747.65
http(s) 8734312 ( 35.27%) 11360490619 ( 72.53%) 1300.67
http(c) 5396707 ( 21.79%) 603795908 ( 3.85%) 111.88
squid 796236 ( 3.22%) 299810548 ( 1.91%) 376.53
smtp 747390 ( 3.02%) 146292773 ( 0.93%) 195.74
nntp 15 ( 0.00%) 1682 ( 0.00%) 112.13
ftp 207326 ( 0.84%) 172270829 ( 1.10%) 830.92
pop3 22008 ( 0.09%) 10914748 ( 0.07%) 495.94
imap 9212 ( 0.04%) 5118632 ( 0.03%) 555.65
telnet 19813 ( 0.08%) 1686496 ( 0.01%) 85.12
ssh 120816 ( 0.49%) 87282364 ( 0.56%) 722.44
dns 3670 ( 0.01%) 390296 ( 0.00%) 106.35
bgp 231 ( 0.00%) 54784 ( 0.00%) 237.16
napster 4797 ( 0.02%) 2878305 ( 0.02%) 600.02
realaud 185 ( 0.00%) 89416 ( 0.00%) 483.33
rtsp 96624 ( 0.39%) 133184108 ( 0.85%) 1378.38
icecast 19751 ( 0.08%) 8789741 ( 0.06%) 445.03
hotline 5 ( 0.00%) 1946 ( 0.00%) 389.20
other 3156609 ( 12.75%) 1623357701 ( 10.36%) 514.27
udp 3791344 ( 15.31%) 1060621138 ( 6.77%) 279.75
dns 1155520 ( 4.67%) 182836899 ( 1.17%) 158.23
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 10597 ( 0.04%) 2945143 ( 0.02%) 277.92
halflif 25 ( 0.00%) 5314 ( 0.00%) 212.56
starcra 50 ( 0.00%) 8480 ( 0.00%) 169.60
everque 228 ( 0.00%) 28263 ( 0.00%) 123.96
unreal 14 ( 0.00%) 1845 ( 0.00%) 131.79
quake 25 ( 0.00%) 2961 ( 0.00%) 118.44
cuseeme 11 ( 0.00%) 1684 ( 0.00%) 153.09
other 2624867 ( 10.60%) 874783578 ( 5.58%) 333.27
icmp 1383840 ( 5.59%) 105051017 ( 0.67%) 75.91
ipip 317 ( 0.00%) 37234 ( 0.00%) 117.46
ipsec 3259 ( 0.01%) 493212 ( 0.00%) 151.34
ip6 830 ( 0.00%) 100584 ( 0.00%) 121.19
other 218992 ( 0.88%) 35802966 ( 0.23%) 163.49
frag 1466 ( 0.01%) 1198980 ( 0.01%) 817.86
ip6 29116 ( 0.12%) 5503392 ( 0.04%) 189.02
tcp6 9574 ( 0.04%) 2202012 ( 0.01%) 230.00
http(s) 1754 ( 0.01%) 998597 ( 0.01%) 569.33
http(c) 2102 ( 0.01%) 218933 ( 0.00%) 104.15
squid 6 ( 0.00%) 444 ( 0.00%) 74.00
smtp 563 ( 0.00%) 150517 ( 0.00%) 267.35
ftp 23 ( 0.00%) 2136 ( 0.00%) 92.87
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 1265 ( 0.01%) 460674 ( 0.00%) 364.17
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 908 ( 0.00%) 76768 ( 0.00%) 84.55
other 2919 ( 0.01%) 290881 ( 0.00%) 99.65
udp6 14649 ( 0.06%) 2664494 ( 0.02%) 181.89
dns 14622 ( 0.06%) 2661528 ( 0.02%) 182.02
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
other 26 ( 0.00%) 2860 ( 0.00%) 110.00
icmp6 4863 ( 0.02%) 632806 ( 0.00%) 130.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200807101400.dump.gz (593.10 MB)