Traffic Trace Info
DumpFile: 200807141400.dump
FileSize: 1905.58MB
Id: 200807141400
StartTime: Mon Jul 14 14:00:01 2008
EndTime: Mon Jul 14 14:15:00 2008
TotalTime: 899.34 seconds
TotalCapSize: 1493.07MB CapLen: 96 bytes
# of packets: 27033608 (18743.45MB)
AvgRate: 174.83Mbps stddev:23.77M
IP flow (unique src/dst pair) Information
# of flows: 821682 (avg. 32.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.7% 1.6% 1.6% 1.4% 1.4% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 484726
Top 10 bandwidth usage (bytes/total in %):
5.7% 5.0% 4.1% 3.9% 3.2% 3.2% 3.0% 2.9% 2.5% 2.4%
# of IPv6 addresses: 922
Top 10 bandwidth usage (bytes/total in %):
16.2% 13.7% 13.6% 10.5% 6.0% 5.3% 5.3% 4.6% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807141400.pktlen.png)
detailed numbers
[ 32- 63]: 6593244
[ 64- 127]: 5854284
[ 128- 255]: 929272
[ 256- 511]: 760639
[ 512- 1023]: 706108
[ 1024- 2047]: 12190061
Protocol Breakdown
![[protocol breakdown chart]](200807141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27033608 (100.00%) 19653933003 (100.00%) 727.02
ip 26996466 ( 99.86%) 19647871126 ( 99.97%) 727.79
tcp 24020085 ( 88.85%) 18585057088 ( 94.56%) 773.73
http(s) 10034106 ( 37.12%) 12835352986 ( 65.31%) 1279.17
http(c) 6272314 ( 23.20%) 777812710 ( 3.96%) 124.01
squid 745414 ( 2.76%) 221958163 ( 1.13%) 297.76
smtp 568641 ( 2.10%) 150277041 ( 0.76%) 264.27
nntp 113 ( 0.00%) 10230 ( 0.00%) 90.53
ftp 206622 ( 0.76%) 120990753 ( 0.62%) 585.57
pop3 26284 ( 0.10%) 17712153 ( 0.09%) 673.88
imap 11476 ( 0.04%) 5416306 ( 0.03%) 471.97
telnet 2068 ( 0.01%) 259147 ( 0.00%) 125.31
ssh 25067 ( 0.09%) 9154371 ( 0.05%) 365.20
dns 13137 ( 0.05%) 5689314 ( 0.03%) 433.08
bgp 210 ( 0.00%) 42399 ( 0.00%) 201.90
realaud 155 ( 0.00%) 75266 ( 0.00%) 485.59
rtsp 470969 ( 1.74%) 458427163 ( 2.33%) 973.37
icecast 13608 ( 0.05%) 6807901 ( 0.03%) 500.29
hotline 12 ( 0.00%) 2584 ( 0.00%) 215.33
other 5629888 ( 20.83%) 3975068541 ( 20.23%) 706.07
udp 2383576 ( 8.82%) 995114106 ( 5.06%) 417.49
dns 1103353 ( 4.08%) 187347101 ( 0.95%) 169.80
realaud 38183 ( 0.14%) 22959083 ( 0.12%) 601.29
halflif 30 ( 0.00%) 3971 ( 0.00%) 132.37
starcra 32 ( 0.00%) 5697 ( 0.00%) 178.03
everque 97 ( 0.00%) 22451 ( 0.00%) 231.45
unreal 24 ( 0.00%) 3680 ( 0.00%) 153.33
quake 15 ( 0.00%) 1706 ( 0.00%) 113.73
cuseeme 5 ( 0.00%) 1792 ( 0.00%) 358.40
other 1241746 ( 4.59%) 784734240 ( 3.99%) 631.96
icmp 425806 ( 1.58%) 38815974 ( 0.20%) 91.16
ipip 314 ( 0.00%) 36524 ( 0.00%) 116.32
ipsec 7068 ( 0.03%) 1433368 ( 0.01%) 202.80
ip6 1249 ( 0.00%) 303619 ( 0.00%) 243.09
other 158368 ( 0.59%) 27110447 ( 0.14%) 171.19
frag 33296 ( 0.12%) 31014334 ( 0.16%) 931.47
ip6 37142 ( 0.14%) 6061877 ( 0.03%) 163.21
tcp6 18486 ( 0.07%) 2883571 ( 0.01%) 155.99
http(s) 755 ( 0.00%) 1087809 ( 0.01%) 1440.81
http(c) 3901 ( 0.01%) 403574 ( 0.00%) 103.45
smtp 503 ( 0.00%) 180932 ( 0.00%) 359.71
ftp 35 ( 0.00%) 2906 ( 0.00%) 83.03
pop3 101 ( 0.00%) 10438 ( 0.00%) 103.35
ssh 9849 ( 0.04%) 885594 ( 0.00%) 89.92
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 1341 ( 0.00%) 112397 ( 0.00%) 83.82
other 1997 ( 0.01%) 199464 ( 0.00%) 99.88
udp6 13950 ( 0.05%) 2529198 ( 0.01%) 181.30
dns 13930 ( 0.05%) 2526998 ( 0.01%) 181.41
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 4676 ( 0.02%) 645028 ( 0.00%) 137.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200807141400.dump.gz (666.32 MB)