Traffic Trace Info
DumpFile: 200807151400.dump
FileSize: 1731.97MB
Id: 200807151400
StartTime: Tue Jul 15 14:00:00 2008
EndTime: Tue Jul 15 14:15:00 2008
TotalTime: 900.14 seconds
TotalCapSize: 1358.65MB CapLen: 96 bytes
# of packets: 24464600 (16237.98MB)
AvgRate: 151.33Mbps stddev:24.04M
IP flow (unique src/dst pair) Information
# of flows: 727691 (avg. 33.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.4% 2.1% 2.1% 1.8% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 383570
Top 10 bandwidth usage (bytes/total in %):
5.8% 4.8% 4.6% 4.1% 3.0% 3.0% 2.8% 2.5% 2.5% 2.3%
# of IPv6 addresses: 910
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.5% 7.2% 6.8% 5.6% 4.6% 4.6% 4.6% 4.6% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807151400.pktlen.png)
detailed numbers
[ 32- 63]: 6044497
[ 64- 127]: 5619970
[ 128- 255]: 1166075
[ 256- 511]: 659571
[ 512- 1023]: 555798
[ 1024- 2047]: 10418689
Protocol Breakdown
![[protocol breakdown chart]](200807151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24464600 (100.00%) 17026753272 (100.00%) 695.98
ip 24437586 ( 99.89%) 17021603918 ( 99.97%) 696.53
tcp 22008111 ( 89.96%) 16544393112 ( 97.17%) 751.74
http(s) 9831476 ( 40.19%) 12792398798 ( 75.13%) 1301.17
http(c) 7009999 ( 28.65%) 1136338955 ( 6.67%) 162.10
squid 479882 ( 1.96%) 198864385 ( 1.17%) 414.40
smtp 820248 ( 3.35%) 167949225 ( 0.99%) 204.75
nntp 71 ( 0.00%) 26218 ( 0.00%) 369.27
ftp 140258 ( 0.57%) 68579576 ( 0.40%) 488.95
pop3 29980 ( 0.12%) 15193443 ( 0.09%) 506.79
imap 7915 ( 0.03%) 2354411 ( 0.01%) 297.46
telnet 2060 ( 0.01%) 281761 ( 0.00%) 136.78
ssh 156866 ( 0.64%) 26436578 ( 0.16%) 168.53
dns 6615 ( 0.03%) 792360 ( 0.00%) 119.78
bgp 230 ( 0.00%) 56272 ( 0.00%) 244.66
napster 10 ( 0.00%) 1827 ( 0.00%) 182.70
realaud 32 ( 0.00%) 4318 ( 0.00%) 134.94
rtsp 243762 ( 1.00%) 195772222 ( 1.15%) 803.13
icecast 988 ( 0.00%) 71145 ( 0.00%) 72.01
hotline 48 ( 0.00%) 3467 ( 0.00%) 72.23
other 3277665 ( 13.40%) 1939267791 ( 11.39%) 591.66
udp 1929034 ( 7.89%) 430341482 ( 2.53%) 223.09
dns 1222517 ( 5.00%) 210214825 ( 1.23%) 171.95
realaud 12152 ( 0.05%) 4395379 ( 0.03%) 361.70
halflif 14 ( 0.00%) 2170 ( 0.00%) 155.00
starcra 47 ( 0.00%) 8187 ( 0.00%) 174.19
everque 80 ( 0.00%) 12992 ( 0.00%) 162.40
unreal 15 ( 0.00%) 2233 ( 0.00%) 148.87
quake 31 ( 0.00%) 3520 ( 0.00%) 113.55
cuseeme 6 ( 0.00%) 581 ( 0.00%) 96.83
other 694080 ( 2.84%) 215660847 ( 1.27%) 310.71
icmp 479916 ( 1.96%) 43153779 ( 0.25%) 89.92
ipip 322 ( 0.00%) 39392 ( 0.00%) 122.34
ipsec 8490 ( 0.03%) 1748436 ( 0.01%) 205.94
ip6 2027 ( 0.01%) 397764 ( 0.00%) 196.23
other 9686 ( 0.04%) 1529953 ( 0.01%) 157.96
frag 37378 ( 0.15%) 34738712 ( 0.20%) 929.39
ip6 27014 ( 0.11%) 5149354 ( 0.03%) 190.62
tcp6 7040 ( 0.03%) 1743132 ( 0.01%) 247.60
http(s) 1282 ( 0.01%) 845250 ( 0.00%) 659.32
http(c) 1301 ( 0.01%) 136937 ( 0.00%) 105.26
smtp 401 ( 0.00%) 124170 ( 0.00%) 309.65
pop3 34 ( 0.00%) 3134 ( 0.00%) 92.18
ssh 967 ( 0.00%) 320130 ( 0.00%) 331.05
dns 4 ( 0.00%) 845 ( 0.00%) 211.25
bgp 915 ( 0.00%) 77423 ( 0.00%) 84.62
other 2136 ( 0.01%) 235243 ( 0.00%) 110.13
udp6 15152 ( 0.06%) 2777857 ( 0.02%) 183.33
dns 15121 ( 0.06%) 2775023 ( 0.02%) 183.52
other 31 ( 0.00%) 2834 ( 0.00%) 91.42
icmp6 4786 ( 0.02%) 620561 ( 0.00%) 129.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 3724 ( 0.00%) 620.67
tcpdump file: 200807151400.dump.gz (604.75 MB)