Traffic Trace Info
DumpFile: 200807161400.dump
FileSize: 1973.76MB
Id: 200807161400
StartTime: Wed Jul 16 14:00:01 2008
EndTime: Wed Jul 16 14:15:01 2008
TotalTime: 900.18 seconds
TotalCapSize: 1545.35MB CapLen: 96 bytes
# of packets: 28075608 (18756.09MB)
AvgRate: 174.81Mbps stddev:24.24M
IP flow (unique src/dst pair) Information
# of flows: 1192628 (avg. 23.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.3% 1.3% 1.2% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 641535
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.7% 6.1% 6.1% 5.6% 5.4% 5.0% 4.1% 2.3% 2.3%
# of IPv6 addresses: 964
Top 10 bandwidth usage (bytes/total in %):
11.2% 11.1% 11.0% 6.9% 6.6% 5.6% 5.5% 5.4% 5.4% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807161400.pktlen.png)
detailed numbers
[ 32- 63]: 6184692
[ 64- 127]: 7018086
[ 128- 255]: 1188200
[ 256- 511]: 793245
[ 512- 1023]: 878127
[ 1024- 2047]: 12013258
Protocol Breakdown
![[protocol breakdown chart]](200807161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28075608 (100.00%) 19667186330 (100.00%) 700.51
ip 28049090 ( 99.91%) 19661308137 ( 99.97%) 700.96
tcp 24056197 ( 85.68%) 18518705808 ( 94.16%) 769.81
http(s) 11027349 ( 39.28%) 14189658443 ( 72.15%) 1286.77
http(c) 6672926 ( 23.77%) 753639375 ( 3.83%) 112.94
squid 652720 ( 2.32%) 393540146 ( 2.00%) 602.92
smtp 819501 ( 2.92%) 187226080 ( 0.95%) 228.46
nntp 57 ( 0.00%) 4718 ( 0.00%) 82.77
ftp 265575 ( 0.95%) 182510312 ( 0.93%) 687.23
pop3 29536 ( 0.11%) 15110866 ( 0.08%) 511.61
imap 6736 ( 0.02%) 2252079 ( 0.01%) 334.33
telnet 7369 ( 0.03%) 675356 ( 0.00%) 91.65
ssh 145329 ( 0.52%) 22373526 ( 0.11%) 153.95
dns 6687 ( 0.02%) 1236938 ( 0.01%) 184.98
bgp 219 ( 0.00%) 69572 ( 0.00%) 317.68
napster 14 ( 0.00%) 1519 ( 0.00%) 108.50
realaud 278 ( 0.00%) 31826 ( 0.00%) 114.48
rtsp 261956 ( 0.93%) 217251515 ( 1.10%) 829.34
icecast 4314 ( 0.02%) 415173 ( 0.00%) 96.24
hotline 71 ( 0.00%) 7907 ( 0.00%) 111.37
other 4155559 ( 14.80%) 2552700397 ( 12.98%) 614.29
udp 2900458 ( 10.33%) 1026435125 ( 5.22%) 353.89
dns 1296101 ( 4.62%) 223544239 ( 1.14%) 172.47
realaud 121393 ( 0.43%) 85915752 ( 0.44%) 707.75
halflif 37 ( 0.00%) 5095 ( 0.00%) 137.70
starcra 44 ( 0.00%) 7788 ( 0.00%) 177.00
everque 38 ( 0.00%) 6615 ( 0.00%) 174.08
unreal 8 ( 0.00%) 746 ( 0.00%) 93.25
quake 17 ( 0.00%) 1657 ( 0.00%) 97.47
cuseeme 5 ( 0.00%) 495 ( 0.00%) 99.00
other 1482760 ( 5.28%) 716914810 ( 3.65%) 483.50
icmp 613182 ( 2.18%) 50996481 ( 0.26%) 83.17
ipip 319 ( 0.00%) 39704 ( 0.00%) 124.46
ipsec 3782 ( 0.01%) 530740 ( 0.00%) 140.33
ip6 2196 ( 0.01%) 410166 ( 0.00%) 186.78
other 472956 ( 1.68%) 64190113 ( 0.33%) 135.72
frag 41925 ( 0.15%) 39614730 ( 0.20%) 944.90
ip6 26518 ( 0.09%) 5878193 ( 0.03%) 221.67
tcp6 6715 ( 0.02%) 2564172 ( 0.01%) 381.86
http(s) 930 ( 0.00%) 1273664 ( 0.01%) 1369.53
http(c) 1469 ( 0.01%) 155632 ( 0.00%) 105.94
smtp 407 ( 0.00%) 164549 ( 0.00%) 404.30
pop3 58 ( 0.00%) 6484 ( 0.00%) 111.79
ssh 686 ( 0.00%) 660700 ( 0.00%) 963.12
bgp 895 ( 0.00%) 75296 ( 0.00%) 84.13
other 2270 ( 0.01%) 227847 ( 0.00%) 100.37
udp6 15099 ( 0.05%) 2700735 ( 0.01%) 178.87
dns 15024 ( 0.05%) 2691676 ( 0.01%) 179.16
other 75 ( 0.00%) 9059 ( 0.00%) 120.79
icmp6 4664 ( 0.02%) 603828 ( 0.00%) 129.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 5378 ( 0.00%) 537.80
tcpdump file: 200807161400.dump.gz (703.02 MB)