Traffic Trace Info
DumpFile: 200807171400.dump
FileSize: 1809.29MB
Id: 200807171400
StartTime: Thu Jul 17 14:00:01 2008
EndTime: Thu Jul 17 14:15:01 2008
TotalTime: 900.09 seconds
TotalCapSize: 1413.85MB CapLen: 96 bytes
# of packets: 25915319 (18109.16MB)
AvgRate: 168.75Mbps stddev:42.32M
IP flow (unique src/dst pair) Information
# of flows: 949027 (avg. 27.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.7% 1.6% 1.5% 1.2% 1.1% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 531353
Top 10 bandwidth usage (bytes/total in %):
8.7% 6.8% 6.5% 6.4% 4.3% 3.9% 3.1% 2.9% 2.8% 2.4%
# of IPv6 addresses: 913
Top 10 bandwidth usage (bytes/total in %):
58.1% 51.9% 6.0% 4.3% 4.2% 3.6% 3.3% 2.7% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807171400.pktlen.png)
detailed numbers
[ 32- 63]: 6574565
[ 64- 127]: 5118506
[ 128- 255]: 1153943
[ 256- 511]: 723949
[ 512- 1023]: 673496
[ 1024- 2047]: 11670860
Protocol Breakdown
![[protocol breakdown chart]](200807171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25915319 (100.00%) 18988825420 (100.00%) 732.73
ip 25879399 ( 99.86%) 18977788052 ( 99.94%) 733.32
tcp 23430529 ( 90.41%) 18461199456 ( 97.22%) 787.91
http(s) 10957853 ( 42.28%) 14254579372 ( 75.07%) 1300.86
http(c) 5986460 ( 23.10%) 648446017 ( 3.41%) 108.32
squid 539963 ( 2.08%) 255948671 ( 1.35%) 474.01
smtp 737446 ( 2.85%) 263081906 ( 1.39%) 356.75
nntp 60 ( 0.00%) 4921 ( 0.00%) 82.02
ftp 92684 ( 0.36%) 21119037 ( 0.11%) 227.86
pop3 28969 ( 0.11%) 17576721 ( 0.09%) 606.74
imap 12603 ( 0.05%) 3488949 ( 0.02%) 276.83
telnet 1306 ( 0.01%) 172404 ( 0.00%) 132.01
ssh 110169 ( 0.43%) 60432502 ( 0.32%) 548.54
dns 7971 ( 0.03%) 1688056 ( 0.01%) 211.77
bgp 191 ( 0.00%) 53046 ( 0.00%) 277.73
realaud 8 ( 0.00%) 1249 ( 0.00%) 156.12
rtsp 218911 ( 0.84%) 193075547 ( 1.02%) 881.98
icecast 28076 ( 0.11%) 32021111 ( 0.17%) 1140.52
hotline 7 ( 0.00%) 1051 ( 0.00%) 150.14
other 4707850 ( 18.17%) 2709508776 ( 14.27%) 575.53
udp 1829308 ( 7.06%) 449383732 ( 2.37%) 245.66
dns 1143660 ( 4.41%) 214563342 ( 1.13%) 187.61
realaud 87257 ( 0.34%) 84209468 ( 0.44%) 965.07
halflif 26 ( 0.00%) 3883 ( 0.00%) 149.35
starcra 37 ( 0.00%) 7520 ( 0.00%) 203.24
everque 64 ( 0.00%) 10875 ( 0.00%) 169.92
unreal 32 ( 0.00%) 10120 ( 0.00%) 316.25
quake 11 ( 0.00%) 1015 ( 0.00%) 92.27
cuseeme 5 ( 0.00%) 537 ( 0.00%) 107.40
other 598174 ( 2.31%) 150556383 ( 0.79%) 251.69
icmp 493627 ( 1.90%) 43137357 ( 0.23%) 87.39
ipip 318 ( 0.00%) 38816 ( 0.00%) 122.06
ipsec 4919 ( 0.02%) 799506 ( 0.00%) 162.53
ip6 2172 ( 0.01%) 394321 ( 0.00%) 181.55
other 118526 ( 0.46%) 22834864 ( 0.12%) 192.66
frag 45690 ( 0.18%) 42539388 ( 0.22%) 931.04
ip6 35920 ( 0.14%) 11037368 ( 0.06%) 307.28
tcp6 16386 ( 0.06%) 7738597 ( 0.04%) 472.27
http(s) 615 ( 0.00%) 726646 ( 0.00%) 1181.54
http(c) 3586 ( 0.01%) 343357 ( 0.00%) 95.75
smtp 416 ( 0.00%) 112829 ( 0.00%) 271.22
ftp 6804 ( 0.03%) 5754871 ( 0.03%) 845.81
pop3 63 ( 0.00%) 7063 ( 0.00%) 112.11
ssh 1344 ( 0.01%) 469328 ( 0.00%) 349.20
bgp 900 ( 0.00%) 75127 ( 0.00%) 83.47
other 2658 ( 0.01%) 249376 ( 0.00%) 93.82
udp6 14585 ( 0.06%) 2630386 ( 0.01%) 180.35
dns 14534 ( 0.06%) 2624206 ( 0.01%) 180.56
other 51 ( 0.00%) 6180 ( 0.00%) 121.18
icmp6 4913 ( 0.02%) 663181 ( 0.00%) 134.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 1124 ( 0.00%) 187.33
tcpdump file: 200807171400.dump.gz (638.45 MB)