Traffic Trace Info
DumpFile: 200807181400.dump
FileSize: 1764.26MB
Id: 200807181400
StartTime: Fri Jul 18 14:00:01 2008
EndTime: Fri Jul 18 14:15:00 2008
TotalTime: 899.21 seconds
TotalCapSize: 1380.96MB CapLen: 96 bytes
# of packets: 25119203 (15442.56MB)
AvgRate: 144.07Mbps stddev:18.40M
IP flow (unique src/dst pair) Information
# of flows: 913763 (avg. 27.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.4% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 528544
Top 10 bandwidth usage (bytes/total in %):
6.7% 6.6% 5.8% 5.8% 4.0% 3.1% 2.5% 2.5% 2.3% 2.0%
# of IPv6 addresses: 925
Top 10 bandwidth usage (bytes/total in %):
10.3% 7.2% 6.9% 6.9% 6.8% 6.5% 5.5% 4.9% 4.9% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807181400.pktlen.png)
detailed numbers
[ 32- 63]: 6973521
[ 64- 127]: 5876504
[ 128- 255]: 910920
[ 256- 511]: 897362
[ 512- 1023]: 719610
[ 1024- 2047]: 9741286
Protocol Breakdown
![[protocol breakdown chart]](200807181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25119203 (100.00%) 16192698441 (100.00%) 644.63
ip 25091799 ( 99.89%) 16188097657 ( 99.97%) 645.15
tcp 21985263 ( 87.52%) 15248008582 ( 94.17%) 693.56
http(s) 9229303 ( 36.74%) 11697685081 ( 72.24%) 1267.45
http(c) 6162944 ( 24.53%) 732443504 ( 4.52%) 118.85
squid 1432434 ( 5.70%) 280708794 ( 1.73%) 195.97
smtp 643446 ( 2.56%) 172985010 ( 1.07%) 268.84
nntp 193 ( 0.00%) 115929 ( 0.00%) 600.67
ftp 218972 ( 0.87%) 173634650 ( 1.07%) 792.95
pop3 29415 ( 0.12%) 15384984 ( 0.10%) 523.03
imap 33011 ( 0.13%) 11637161 ( 0.07%) 352.52
telnet 943 ( 0.00%) 90339 ( 0.00%) 95.80
ssh 31750 ( 0.13%) 22298714 ( 0.14%) 702.32
dns 6912 ( 0.03%) 647783 ( 0.00%) 93.72
bgp 209 ( 0.00%) 66714 ( 0.00%) 319.21
napster 15 ( 0.00%) 2451 ( 0.00%) 163.40
realaud 232 ( 0.00%) 125491 ( 0.00%) 540.91
rtsp 27517 ( 0.11%) 26096310 ( 0.16%) 948.37
icecast 1339 ( 0.01%) 804907 ( 0.00%) 601.13
hotline 14 ( 0.00%) 1312 ( 0.00%) 93.71
other 4166613 ( 16.59%) 2113279388 ( 13.05%) 507.19
udp 2367919 ( 9.43%) 863819900 ( 5.33%) 364.80
dns 1004311 ( 4.00%) 183716017 ( 1.13%) 182.93
rip 10 ( 0.00%) 1168 ( 0.00%) 116.80
realaud 45903 ( 0.18%) 32044238 ( 0.20%) 698.09
halflif 28 ( 0.00%) 4846 ( 0.00%) 173.07
starcra 45 ( 0.00%) 8465 ( 0.00%) 188.11
everque 101 ( 0.00%) 19994 ( 0.00%) 197.96
unreal 23 ( 0.00%) 4258 ( 0.00%) 185.13
quake 15 ( 0.00%) 2115 ( 0.00%) 141.00
cuseeme 451 ( 0.00%) 36704 ( 0.00%) 81.38
other 1316821 ( 5.24%) 647955289 ( 4.00%) 492.06
icmp 609207 ( 2.43%) 50311565 ( 0.31%) 82.59
ipip 302 ( 0.00%) 36484 ( 0.00%) 120.81
ipsec 8219 ( 0.03%) 1641448 ( 0.01%) 199.71
ip6 1241 ( 0.00%) 174073 ( 0.00%) 140.27
other 119648 ( 0.48%) 24105605 ( 0.15%) 201.47
frag 52719 ( 0.21%) 46783804 ( 0.29%) 887.42
ip6 27404 ( 0.11%) 4600784 ( 0.03%) 167.89
tcp6 8323 ( 0.03%) 1394551 ( 0.01%) 167.55
http(s) 265 ( 0.00%) 361615 ( 0.00%) 1364.58
http(c) 1352 ( 0.01%) 140999 ( 0.00%) 104.29
squid 5 ( 0.00%) 467 ( 0.00%) 93.40
smtp 367 ( 0.00%) 70220 ( 0.00%) 191.34
pop3 62 ( 0.00%) 6854 ( 0.00%) 110.55
ssh 2720 ( 0.01%) 445152 ( 0.00%) 163.66
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 901 ( 0.00%) 74435 ( 0.00%) 82.61
other 2644 ( 0.01%) 294174 ( 0.00%) 111.26
udp6 13328 ( 0.05%) 2429453 ( 0.02%) 182.28
dns 13298 ( 0.05%) 2426151 ( 0.01%) 182.44
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 29 ( 0.00%) 3190 ( 0.00%) 110.00
icmp6 5723 ( 0.02%) 772700 ( 0.00%) 135.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200807181400.dump.gz (628.25 MB)