Traffic Trace Info
DumpFile: 200807211400.dump
FileSize: 1266.28MB
Id: 200807211400
StartTime: Mon Jul 21 14:00:00 2008
EndTime: Mon Jul 21 14:15:00 2008
TotalTime: 899.47 seconds
TotalCapSize: 983.45MB CapLen: 96 bytes
# of packets: 18534940 (11423.08MB)
AvgRate: 106.53Mbps stddev:17.44M
IP flow (unique src/dst pair) Information
# of flows: 552000 (avg. 33.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.8% 1.8% 1.5% 1.5% 1.1% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 308199
Top 10 bandwidth usage (bytes/total in %):
9.9% 5.9% 5.3% 4.9% 4.6% 4.5% 4.1% 3.2% 2.9% 2.7%
# of IPv6 addresses: 794
Top 10 bandwidth usage (bytes/total in %):
26.4% 26.1% 7.6% 5.3% 4.9% 4.9% 4.5% 4.4% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807211400.pktlen.png)
detailed numbers
[ 32- 63]: 4435093
[ 64- 127]: 4916361
[ 128- 255]: 864708
[ 256- 511]: 577190
[ 512- 1023]: 584760
[ 1024- 2047]: 7156828
Protocol Breakdown
![[protocol breakdown chart]](200807211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18534940 (100.00%) 11977962455 (100.00%) 646.24
ip 18513029 ( 99.88%) 11973310203 ( 99.96%) 646.75
tcp 14453214 ( 77.98%) 10608197657 ( 88.56%) 733.97
http(s) 6215437 ( 33.53%) 7992150449 ( 66.72%) 1285.85
http(c) 3872762 ( 20.89%) 629133007 ( 5.25%) 162.45
squid 518445 ( 2.80%) 102940731 ( 0.86%) 198.56
smtp 497720 ( 2.69%) 107073019 ( 0.89%) 215.13
nntp 38 ( 0.00%) 2803 ( 0.00%) 73.76
ftp 127318 ( 0.69%) 78830728 ( 0.66%) 619.16
pop3 54243 ( 0.29%) 38231343 ( 0.32%) 704.82
imap 6140 ( 0.03%) 1288287 ( 0.01%) 209.82
telnet 1748 ( 0.01%) 211416 ( 0.00%) 120.95
ssh 212071 ( 1.14%) 34954047 ( 0.29%) 164.82
dns 46580 ( 0.25%) 25357862 ( 0.21%) 544.39
bgp 225 ( 0.00%) 84116 ( 0.00%) 373.85
napster 54 ( 0.00%) 6899 ( 0.00%) 127.76
realaud 11 ( 0.00%) 2354 ( 0.00%) 214.00
rtsp 376616 ( 2.03%) 330152709 ( 2.76%) 876.63
icecast 17443 ( 0.09%) 2365063 ( 0.02%) 135.59
other 2506360 ( 13.52%) 1265412644 ( 10.56%) 504.88
udp 3411711 ( 18.41%) 1275279608 ( 10.65%) 373.79
dns 979141 ( 5.28%) 172545118 ( 1.44%) 176.22
realaud 32404 ( 0.17%) 11441520 ( 0.10%) 353.09
halflif 12 ( 0.00%) 1629 ( 0.00%) 135.75
starcra 37 ( 0.00%) 7461 ( 0.00%) 201.65
everque 59 ( 0.00%) 8960 ( 0.00%) 151.86
unreal 13 ( 0.00%) 2103 ( 0.00%) 161.77
quake 9 ( 0.00%) 1184 ( 0.00%) 131.56
cuseeme 5 ( 0.00%) 723 ( 0.00%) 144.60
other 2399836 ( 12.95%) 1091239222 ( 9.11%) 454.71
icmp 381319 ( 2.06%) 35106842 ( 0.29%) 92.07
ipip 323 ( 0.00%) 38720 ( 0.00%) 119.88
ipsec 2967 ( 0.02%) 397578 ( 0.00%) 134.00
ip6 1064 ( 0.01%) 127894 ( 0.00%) 120.20
other 262431 ( 1.42%) 54161904 ( 0.45%) 206.39
frag 3795 ( 0.02%) 2916901 ( 0.02%) 768.62
ip6 21911 ( 0.12%) 4652252 ( 0.04%) 212.32
tcp6 6338 ( 0.03%) 1969767 ( 0.02%) 310.79
http(s) 930 ( 0.01%) 1374890 ( 0.01%) 1478.38
http(c) 1355 ( 0.01%) 143734 ( 0.00%) 106.08
smtp 170 ( 0.00%) 58018 ( 0.00%) 341.28
pop3 95 ( 0.00%) 9518 ( 0.00%) 100.19
ssh 156 ( 0.00%) 42676 ( 0.00%) 273.56
bgp 898 ( 0.00%) 74355 ( 0.00%) 82.80
other 2734 ( 0.01%) 266576 ( 0.00%) 97.50
udp6 11020 ( 0.06%) 2072346 ( 0.02%) 188.05
dns 11009 ( 0.06%) 2071136 ( 0.02%) 188.13
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4519 ( 0.02%) 602397 ( 0.01%) 133.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3662 ( 0.00%) 915.50
tcpdump file: 200807211400.dump.gz (450.97 MB)