Traffic Trace Info
DumpFile: 200807231400.dump
FileSize: 1568.58MB
Id: 200807231400
StartTime: Wed Jul 23 14:00:01 2008
EndTime: Wed Jul 23 14:15:00 2008
TotalTime: 899.25 seconds
TotalCapSize: 1226.12MB CapLen: 96 bytes
# of packets: 22443149 (14749.78MB)
AvgRate: 137.62Mbps stddev:21.89M
IP flow (unique src/dst pair) Information
# of flows: 658794 (avg. 34.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.7% 1.6% 1.5% 1.0% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 354743
Top 10 bandwidth usage (bytes/total in %):
6.3% 6.2% 5.6% 3.5% 2.9% 2.8% 2.8% 2.4% 2.1% 1.8%
# of IPv6 addresses: 964
Top 10 bandwidth usage (bytes/total in %):
14.6% 12.3% 11.9% 7.8% 7.4% 5.6% 5.5% 4.5% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807231400.pktlen.png)
detailed numbers
[ 32- 63]: 4809412
[ 64- 127]: 5760464
[ 128- 255]: 1067198
[ 256- 511]: 690600
[ 512- 1023]: 748884
[ 1024- 2047]: 9366591
Protocol Breakdown
![[protocol breakdown chart]](200807231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22443149 (100.00%) 15466260774 (100.00%) 689.13
ip 22411589 ( 99.86%) 15460911520 ( 99.97%) 689.86
tcp 18925804 ( 84.33%) 14559316910 ( 94.14%) 769.28
http(s) 8525385 ( 37.99%) 10976250380 ( 70.97%) 1287.48
http(c) 5463606 ( 24.34%) 588642132 ( 3.81%) 107.74
squid 527149 ( 2.35%) 319197258 ( 2.06%) 605.52
smtp 704002 ( 3.14%) 263856713 ( 1.71%) 374.80
nntp 46 ( 0.00%) 3619 ( 0.00%) 78.67
ftp 82919 ( 0.37%) 34814429 ( 0.23%) 419.86
pop3 43447 ( 0.19%) 23687468 ( 0.15%) 545.20
imap 16272 ( 0.07%) 8477178 ( 0.05%) 520.97
telnet 2239 ( 0.01%) 261327 ( 0.00%) 116.72
ssh 322604 ( 1.44%) 50346975 ( 0.33%) 156.06
dns 2883 ( 0.01%) 424546 ( 0.00%) 147.26
bgp 229 ( 0.00%) 72275 ( 0.00%) 315.61
napster 25 ( 0.00%) 2830 ( 0.00%) 113.20
realaud 72 ( 0.00%) 9279 ( 0.00%) 128.88
rtsp 283142 ( 1.26%) 283996275 ( 1.84%) 1003.02
icecast 945 ( 0.00%) 112785 ( 0.00%) 119.35
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2950829 ( 13.15%) 2009160841 ( 12.99%) 680.88
udp 2568147 ( 11.44%) 779342496 ( 5.04%) 303.46
dns 1237681 ( 5.51%) 214045684 ( 1.38%) 172.94
realaud 10914 ( 0.05%) 5167159 ( 0.03%) 473.44
halflif 165 ( 0.00%) 12602 ( 0.00%) 76.38
starcra 34 ( 0.00%) 6054 ( 0.00%) 178.06
everque 53 ( 0.00%) 8332 ( 0.00%) 157.21
unreal 16 ( 0.00%) 2669 ( 0.00%) 166.81
quake 16 ( 0.00%) 1904 ( 0.00%) 119.00
cuseeme 11 ( 0.00%) 1122 ( 0.00%) 102.00
other 1319059 ( 5.88%) 559880298 ( 3.62%) 424.45
icmp 347409 ( 1.55%) 32833836 ( 0.21%) 94.51
ipip 300 ( 0.00%) 37396 ( 0.00%) 124.65
ipsec 3044 ( 0.01%) 432464 ( 0.00%) 142.07
ip6 1027 ( 0.00%) 122767 ( 0.00%) 119.54
other 565858 ( 2.52%) 88825651 ( 0.57%) 156.98
frag 2350 ( 0.01%) 2131368 ( 0.01%) 906.97
ip6 31560 ( 0.14%) 5349254 ( 0.03%) 169.49
tcp6 7166 ( 0.03%) 1427002 ( 0.01%) 199.14
http(s) 796 ( 0.00%) 702434 ( 0.00%) 882.45
http(c) 1479 ( 0.01%) 155249 ( 0.00%) 104.97
squid 9 ( 0.00%) 822 ( 0.00%) 91.33
smtp 366 ( 0.00%) 142255 ( 0.00%) 388.67
pop3 85 ( 0.00%) 8815 ( 0.00%) 103.71
ssh 135 ( 0.00%) 16042 ( 0.00%) 118.83
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 904 ( 0.00%) 75278 ( 0.00%) 83.27
other 3385 ( 0.02%) 325472 ( 0.00%) 96.15
udp6 19187 ( 0.09%) 3201257 ( 0.02%) 166.85
dns 19172 ( 0.09%) 3199598 ( 0.02%) 166.89
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 5176 ( 0.02%) 716737 ( 0.00%) 138.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 178 ( 0.00%) 178.00
tcpdump file: 200807231400.dump.gz (556.86 MB)