Traffic Trace Info
DumpFile: 200807241400.dump
FileSize: 1469.47MB
Id: 200807241400
StartTime: Thu Jul 24 14:00:01 2008
EndTime: Thu Jul 24 14:15:01 2008
TotalTime: 899.87 seconds
TotalCapSize: 1150.27MB CapLen: 96 bytes
# of packets: 20918133 (14051.27MB)
AvgRate: 130.97Mbps stddev:20.71M
IP flow (unique src/dst pair) Information
# of flows: 796693 (avg. 26.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.2% 1.2% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 417454
Top 10 bandwidth usage (bytes/total in %):
6.3% 4.5% 4.4% 4.1% 2.9% 2.8% 2.8% 2.6% 2.4% 2.0%
# of IPv6 addresses: 937
Top 10 bandwidth usage (bytes/total in %):
56.6% 49.5% 7.5% 7.0% 6.8% 3.7% 3.3% 2.6% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807241400.pktlen.png)
detailed numbers
[ 32- 63]: 5098412
[ 64- 127]: 4857831
[ 128- 255]: 776898
[ 256- 511]: 604395
[ 512- 1023]: 598706
[ 1024- 2047]: 8981891
Protocol Breakdown
![[protocol breakdown chart]](200807241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20918133 (100.00%) 14733827883 (100.00%) 704.36
ip 20876199 ( 99.80%) 14721586310 ( 99.92%) 705.19
tcp 18606154 ( 88.95%) 14275710327 ( 96.89%) 767.26
http(s) 7861540 ( 37.58%) 10064337750 ( 68.31%) 1280.20
http(c) 5260927 ( 25.15%) 650463169 ( 4.41%) 123.64
squid 325706 ( 1.56%) 163730658 ( 1.11%) 502.69
smtp 682215 ( 3.26%) 158423832 ( 1.08%) 232.22
nntp 15 ( 0.00%) 1312 ( 0.00%) 87.47
ftp 230844 ( 1.10%) 167660897 ( 1.14%) 726.30
pop3 34749 ( 0.17%) 19319161 ( 0.13%) 555.96
imap 11455 ( 0.05%) 5868609 ( 0.04%) 512.32
telnet 3650 ( 0.02%) 520454 ( 0.00%) 142.59
ssh 105978 ( 0.51%) 12392805 ( 0.08%) 116.94
dns 3345 ( 0.02%) 342083 ( 0.00%) 102.27
bgp 192 ( 0.00%) 58977 ( 0.00%) 307.17
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 12 ( 0.00%) 1224 ( 0.00%) 102.00
rtsp 259859 ( 1.24%) 244673027 ( 1.66%) 941.56
icecast 7521 ( 0.04%) 7279708 ( 0.05%) 967.92
hotline 16 ( 0.00%) 2197 ( 0.00%) 137.31
other 3818125 ( 18.25%) 2780634152 ( 18.87%) 728.27
udp 1721162 ( 8.23%) 380309428 ( 2.58%) 220.96
dns 1137434 ( 5.44%) 203487377 ( 1.38%) 178.90
realaud 7158 ( 0.03%) 2746721 ( 0.02%) 383.73
halflif 27 ( 0.00%) 3470 ( 0.00%) 128.52
starcra 50 ( 0.00%) 8676 ( 0.00%) 173.52
everque 169 ( 0.00%) 17491 ( 0.00%) 103.50
unreal 23 ( 0.00%) 4359 ( 0.00%) 189.52
quake 27 ( 0.00%) 3566 ( 0.00%) 132.07
cuseeme 4 ( 0.00%) 616 ( 0.00%) 154.00
other 576213 ( 2.75%) 174020346 ( 1.18%) 302.01
icmp 391248 ( 1.87%) 36011637 ( 0.24%) 92.04
ipip 304 ( 0.00%) 36752 ( 0.00%) 120.89
ipsec 7518 ( 0.04%) 1724218 ( 0.01%) 229.35
ip6 1089 ( 0.01%) 159421 ( 0.00%) 146.39
other 148724 ( 0.71%) 27634527 ( 0.19%) 185.81
frag 1954 ( 0.01%) 1622534 ( 0.01%) 830.37
ip6 41934 ( 0.20%) 12241573 ( 0.08%) 291.92
tcp6 21012 ( 0.10%) 8657021 ( 0.06%) 412.00
http(s) 134 ( 0.00%) 81943 ( 0.00%) 611.51
http(c) 1775 ( 0.01%) 183412 ( 0.00%) 103.33
smtp 367 ( 0.00%) 175677 ( 0.00%) 478.68
ftp 56 ( 0.00%) 6143 ( 0.00%) 109.70
pop3 47 ( 0.00%) 5411 ( 0.00%) 115.13
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 10079 ( 0.05%) 970678 ( 0.01%) 96.31
bgp 910 ( 0.00%) 77940 ( 0.00%) 85.65
other 7642 ( 0.04%) 7155592 ( 0.05%) 936.35
udp6 15594 ( 0.07%) 2799751 ( 0.02%) 179.54
dns 15581 ( 0.07%) 2798321 ( 0.02%) 179.60
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 5288 ( 0.03%) 771990 ( 0.01%) 145.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8731 ( 0.00%) 873.10
tcpdump file: 200807241400.dump.gz (521.06 MB)