Traffic Trace Info
DumpFile: 200807261400.dump
FileSize: 1059.52MB
Id: 200807261400
StartTime: Sat Jul 26 14:00:00 2008
EndTime: Sat Jul 26 14:15:01 2008
TotalTime: 900.44 seconds
TotalCapSize: 829.12MB CapLen: 96 bytes
# of packets: 15098896 (10678.85MB)
AvgRate: 99.49Mbps stddev:12.89M
IP flow (unique src/dst pair) Information
# of flows: 487849 (avg. 30.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.5% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 272692
Top 10 bandwidth usage (bytes/total in %):
10.6% 4.9% 4.9% 4.6% 4.3% 3.5% 3.4% 3.2% 2.6% 2.5%
# of IPv6 addresses: 814
Top 10 bandwidth usage (bytes/total in %):
45.3% 45.3% 5.6% 5.6% 3.8% 3.8% 3.3% 3.2% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807261400.pktlen.png)
detailed numbers
[ 32- 63]: 3167766
[ 64- 127]: 3593599
[ 128- 255]: 646965
[ 256- 511]: 377747
[ 512- 1023]: 423780
[ 1024- 2047]: 6889039
Protocol Breakdown
![[protocol breakdown chart]](200807261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15098896 (100.00%) 11197584557 (100.00%) 741.62
ip 15073183 ( 99.83%) 11191583869 ( 99.95%) 742.48
tcp 12923774 ( 85.59%) 10747545873 ( 95.98%) 831.61
http(s) 6381402 ( 42.26%) 8624394507 ( 77.02%) 1351.49
http(c) 3623115 ( 24.00%) 343767449 ( 3.07%) 94.88
squid 150677 ( 1.00%) 53946009 ( 0.48%) 358.02
smtp 494079 ( 3.27%) 88960640 ( 0.79%) 180.05
nntp 82 ( 0.00%) 7693 ( 0.00%) 93.82
ftp 257745 ( 1.71%) 238214586 ( 2.13%) 924.23
pop3 22748 ( 0.15%) 17781116 ( 0.16%) 781.66
imap 8868 ( 0.06%) 3337537 ( 0.03%) 376.36
telnet 1714 ( 0.01%) 128293 ( 0.00%) 74.85
ssh 260908 ( 1.73%) 224693618 ( 2.01%) 861.20
dns 10086 ( 0.07%) 7071654 ( 0.06%) 701.14
bgp 190 ( 0.00%) 50820 ( 0.00%) 267.47
napster 27 ( 0.00%) 2391 ( 0.00%) 88.56
realaud 10 ( 0.00%) 1404 ( 0.00%) 140.40
rtsp 104954 ( 0.70%) 123457102 ( 1.10%) 1176.30
icecast 360 ( 0.00%) 28684 ( 0.00%) 79.68
other 1606793 ( 10.64%) 1021701410 ( 9.12%) 635.86
udp 1404417 ( 9.30%) 362703345 ( 3.24%) 258.26
dns 933453 ( 6.18%) 166647005 ( 1.49%) 178.53
realaud 31590 ( 0.21%) 11488122 ( 0.10%) 363.66
halflif 16 ( 0.00%) 2461 ( 0.00%) 153.81
starcra 36 ( 0.00%) 7034 ( 0.00%) 195.39
everque 48 ( 0.00%) 7803 ( 0.00%) 162.56
unreal 11 ( 0.00%) 1581 ( 0.00%) 143.73
quake 921 ( 0.01%) 57311 ( 0.00%) 62.23
cuseeme 4 ( 0.00%) 348 ( 0.00%) 87.00
other 438320 ( 2.90%) 184476052 ( 1.65%) 420.87
icmp 382047 ( 2.53%) 33618202 ( 0.30%) 87.99
ipip 327 ( 0.00%) 41146 ( 0.00%) 125.83
ipsec 3365 ( 0.02%) 474342 ( 0.00%) 140.96
ip6 998 ( 0.01%) 121647 ( 0.00%) 121.89
other 358255 ( 2.37%) 47079314 ( 0.42%) 131.41
frag 1435 ( 0.01%) 1164150 ( 0.01%) 811.25
ip6 25713 ( 0.17%) 6000688 ( 0.05%) 233.37
tcp6 10049 ( 0.07%) 3472898 ( 0.03%) 345.60
http(s) 119 ( 0.00%) 109386 ( 0.00%) 919.21
http(c) 2134 ( 0.01%) 206439 ( 0.00%) 96.74
smtp 329 ( 0.00%) 92183 ( 0.00%) 280.19
ssh 3859 ( 0.03%) 2732498 ( 0.02%) 708.08
bgp 1276 ( 0.01%) 103808 ( 0.00%) 81.35
other 2332 ( 0.02%) 228584 ( 0.00%) 98.02
udp6 10755 ( 0.07%) 1863395 ( 0.02%) 173.26
dns 10744 ( 0.07%) 1862185 ( 0.02%) 173.32
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4879 ( 0.03%) 660315 ( 0.01%) 135.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200807261400.dump.gz (366.18 MB)