Traffic Trace Info
DumpFile: 200807291400.dump
FileSize: 1642.99MB
Id: 200807291400
StartTime: Tue Jul 29 14:00:01 2008
EndTime: Tue Jul 29 14:15:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 1281.54MB CapLen: 96 bytes
# of packets: 23687103 (16706.84MB)
AvgRate: 155.77Mbps stddev:26.59M
IP flow (unique src/dst pair) Information
# of flows: 695040 (avg. 34.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.8% 2.9% 2.7% 1.6% 1.5% 1.3% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 380129
Top 10 bandwidth usage (bytes/total in %):
8.4% 5.9% 5.9% 4.4% 3.9% 3.9% 3.8% 3.6% 3.0% 3.0%
# of IPv6 addresses: 875
Top 10 bandwidth usage (bytes/total in %):
13.0% 10.0% 9.0% 7.7% 4.6% 4.5% 4.3% 4.3% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807291400.pktlen.png)
detailed numbers
[ 32- 63]: 5451936
[ 64- 127]: 5257251
[ 128- 255]: 967708
[ 256- 511]: 550791
[ 512- 1023]: 563709
[ 1024- 2047]: 10895708
Protocol Breakdown
![[protocol breakdown chart]](200807291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23687103 (100.00%) 17518396448 (100.00%) 739.58
ip 23651400 ( 99.85%) 17513381308 ( 99.97%) 740.48
tcp 20289223 ( 85.66%) 16633626766 ( 94.95%) 819.83
http(s) 8244956 ( 34.81%) 10679345337 ( 60.96%) 1295.26
http(c) 5210586 ( 22.00%) 848571987 ( 4.84%) 162.86
squid 365057 ( 1.54%) 168330894 ( 0.96%) 461.11
smtp 711659 ( 3.00%) 177929603 ( 1.02%) 250.02
nntp 249 ( 0.00%) 24649 ( 0.00%) 98.99
ftp 242520 ( 1.02%) 175552081 ( 1.00%) 723.87
pop3 31645 ( 0.13%) 14240292 ( 0.08%) 450.00
imap 7061 ( 0.03%) 1556415 ( 0.01%) 220.42
telnet 6503 ( 0.03%) 634056 ( 0.00%) 97.50
ssh 1128165 ( 4.76%) 1036695847 ( 5.92%) 918.92
dns 18520 ( 0.08%) 2017560 ( 0.01%) 108.94
bgp 271 ( 0.00%) 116960 ( 0.00%) 431.59
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 127 ( 0.00%) 15670 ( 0.00%) 123.39
rtsp 402032 ( 1.70%) 415432976 ( 2.37%) 1033.33
icecast 27444 ( 0.12%) 26746345 ( 0.15%) 974.58
hotline 6 ( 0.00%) 551 ( 0.00%) 91.83
other 3892396 ( 16.43%) 3086413977 ( 17.62%) 792.93
udp 2749244 ( 11.61%) 810621513 ( 4.63%) 294.85
dns 1406427 ( 5.94%) 254395333 ( 1.45%) 180.88
realaud 18106 ( 0.08%) 12943649 ( 0.07%) 714.88
halflif 10 ( 0.00%) 2171 ( 0.00%) 217.10
starcra 25 ( 0.00%) 3546 ( 0.00%) 141.84
everque 65 ( 0.00%) 9583 ( 0.00%) 147.43
unreal 16 ( 0.00%) 2592 ( 0.00%) 162.00
quake 26 ( 0.00%) 2614 ( 0.00%) 100.54
cuseeme 2 ( 0.00%) 165 ( 0.00%) 82.50
other 1323591 ( 5.59%) 543178317 ( 3.10%) 410.38
icmp 489200 ( 2.07%) 44939608 ( 0.26%) 91.86
ipip 328 ( 0.00%) 40820 ( 0.00%) 124.45
ipsec 3151 ( 0.01%) 443466 ( 0.00%) 140.74
ip6 882 ( 0.00%) 106779 ( 0.00%) 121.06
other 119372 ( 0.50%) 23602356 ( 0.13%) 197.72
frag 120632 ( 0.51%) 98214948 ( 0.56%) 814.17
ip6 35703 ( 0.15%) 5015140 ( 0.03%) 140.47
tcp6 16152 ( 0.07%) 1914689 ( 0.01%) 118.54
http(s) 434 ( 0.00%) 199113 ( 0.00%) 458.79
http(c) 8321 ( 0.04%) 764516 ( 0.00%) 91.88
smtp 773 ( 0.00%) 330803 ( 0.00%) 427.95
pop3 81 ( 0.00%) 8079 ( 0.00%) 99.74
imap 63 ( 0.00%) 18609 ( 0.00%) 295.38
ssh 2551 ( 0.01%) 225750 ( 0.00%) 88.49
bgp 1336 ( 0.01%) 109224 ( 0.00%) 81.75
other 2593 ( 0.01%) 258595 ( 0.00%) 99.73
udp6 13105 ( 0.06%) 2250221 ( 0.01%) 171.71
dns 13079 ( 0.06%) 2247048 ( 0.01%) 171.81
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 25 ( 0.00%) 3065 ( 0.00%) 122.60
icmp6 6416 ( 0.03%) 846150 ( 0.00%) 131.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200807291400.dump.gz (569.23 MB)