Traffic Trace Info
DumpFile: 200807301400.dump
FileSize: 1284.08MB
Id: 200807301400
StartTime: Wed Jul 30 14:00:00 2008
EndTime: Wed Jul 30 14:15:00 2008
TotalTime: 899.67 seconds
TotalCapSize: 1006.40MB CapLen: 96 bytes
# of packets: 18197139 (11272.71MB)
AvgRate: 105.11Mbps stddev:17.90M
IP flow (unique src/dst pair) Information
# of flows: 722486 (avg. 25.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.0% 1.6% 1.4% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 413410
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.3% 6.5% 4.3% 3.9% 3.3% 3.3% 2.4% 2.1% 2.0%
# of IPv6 addresses: 895
Top 10 bandwidth usage (bytes/total in %):
30.9% 25.3% 10.5% 8.2% 7.3% 4.4% 4.1% 3.9% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807301400.pktlen.png)
detailed numbers
[ 32- 63]: 3921804
[ 64- 127]: 5178476
[ 128- 255]: 904584
[ 256- 511]: 488994
[ 512- 1023]: 647824
[ 1024- 2047]: 7055457
Protocol Breakdown
![[protocol breakdown chart]](200807301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18197139 (100.00%) 11820294327 (100.00%) 649.57
ip 18161887 ( 99.81%) 11814131203 ( 99.95%) 650.49
tcp 15593536 ( 85.69%) 11194685516 ( 94.71%) 717.91
http(s) 6279070 ( 34.51%) 8161609077 ( 69.05%) 1299.81
http(c) 4436319 ( 24.38%) 646223857 ( 5.47%) 145.67
squid 305229 ( 1.68%) 131003436 ( 1.11%) 429.20
smtp 707303 ( 3.89%) 132851932 ( 1.12%) 187.83
nntp 62 ( 0.00%) 6251 ( 0.00%) 100.82
ftp 117037 ( 0.64%) 70084746 ( 0.59%) 598.83
pop3 32329 ( 0.18%) 19416753 ( 0.16%) 600.60
imap 14503 ( 0.08%) 3725495 ( 0.03%) 256.88
telnet 23387 ( 0.13%) 6585845 ( 0.06%) 281.60
ssh 1475831 ( 8.11%) 503217137 ( 4.26%) 340.97
dns 14645 ( 0.08%) 3808162 ( 0.03%) 260.03
bgp 209 ( 0.00%) 72685 ( 0.00%) 347.78
napster 76 ( 0.00%) 39520 ( 0.00%) 520.00
realaud 12 ( 0.00%) 1320 ( 0.00%) 110.00
rtsp 194799 ( 1.07%) 219245410 ( 1.85%) 1125.50
icecast 471 ( 0.00%) 36670 ( 0.00%) 77.86
hotline 18 ( 0.00%) 1686 ( 0.00%) 93.67
other 1992233 ( 10.95%) 1296755354 ( 10.97%) 650.91
udp 2059646 ( 11.32%) 565239896 ( 4.78%) 274.44
dns 1247072 ( 6.85%) 228470415 ( 1.93%) 183.21
realaud 6189 ( 0.03%) 2687108 ( 0.02%) 434.17
halflif 16 ( 0.00%) 2121 ( 0.00%) 132.56
starcra 61 ( 0.00%) 10108 ( 0.00%) 165.70
everque 990 ( 0.01%) 181404 ( 0.00%) 183.24
unreal 32 ( 0.00%) 7161 ( 0.00%) 223.78
quake 20 ( 0.00%) 1998 ( 0.00%) 99.90
cuseeme 2 ( 0.00%) 153 ( 0.00%) 76.50
other 805158 ( 4.42%) 333855342 ( 2.82%) 414.65
icmp 410664 ( 2.26%) 37641591 ( 0.32%) 91.66
ipip 313 ( 0.00%) 38026 ( 0.00%) 121.49
ipsec 3015 ( 0.02%) 422042 ( 0.00%) 139.98
ip6 891 ( 0.00%) 109405 ( 0.00%) 122.79
other 93822 ( 0.52%) 15994727 ( 0.14%) 170.48
frag 57952 ( 0.32%) 49578318 ( 0.42%) 855.51
ip6 35250 ( 0.19%) 6163004 ( 0.05%) 174.84
tcp6 13159 ( 0.07%) 1271454 ( 0.01%) 96.62
http(s) 589 ( 0.00%) 76194 ( 0.00%) 129.36
http(c) 7866 ( 0.04%) 712414 ( 0.01%) 90.57
smtp 177 ( 0.00%) 33528 ( 0.00%) 189.42
imap 40 ( 0.00%) 9096 ( 0.00%) 227.40
ssh 132 ( 0.00%) 30376 ( 0.00%) 230.12
bgp 1326 ( 0.01%) 112650 ( 0.00%) 84.95
other 3029 ( 0.02%) 297196 ( 0.00%) 98.12
udp6 15054 ( 0.08%) 2576581 ( 0.02%) 171.16
dns 15024 ( 0.08%) 2573821 ( 0.02%) 171.31
other 30 ( 0.00%) 2760 ( 0.00%) 92.00
icmp6 5524 ( 0.03%) 739569 ( 0.01%) 133.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1483 ( 0.01%) 1571320 ( 0.01%) 1059.55
tcpdump file: 200807301400.dump.gz (459.87 MB)