Traffic Trace Info
DumpFile: 200807311400.dump
FileSize: 1457.45MB
Id: 200807311400
StartTime: Thu Jul 31 14:00:00 2008
EndTime: Thu Jul 31 14:15:00 2008
TotalTime: 899.99 seconds
TotalCapSize: 1141.34MB CapLen: 96 bytes
# of packets: 20715447 (14059.97MB)
AvgRate: 131.08Mbps stddev:21.47M
IP flow (unique src/dst pair) Information
# of flows: 663065 (avg. 31.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.3% 1.3% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 366592
Top 10 bandwidth usage (bytes/total in %):
11.5% 6.6% 3.9% 3.6% 3.5% 3.5% 3.2% 3.2% 3.1% 2.5%
# of IPv6 addresses: 898
Top 10 bandwidth usage (bytes/total in %):
31.0% 25.0% 11.0% 8.5% 7.0% 5.0% 3.8% 3.8% 3.2% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200807311400.pktlen.png)
detailed numbers
[ 32- 63]: 4971101
[ 64- 127]: 4740667
[ 128- 255]: 900589
[ 256- 511]: 541566
[ 512- 1023]: 541560
[ 1024- 2047]: 9019964
Protocol Breakdown
![[protocol breakdown chart]](200807311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20715447 (100.00%) 14742949342 (100.00%) 711.69
ip 20681784 ( 99.84%) 14737007333 ( 99.96%) 712.56
tcp 18004218 ( 86.91%) 14182707353 ( 96.20%) 787.74
http(s) 8432488 ( 40.71%) 11127742194 ( 75.48%) 1319.63
http(c) 5720988 ( 27.62%) 693918315 ( 4.71%) 121.29
squid 319606 ( 1.54%) 164295940 ( 1.11%) 514.06
smtp 796752 ( 3.85%) 196077303 ( 1.33%) 246.10
nntp 91 ( 0.00%) 8962 ( 0.00%) 98.48
ftp 90250 ( 0.44%) 35248936 ( 0.24%) 390.57
pop3 32069 ( 0.15%) 18029938 ( 0.12%) 562.22
imap 11189 ( 0.05%) 9665417 ( 0.07%) 863.83
telnet 3254 ( 0.02%) 695187 ( 0.00%) 213.64
ssh 258850 ( 1.25%) 221168806 ( 1.50%) 854.43
dns 11037 ( 0.05%) 1314670 ( 0.01%) 119.11
bgp 190 ( 0.00%) 51925 ( 0.00%) 273.29
napster 46 ( 0.00%) 5743 ( 0.00%) 124.85
realaud 83 ( 0.00%) 10619 ( 0.00%) 127.94
rtsp 236704 ( 1.14%) 250387882 ( 1.70%) 1057.81
icecast 20812 ( 0.10%) 22757727 ( 0.15%) 1093.49
hotline 16 ( 0.00%) 1046 ( 0.00%) 65.38
other 2069783 ( 9.99%) 1441326143 ( 9.78%) 696.37
udp 2138158 ( 10.32%) 495517191 ( 3.36%) 231.75
dns 1411164 ( 6.81%) 265159272 ( 1.80%) 187.90
realaud 20712 ( 0.10%) 6192750 ( 0.04%) 298.99
halflif 27 ( 0.00%) 2634 ( 0.00%) 97.56
starcra 45 ( 0.00%) 8213 ( 0.00%) 182.51
everque 65 ( 0.00%) 11515 ( 0.00%) 177.15
unreal 24 ( 0.00%) 3189 ( 0.00%) 132.88
quake 19 ( 0.00%) 2139 ( 0.00%) 112.58
cuseeme 42 ( 0.00%) 2969 ( 0.00%) 70.69
other 705928 ( 3.41%) 224108728 ( 1.52%) 317.47
icmp 468515 ( 2.26%) 47062605 ( 0.32%) 100.45
ipip 335 ( 0.00%) 40998 ( 0.00%) 122.38
ipsec 3024 ( 0.01%) 423456 ( 0.00%) 140.03
ip6 964 ( 0.00%) 151922 ( 0.00%) 157.60
other 66570 ( 0.32%) 11103808 ( 0.08%) 166.80
frag 60637 ( 0.29%) 51983147 ( 0.35%) 857.28
ip6 33661 ( 0.16%) 5941889 ( 0.04%) 176.52
tcp6 14116 ( 0.07%) 1550589 ( 0.01%) 109.85
http(s) 118 ( 0.00%) 162509 ( 0.00%) 1377.19
http(c) 8694 ( 0.04%) 798216 ( 0.01%) 91.81
squid 5 ( 0.00%) 390 ( 0.00%) 78.00
smtp 169 ( 0.00%) 67635 ( 0.00%) 400.21
pop3 48 ( 0.00%) 5559 ( 0.00%) 115.81
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 298 ( 0.00%) 56039 ( 0.00%) 188.05
dns 6 ( 0.00%) 747 ( 0.00%) 124.50
bgp 1347 ( 0.01%) 111964 ( 0.00%) 83.12
other 3429 ( 0.02%) 347305 ( 0.00%) 101.28
udp6 12605 ( 0.06%) 2149174 ( 0.01%) 170.50
dns 12593 ( 0.06%) 2147854 ( 0.01%) 170.56
other 12 ( 0.00%) 1320 ( 0.00%) 110.00
icmp6 5503 ( 0.03%) 743530 ( 0.01%) 135.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1407 ( 0.01%) 1494516 ( 0.01%) 1062.20
tcpdump file: 200807311400.dump.gz (507.96 MB)