Traffic Trace Info
DumpFile: 200808051400.dump
FileSize: 1390.80MB
Id: 200808051400
StartTime: Tue Aug 5 14:00:00 2008
EndTime: Tue Aug 5 14:15:00 2008
TotalTime: 900.16 seconds
TotalCapSize: 1086.57MB CapLen: 96 bytes
# of packets: 19937209 (13231.26MB)
AvgRate: 123.33Mbps stddev:17.68M
IP flow (unique src/dst pair) Information
# of flows: 573289 (avg. 34.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.3% 1.0% 1.0% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 310296
Top 10 bandwidth usage (bytes/total in %):
14.4% 10.7% 5.5% 3.4% 3.1% 2.8% 2.2% 2.2% 2.2% 2.1%
# of IPv6 addresses: 884
Top 10 bandwidth usage (bytes/total in %):
90.8% 90.8% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808051400.pktlen.png)
detailed numbers
[ 32- 63]: 4474329
[ 64- 127]: 4774538
[ 128- 255]: 903507
[ 256- 511]: 500024
[ 512- 1023]: 928581
[ 1024- 2047]: 8356230
Protocol Breakdown
![[protocol breakdown chart]](200808051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19937209 (100.00%) 13873986582 (100.00%) 695.88
ip 19863823 ( 99.63%) 13810599453 ( 99.54%) 695.26
tcp 16728460 ( 83.91%) 13161363200 ( 94.86%) 786.76
http(s) 8574692 ( 43.01%) 10785804973 ( 77.74%) 1257.87
http(c) 5046719 ( 25.31%) 647587671 ( 4.67%) 128.32
squid 148496 ( 0.74%) 30804980 ( 0.22%) 207.45
smtp 774677 ( 3.89%) 183283663 ( 1.32%) 236.59
nntp 15 ( 0.00%) 1475 ( 0.00%) 98.33
ftp 153906 ( 0.77%) 90560715 ( 0.65%) 588.42
pop3 28833 ( 0.14%) 13097103 ( 0.09%) 454.24
imap 5353 ( 0.03%) 972753 ( 0.01%) 181.72
telnet 2796 ( 0.01%) 328732 ( 0.00%) 117.57
ssh 168525 ( 0.85%) 123190239 ( 0.89%) 730.99
dns 2732 ( 0.01%) 283520 ( 0.00%) 103.78
bgp 204 ( 0.00%) 63723 ( 0.00%) 312.37
napster 13 ( 0.00%) 1210 ( 0.00%) 93.08
realaud 148 ( 0.00%) 52045 ( 0.00%) 351.66
rtsp 495883 ( 2.49%) 481703414 ( 3.47%) 971.41
icecast 34540 ( 0.17%) 23604090 ( 0.17%) 683.38
hotline 29 ( 0.00%) 4477 ( 0.00%) 154.38
other 1290897 ( 6.47%) 780018297 ( 5.62%) 604.25
udp 2228144 ( 11.18%) 555035336 ( 4.00%) 249.10
dns 1203030 ( 6.03%) 214962167 ( 1.55%) 178.68
realaud 47511 ( 0.24%) 30966161 ( 0.22%) 651.77
halflif 22 ( 0.00%) 2829 ( 0.00%) 128.59
starcra 49 ( 0.00%) 8627 ( 0.00%) 176.06
everque 47 ( 0.00%) 8259 ( 0.00%) 175.72
unreal 26 ( 0.00%) 3431 ( 0.00%) 131.96
quake 24 ( 0.00%) 2465 ( 0.00%) 102.71
cuseeme 7 ( 0.00%) 928 ( 0.00%) 132.57
other 977418 ( 4.90%) 309073025 ( 2.23%) 316.21
icmp 822977 ( 4.13%) 75394144 ( 0.54%) 91.61
ipip 324 ( 0.00%) 38928 ( 0.00%) 120.15
ipsec 6115 ( 0.03%) 1227586 ( 0.01%) 200.75
ip6 932 ( 0.00%) 117085 ( 0.00%) 125.63
other 76871 ( 0.39%) 17423174 ( 0.13%) 226.65
frag 11154 ( 0.06%) 8453368 ( 0.06%) 757.88
ip6 73386 ( 0.37%) 63387129 ( 0.46%) 863.75
tcp6 51212 ( 0.26%) 59859053 ( 0.43%) 1168.85
http(s) 338 ( 0.00%) 369508 ( 0.00%) 1093.22
http(c) 5871 ( 0.03%) 1008829 ( 0.01%) 171.83
smtp 205 ( 0.00%) 35488 ( 0.00%) 173.11
pop3 106 ( 0.00%) 10064 ( 0.00%) 94.94
ssh 1326 ( 0.01%) 457700 ( 0.00%) 345.17
bgp 1369 ( 0.01%) 113724 ( 0.00%) 83.07
rtsp 30 ( 0.00%) 7470 ( 0.00%) 249.00
other 41967 ( 0.21%) 57856270 ( 0.42%) 1378.61
udp6 15205 ( 0.08%) 2632578 ( 0.02%) 173.14
dns 15173 ( 0.08%) 2628660 ( 0.02%) 173.25
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
other 30 ( 0.00%) 3708 ( 0.00%) 123.60
icmp6 6939 ( 0.03%) 891418 ( 0.01%) 128.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200808051400.dump.gz (485.61 MB)