Traffic Trace Info
DumpFile: 200808061400.dump
FileSize: 1838.66MB
Id: 200808061400
StartTime: Wed Aug 6 14:00:01 2008
EndTime: Wed Aug 6 14:15:01 2008
TotalTime: 900.01 seconds
TotalCapSize: 1430.46MB CapLen: 96 bytes
# of packets: 26751160 (18759.29MB)
AvgRate: 174.87Mbps stddev:27.67M
IP flow (unique src/dst pair) Information
# of flows: 598701 (avg. 44.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.4% 2.7% 2.6% 2.0% 1.6% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 322378
Top 10 bandwidth usage (bytes/total in %):
10.4% 7.6% 7.2% 6.4% 5.8% 5.8% 5.3% 4.4% 3.7% 3.5%
# of IPv6 addresses: 925
Top 10 bandwidth usage (bytes/total in %):
90.3% 90.3% 1.9% 1.2% 1.0% 1.0% 0.9% 0.8% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808061400.pktlen.png)
detailed numbers
[ 32- 63]: 5488681
[ 64- 127]: 6501661
[ 128- 255]: 1102034
[ 256- 511]: 716429
[ 512- 1023]: 921626
[ 1024- 2047]: 12020729
Protocol Breakdown
![[protocol breakdown chart]](200808061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26751160 (100.00%) 19670539248 (100.00%) 735.32
ip 26642986 ( 99.60%) 19591031667 ( 99.60%) 735.32
tcp 20477820 ( 76.55%) 17068684813 ( 86.77%) 833.52
http(s) 9688228 ( 36.22%) 12395105484 ( 63.01%) 1279.40
http(c) 5578516 ( 20.85%) 1159559265 ( 5.89%) 207.86
squid 301000 ( 1.13%) 59376205 ( 0.30%) 197.26
smtp 615857 ( 2.30%) 133982815 ( 0.68%) 217.56
nntp 15 ( 0.00%) 1479 ( 0.00%) 98.60
ftp 205677 ( 0.77%) 128131885 ( 0.65%) 622.98
pop3 28171 ( 0.11%) 16854691 ( 0.09%) 598.30
imap 8444 ( 0.03%) 3607892 ( 0.02%) 427.27
telnet 1504 ( 0.01%) 145970 ( 0.00%) 97.05
ssh 83956 ( 0.31%) 13579359 ( 0.07%) 161.74
dns 3083 ( 0.01%) 410648 ( 0.00%) 133.20
bgp 229 ( 0.00%) 90966 ( 0.00%) 397.23
napster 8 ( 0.00%) 646 ( 0.00%) 80.75
realaud 101 ( 0.00%) 11263 ( 0.00%) 111.51
rtsp 761734 ( 2.85%) 802838439 ( 4.08%) 1053.96
icecast 2598 ( 0.01%) 342711 ( 0.00%) 131.91
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3198694 ( 11.96%) 2354644795 ( 11.97%) 736.13
udp 3477395 ( 13.00%) 1293908425 ( 6.58%) 372.09
dns 1269823 ( 4.75%) 223953596 ( 1.14%) 176.37
realaud 6355 ( 0.02%) 383597 ( 0.00%) 60.36
halflif 16 ( 0.00%) 4157 ( 0.00%) 259.81
starcra 40 ( 0.00%) 7202 ( 0.00%) 180.05
everque 46 ( 0.00%) 7986 ( 0.00%) 173.61
unreal 44 ( 0.00%) 9377 ( 0.00%) 213.11
quake 27 ( 0.00%) 3909 ( 0.00%) 144.78
cuseeme 4 ( 0.00%) 1082 ( 0.00%) 270.50
other 2201023 ( 8.23%) 1069532162 ( 5.44%) 485.93
icmp 918303 ( 3.43%) 82403688 ( 0.42%) 89.73
ipip 311 ( 0.00%) 36946 ( 0.00%) 118.80
ipsec 1667080 ( 6.23%) 1127722512 ( 5.73%) 676.47
ip6 891 ( 0.00%) 107718 ( 0.00%) 120.90
other 101186 ( 0.38%) 18167565 ( 0.09%) 179.55
frag 13386 ( 0.05%) 10169415 ( 0.05%) 759.71
ip6 108174 ( 0.40%) 79507581 ( 0.40%) 735.00
tcp6 89311 ( 0.33%) 76523674 ( 0.39%) 856.82
http(s) 332 ( 0.00%) 353503 ( 0.00%) 1064.77
http(c) 14498 ( 0.05%) 1909106 ( 0.01%) 131.68
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 789 ( 0.00%) 337177 ( 0.00%) 427.35
ftp 8797 ( 0.03%) 780006 ( 0.00%) 88.67
pop3 65 ( 0.00%) 7076 ( 0.00%) 108.86
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 337 ( 0.00%) 57166 ( 0.00%) 169.63
dns 11 ( 0.00%) 1093 ( 0.00%) 99.36
bgp 1310 ( 0.00%) 107439 ( 0.00%) 82.01
rtsp 12812 ( 0.05%) 953353 ( 0.00%) 74.41
other 50357 ( 0.19%) 72017456 ( 0.37%) 1430.14
udp6 12657 ( 0.05%) 2146679 ( 0.01%) 169.60
dns 12641 ( 0.05%) 2144782 ( 0.01%) 169.67
other 16 ( 0.00%) 1897 ( 0.00%) 118.56
icmp6 6171 ( 0.02%) 829351 ( 0.00%) 134.39
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3661 ( 0.00%) 915.25
tcpdump file: 200808061400.dump.gz (626.25 MB)