Traffic Trace Info
DumpFile: 200808081400.dump
FileSize: 1342.72MB
Id: 200808081400
StartTime: Fri Aug 8 14:00:01 2008
EndTime: Fri Aug 8 14:15:01 2008
TotalTime: 899.61 seconds
TotalCapSize: 1048.43MB CapLen: 96 bytes
# of packets: 19285577 (13140.59MB)
AvgRate: 122.52Mbps stddev:15.96M
IP flow (unique src/dst pair) Information
# of flows: 591239 (avg. 32.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 1.8% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 329338
Top 10 bandwidth usage (bytes/total in %):
13.3% 10.8% 7.6% 4.9% 3.1% 2.9% 2.4% 2.4% 2.1% 1.9%
# of IPv6 addresses: 911
Top 10 bandwidth usage (bytes/total in %):
67.5% 67.4% 3.9% 3.5% 3.5% 3.1% 2.4% 2.4% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808081400.pktlen.png)
detailed numbers
[ 32- 63]: 4179333
[ 64- 127]: 4690635
[ 128- 255]: 977295
[ 256- 511]: 493161
[ 512- 1023]: 536690
[ 1024- 2047]: 8408463
Protocol Breakdown
![[protocol breakdown chart]](200808081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19285577 (100.00%) 13778908349 (100.00%) 714.47
ip 19084847 ( 98.96%) 13758136707 ( 99.85%) 720.89
tcp 15874819 ( 82.31%) 13217747259 ( 95.93%) 832.62
http(s) 7442982 ( 38.59%) 9783074594 ( 71.00%) 1314.40
http(c) 3902720 ( 20.24%) 417878846 ( 3.03%) 107.07
squid 269328 ( 1.40%) 216066558 ( 1.57%) 802.24
smtp 689972 ( 3.58%) 188860805 ( 1.37%) 273.72
nntp 55 ( 0.00%) 4459 ( 0.00%) 81.07
ftp 209638 ( 1.09%) 122134886 ( 0.89%) 582.60
pop3 50071 ( 0.26%) 41664682 ( 0.30%) 832.11
imap 5594 ( 0.03%) 1212772 ( 0.01%) 216.80
telnet 4834 ( 0.03%) 364895 ( 0.00%) 75.49
ssh 132924 ( 0.69%) 21482512 ( 0.16%) 161.61
dns 5194 ( 0.03%) 780194 ( 0.01%) 150.21
bgp 727 ( 0.00%) 468946 ( 0.00%) 645.04
napster 4 ( 0.00%) 244 ( 0.00%) 61.00
realaud 15 ( 0.00%) 1447 ( 0.00%) 96.47
rtsp 532130 ( 2.76%) 549457051 ( 3.99%) 1032.56
icecast 39722 ( 0.21%) 23959613 ( 0.17%) 603.18
hotline 6 ( 0.00%) 724 ( 0.00%) 120.67
other 2588902 ( 13.42%) 1850333971 ( 13.43%) 714.72
udp 1970757 ( 10.22%) 413761968 ( 3.00%) 209.95
dns 1199931 ( 6.22%) 213479111 ( 1.55%) 177.91
realaud 1854 ( 0.01%) 112060 ( 0.00%) 60.44
halflif 27 ( 0.00%) 3983 ( 0.00%) 147.52
starcra 50 ( 0.00%) 9347 ( 0.00%) 186.94
everque 58 ( 0.00%) 9050 ( 0.00%) 156.03
unreal 17 ( 0.00%) 2797 ( 0.00%) 164.53
quake 25 ( 0.00%) 2138 ( 0.00%) 85.52
cuseeme 15 ( 0.00%) 2427 ( 0.00%) 161.80
other 767523 ( 3.98%) 198627936 ( 1.44%) 258.79
icmp 966412 ( 5.01%) 87445176 ( 0.63%) 90.48
ipip 287 ( 0.00%) 35960 ( 0.00%) 125.30
ipsec 16039 ( 0.08%) 4167680 ( 0.03%) 259.85
ip6 902 ( 0.00%) 108844 ( 0.00%) 120.67
other 255631 ( 1.33%) 34869820 ( 0.25%) 136.41
frag 5611 ( 0.03%) 6258055 ( 0.05%) 1115.32
ip6 200730 ( 1.04%) 20771642 ( 0.15%) 103.48
tcp6 182869 ( 0.95%) 17741906 ( 0.13%) 97.02
http(s) 19 ( 0.00%) 5205 ( 0.00%) 273.95
http(c) 13434 ( 0.07%) 1884832 ( 0.01%) 140.30
smtp 838 ( 0.00%) 869224 ( 0.01%) 1037.26
ftp 364 ( 0.00%) 39506 ( 0.00%) 108.53
pop3 66 ( 0.00%) 7050 ( 0.00%) 106.82
imap 174 ( 0.00%) 40771 ( 0.00%) 234.32
ssh 134 ( 0.00%) 27256 ( 0.00%) 203.40
bgp 859 ( 0.00%) 80976 ( 0.00%) 94.27
rtsp 6513 ( 0.03%) 487257 ( 0.00%) 74.81
other 160468 ( 0.83%) 14299829 ( 0.10%) 89.11
udp6 12644 ( 0.07%) 2219577 ( 0.02%) 175.54
dns 12615 ( 0.07%) 2216387 ( 0.02%) 175.69
other 29 ( 0.00%) 3190 ( 0.00%) 110.00
icmp6 5181 ( 0.03%) 800798 ( 0.01%) 154.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5281 ( 0.00%) 880.17
tcpdump file: 200808081400.dump.gz (467.53 MB)