Traffic Trace Info
DumpFile: 200808111400.dump
FileSize: 1433.43MB
Id: 200808111400
StartTime: Mon Aug 11 14:00:00 2008
EndTime: Mon Aug 11 14:15:00 2008
TotalTime: 899.78 seconds
TotalCapSize: 1119.32MB CapLen: 96 bytes
# of packets: 20585275 (13158.60MB)
AvgRate: 122.69Mbps stddev:19.80M
IP flow (unique src/dst pair) Information
# of flows: 775356 (avg. 26.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.7% 2.1% 1.4% 1.0% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 426353
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.9% 9.2% 8.2% 4.1% 3.8% 3.6% 3.1% 3.0% 2.8%
# of IPv6 addresses: 887
Top 10 bandwidth usage (bytes/total in %):
76.0% 76.0% 3.5% 3.5% 2.4% 1.9% 1.5% 1.5% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808111400.pktlen.png)
detailed numbers
[ 32- 63]: 3530129
[ 64- 127]: 6668766
[ 128- 255]: 925003
[ 256- 511]: 420584
[ 512- 1023]: 530996
[ 1024- 2047]: 8509797
Protocol Breakdown
![[protocol breakdown chart]](200808111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20585275 (100.00%) 13797787911 (100.00%) 670.27
ip 20520994 ( 99.69%) 13771033922 ( 99.81%) 671.07
tcp 15036882 ( 73.05%) 11732056315 ( 85.03%) 780.22
http(s) 7159313 ( 34.78%) 8565562056 ( 62.08%) 1196.42
http(c) 3114838 ( 15.13%) 302737277 ( 2.19%) 97.19
squid 227595 ( 1.11%) 85444523 ( 0.62%) 375.42
smtp 579495 ( 2.82%) 145092340 ( 1.05%) 250.38
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 49629 ( 0.24%) 18367194 ( 0.13%) 370.09
pop3 34184 ( 0.17%) 13526824 ( 0.10%) 395.71
imap 5518 ( 0.03%) 1677900 ( 0.01%) 304.08
telnet 17600 ( 0.09%) 1380615 ( 0.01%) 78.44
ssh 616840 ( 3.00%) 84756678 ( 0.61%) 137.40
dns 48272 ( 0.23%) 50669248 ( 0.37%) 1049.66
bgp 155 ( 0.00%) 50083 ( 0.00%) 323.12
napster 1072 ( 0.01%) 954315 ( 0.01%) 890.22
realaud 24 ( 0.00%) 2173 ( 0.00%) 90.54
rtsp 167489 ( 0.81%) 143002749 ( 1.04%) 853.80
icecast 21566 ( 0.10%) 24555850 ( 0.18%) 1138.64
other 2993286 ( 14.54%) 2294276130 ( 16.63%) 766.47
udp 3963801 ( 19.26%) 1887511955 ( 13.68%) 476.19
dns 1189002 ( 5.78%) 206956435 ( 1.50%) 174.06
realaud 2534 ( 0.01%) 153466 ( 0.00%) 60.56
halflif 34 ( 0.00%) 5298 ( 0.00%) 155.82
starcra 993 ( 0.00%) 92142 ( 0.00%) 92.79
everque 82 ( 0.00%) 13828 ( 0.00%) 168.63
unreal 7 ( 0.00%) 815 ( 0.00%) 116.43
quake 16 ( 0.00%) 1481 ( 0.00%) 92.56
cuseeme 11 ( 0.00%) 1861 ( 0.00%) 169.18
other 2771116 ( 13.46%) 1680284207 ( 12.18%) 606.36
icmp 1325492 ( 6.44%) 112267248 ( 0.81%) 84.70
ipip 304 ( 0.00%) 36580 ( 0.00%) 120.33
ipsec 5780 ( 0.03%) 1164716 ( 0.01%) 201.51
ip6 1366 ( 0.01%) 186249 ( 0.00%) 136.35
other 187369 ( 0.91%) 37810859 ( 0.27%) 201.80
frag 1576 ( 0.01%) 1314390 ( 0.01%) 834.00
ip6 64281 ( 0.31%) 26753989 ( 0.19%) 416.20
tcp6 47558 ( 0.23%) 23978310 ( 0.17%) 504.19
http(s) 124 ( 0.00%) 162870 ( 0.00%) 1313.47
http(c) 13198 ( 0.06%) 1580184 ( 0.01%) 119.73
smtp 299 ( 0.00%) 126611 ( 0.00%) 423.45
ftp 10483 ( 0.05%) 929538 ( 0.01%) 88.67
ssh 261 ( 0.00%) 56510 ( 0.00%) 216.51
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 843 ( 0.00%) 73303 ( 0.00%) 86.95
rtsp 5332 ( 0.03%) 399863 ( 0.00%) 74.99
other 17014 ( 0.08%) 20648972 ( 0.15%) 1213.65
udp6 11597 ( 0.06%) 2066536 ( 0.01%) 178.20
dns 11577 ( 0.06%) 2064328 ( 0.01%) 178.31
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
other 19 ( 0.00%) 2090 ( 0.00%) 110.00
icmp6 5078 ( 0.02%) 689432 ( 0.00%) 135.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 15631 ( 0.00%) 868.39
tcpdump file: 200808111400.dump.gz (508.77 MB)