Traffic Trace Info
DumpFile: 200808121400.dump
FileSize: 1450.96MB
Id: 200808121400
StartTime: Tue Aug 12 14:00:00 2008
EndTime: Tue Aug 12 14:15:00 2008
TotalTime: 899.79 seconds
TotalCapSize: 1138.30MB CapLen: 96 bytes
# of packets: 20489576 (15165.55MB)
AvgRate: 141.40Mbps stddev:16.22M
IP flow (unique src/dst pair) Information
# of flows: 559275 (avg. 36.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 2.1% 1.9% 1.5% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 297235
Top 10 bandwidth usage (bytes/total in %):
23.2% 11.7% 10.0% 9.9% 5.1% 4.3% 4.2% 4.1% 1.9% 1.7%
# of IPv6 addresses: 955
Top 10 bandwidth usage (bytes/total in %):
11.6% 11.6% 9.0% 8.9% 8.6% 7.0% 5.4% 5.3% 4.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808121400.pktlen.png)
detailed numbers
[ 32- 63]: 3405630
[ 64- 127]: 5274325
[ 128- 255]: 866939
[ 256- 511]: 505022
[ 512- 1023]: 490183
[ 1024- 2047]: 9947477
Protocol Breakdown
![[protocol breakdown chart]](200808121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20489576 (100.00%) 15902229882 (100.00%) 776.11
ip 20438584 ( 99.75%) 15895040701 ( 99.95%) 777.70
tcp 17106797 ( 83.49%) 15101389440 ( 94.96%) 882.77
http(s) 8172385 ( 39.89%) 10591445298 ( 66.60%) 1296.00
http(c) 3437658 ( 16.78%) 298566898 ( 1.88%) 86.85
squid 126855 ( 0.62%) 60206882 ( 0.38%) 474.61
smtp 699683 ( 3.41%) 152164588 ( 0.96%) 217.48
nntp 60 ( 0.00%) 4472 ( 0.00%) 74.53
ftp 32081 ( 0.16%) 2898314 ( 0.02%) 90.34
pop3 22877 ( 0.11%) 12477799 ( 0.08%) 545.43
imap 7191 ( 0.04%) 1747950 ( 0.01%) 243.07
telnet 10087 ( 0.05%) 744680 ( 0.00%) 73.83
ssh 195506 ( 0.95%) 169739593 ( 1.07%) 868.21
dns 2758 ( 0.01%) 265952 ( 0.00%) 96.43
bgp 159 ( 0.00%) 61755 ( 0.00%) 388.40
napster 93 ( 0.00%) 8529 ( 0.00%) 91.71
realaud 19 ( 0.00%) 2262 ( 0.00%) 119.05
rtsp 270365 ( 1.32%) 291871889 ( 1.84%) 1079.55
icecast 18325 ( 0.09%) 8392562 ( 0.05%) 457.98
other 4110679 ( 20.06%) 3510789057 ( 22.08%) 854.07
udp 2248895 ( 10.98%) 686587088 ( 4.32%) 305.30
dns 1136153 ( 5.55%) 211394698 ( 1.33%) 186.06
realaud 593 ( 0.00%) 36575 ( 0.00%) 61.68
halflif 28 ( 0.00%) 3200 ( 0.00%) 114.29
starcra 25 ( 0.00%) 3941 ( 0.00%) 157.64
everque 171 ( 0.00%) 17028 ( 0.00%) 99.58
unreal 44 ( 0.00%) 7843 ( 0.00%) 178.25
quake 11 ( 0.00%) 933 ( 0.00%) 84.82
cuseeme 1666 ( 0.01%) 203335 ( 0.00%) 122.05
other 1110164 ( 5.42%) 474865846 ( 2.99%) 427.74
icmp 937738 ( 4.58%) 83754795 ( 0.53%) 89.32
ipip 309 ( 0.00%) 38886 ( 0.00%) 125.84
ipsec 3426 ( 0.02%) 459814 ( 0.00%) 134.21
ip6 1281 ( 0.01%) 159621 ( 0.00%) 124.61
other 140138 ( 0.68%) 22651057 ( 0.14%) 161.63
frag 1781 ( 0.01%) 1613021 ( 0.01%) 905.68
ip6 50992 ( 0.25%) 7189181 ( 0.05%) 140.99
tcp6 32242 ( 0.16%) 4096523 ( 0.03%) 127.06
http(s) 19 ( 0.00%) 16078 ( 0.00%) 846.21
http(c) 11531 ( 0.06%) 1559824 ( 0.01%) 135.27
squid 129 ( 0.00%) 12768 ( 0.00%) 98.98
smtp 1405 ( 0.01%) 839019 ( 0.01%) 597.17
ftp 17 ( 0.00%) 1993 ( 0.00%) 117.24
ssh 3540 ( 0.02%) 413296 ( 0.00%) 116.75
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 844 ( 0.00%) 72314 ( 0.00%) 85.68
rtsp 11153 ( 0.05%) 831458 ( 0.01%) 74.55
other 3597 ( 0.02%) 349138 ( 0.00%) 97.06
udp6 13592 ( 0.07%) 2403337 ( 0.02%) 176.82
dns 13576 ( 0.07%) 2401589 ( 0.02%) 176.90
quake 1 ( 0.00%) 98 ( 0.00%) 98.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 5123 ( 0.03%) 681351 ( 0.00%) 133.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 3890 ( 0.00%) 778.00
tcpdump file: 200808121400.dump.gz (484.54 MB)