Traffic Trace Info
DumpFile: 200808131400.dump
FileSize: 1295.31MB
Id: 200808131400
StartTime: Wed Aug 13 14:00:00 2008
EndTime: Wed Aug 13 14:15:00 2008
TotalTime: 899.97 seconds
TotalCapSize: 1010.50MB CapLen: 96 bytes
# of packets: 18664704 (13138.58MB)
AvgRate: 122.44Mbps stddev:18.21M
IP flow (unique src/dst pair) Information
# of flows: 691977 (avg. 26.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.0% 1.5% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 372432
Top 10 bandwidth usage (bytes/total in %):
15.0% 14.1% 12.3% 11.1% 4.6% 2.8% 2.7% 2.2% 2.2% 1.7%
# of IPv6 addresses: 969
Top 10 bandwidth usage (bytes/total in %):
69.4% 69.4% 26.6% 26.6% 0.8% 0.8% 0.4% 0.4% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808131400.pktlen.png)
detailed numbers
[ 32- 63]: 3382523
[ 64- 127]: 4735708
[ 128- 255]: 1021388
[ 256- 511]: 480952
[ 512- 1023]: 418771
[ 1024- 2047]: 8625362
Protocol Breakdown
![[protocol breakdown chart]](200808131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18664704 (100.00%) 13776804191 (100.00%) 738.12
ip 18487237 ( 99.05%) 13626784957 ( 98.91%) 737.09
tcp 14424803 ( 77.28%) 12610016211 ( 91.53%) 874.19
http(s) 6453887 ( 34.58%) 8295922109 ( 60.22%) 1285.41
http(c) 2843548 ( 15.23%) 351837045 ( 2.55%) 123.73
squid 460954 ( 2.47%) 414576274 ( 3.01%) 899.39
smtp 563096 ( 3.02%) 112685936 ( 0.82%) 200.12
nntp 133 ( 0.00%) 14186 ( 0.00%) 106.66
ftp 35094 ( 0.19%) 6827951 ( 0.05%) 194.56
pop3 28597 ( 0.15%) 18755440 ( 0.14%) 655.85
imap 3839 ( 0.02%) 845844 ( 0.01%) 220.33
telnet 798 ( 0.00%) 173664 ( 0.00%) 217.62
ssh 40054 ( 0.21%) 5635054 ( 0.04%) 140.69
dns 3679 ( 0.02%) 503479 ( 0.00%) 136.85
bgp 163 ( 0.00%) 59859 ( 0.00%) 367.23
napster 36 ( 0.00%) 3985 ( 0.00%) 110.69
realaud 72 ( 0.00%) 5418 ( 0.00%) 75.25
rtsp 460972 ( 2.47%) 459338837 ( 3.33%) 996.46
icecast 14523 ( 0.08%) 8221484 ( 0.06%) 566.10
other 3515356 ( 18.83%) 2934609526 ( 21.30%) 834.80
udp 2779637 ( 14.89%) 857061538 ( 6.22%) 308.34
dns 1354393 ( 7.26%) 237334344 ( 1.72%) 175.23
realaud 917 ( 0.00%) 55810 ( 0.00%) 60.86
halflif 28 ( 0.00%) 4071 ( 0.00%) 145.39
starcra 48 ( 0.00%) 9023 ( 0.00%) 187.98
everque 63 ( 0.00%) 9712 ( 0.00%) 154.16
unreal 9 ( 0.00%) 1179 ( 0.00%) 131.00
quake 22 ( 0.00%) 2111 ( 0.00%) 95.95
cuseeme 26 ( 0.00%) 2733 ( 0.00%) 105.12
other 1424106 ( 7.63%) 619635791 ( 4.50%) 435.11
icmp 1094100 ( 5.86%) 96920424 ( 0.70%) 88.58
ipip 309 ( 0.00%) 36794 ( 0.00%) 119.07
ipsec 3146 ( 0.02%) 408244 ( 0.00%) 129.77
ip6 1320 ( 0.01%) 170065 ( 0.00%) 128.84
other 183922 ( 0.99%) 62171681 ( 0.45%) 338.03
frag 1697 ( 0.01%) 1396551 ( 0.01%) 822.95
ip6 177467 ( 0.95%) 150019234 ( 1.09%) 845.34
tcp6 159224 ( 0.85%) 146830670 ( 1.07%) 922.16
http(s) 69201 ( 0.37%) 100876517 ( 0.73%) 1457.73
http(c) 44931 ( 0.24%) 4422636 ( 0.03%) 98.43
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 301 ( 0.00%) 84031 ( 0.00%) 279.17
ftp 14088 ( 0.08%) 1249144 ( 0.01%) 88.67
bgp 853 ( 0.00%) 73852 ( 0.00%) 86.58
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 29847 ( 0.16%) 40124268 ( 0.29%) 1344.33
udp6 12565 ( 0.07%) 2387167 ( 0.02%) 189.99
dns 12550 ( 0.07%) 2385517 ( 0.02%) 190.08
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 5645 ( 0.03%) 795404 ( 0.01%) 140.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 1913 ( 0.00%) 637.67
tcpdump file: 200808131400.dump.gz (453.39 MB)