Traffic Trace Info
DumpFile: 200808141400.dump
FileSize: 1334.78MB
Id: 200808141400
StartTime: Thu Aug 14 14:00:00 2008
EndTime: Thu Aug 14 14:15:00 2008
TotalTime: 900.09 seconds
TotalCapSize: 1041.15MB CapLen: 96 bytes
# of packets: 19242507 (13241.96MB)
AvgRate: 123.42Mbps stddev:16.15M
IP flow (unique src/dst pair) Information
# of flows: 606356 (avg. 31.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.5% 1.1% 1.0% 0.8% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 326100
Top 10 bandwidth usage (bytes/total in %):
16.2% 11.5% 5.9% 4.2% 3.7% 3.7% 3.2% 3.0% 2.5% 2.2%
# of IPv6 addresses: 953
Top 10 bandwidth usage (bytes/total in %):
89.5% 89.5% 2.8% 2.8% 0.8% 0.7% 0.5% 0.5% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808141400.pktlen.png)
detailed numbers
[ 32- 63]: 3828403
[ 64- 127]: 4656323
[ 128- 255]: 1079376
[ 256- 511]: 567390
[ 512- 1023]: 569115
[ 1024- 2047]: 8541900
Protocol Breakdown
![[protocol breakdown chart]](200808141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19242507 (100.00%) 13885198711 (100.00%) 721.59
ip 19165424 ( 99.60%) 13830298432 ( 99.60%) 721.63
tcp 15421301 ( 80.14%) 12822993177 ( 92.35%) 831.51
http(s) 7699459 ( 40.01%) 10174973391 ( 73.28%) 1321.52
http(c) 3653945 ( 18.99%) 348262297 ( 2.51%) 95.31
squid 453757 ( 2.36%) 376786321 ( 2.71%) 830.37
smtp 681714 ( 3.54%) 151709195 ( 1.09%) 222.54
nntp 172 ( 0.00%) 35691 ( 0.00%) 207.51
ftp 70962 ( 0.37%) 18852718 ( 0.14%) 265.67
pop3 20290 ( 0.11%) 12567055 ( 0.09%) 619.37
imap 8043 ( 0.04%) 3670472 ( 0.03%) 456.36
telnet 2172 ( 0.01%) 300637 ( 0.00%) 138.41
ssh 79298 ( 0.41%) 18260101 ( 0.13%) 230.27
dns 5715 ( 0.03%) 2249794 ( 0.02%) 393.66
bgp 131 ( 0.00%) 38664 ( 0.00%) 295.15
napster 4 ( 0.00%) 246 ( 0.00%) 61.50
realaud 16 ( 0.00%) 1128 ( 0.00%) 70.50
rtsp 238810 ( 1.24%) 287364504 ( 2.07%) 1203.32
icecast 2193 ( 0.01%) 138391 ( 0.00%) 63.11
other 2504610 ( 13.02%) 1427781972 ( 10.28%) 570.06
udp 2627200 ( 13.65%) 897412772 ( 6.46%) 341.59
dns 1179648 ( 6.13%) 210000176 ( 1.51%) 178.02
realaud 392 ( 0.00%) 26896 ( 0.00%) 68.61
halflif 20 ( 0.00%) 2385 ( 0.00%) 119.25
starcra 31 ( 0.00%) 4901 ( 0.00%) 158.10
everque 64 ( 0.00%) 9630 ( 0.00%) 150.47
unreal 15 ( 0.00%) 1810 ( 0.00%) 120.67
quake 101 ( 0.00%) 9027 ( 0.00%) 89.38
cuseeme 8 ( 0.00%) 771 ( 0.00%) 96.38
other 1446868 ( 7.52%) 687326677 ( 4.95%) 475.04
icmp 980487 ( 5.10%) 87762354 ( 0.63%) 89.51
ipip 304 ( 0.00%) 36596 ( 0.00%) 120.38
ipsec 2967 ( 0.02%) 397578 ( 0.00%) 134.00
ip6 1382 ( 0.01%) 201460 ( 0.00%) 145.77
other 131783 ( 0.68%) 21494495 ( 0.15%) 163.11
frag 1885 ( 0.01%) 1559785 ( 0.01%) 827.47
ip6 77083 ( 0.40%) 54900279 ( 0.40%) 712.22
tcp6 59845 ( 0.31%) 52064903 ( 0.37%) 870.00
http(s) 282 ( 0.00%) 266841 ( 0.00%) 946.24
http(c) 3908 ( 0.02%) 419533 ( 0.00%) 107.35
smtp 352 ( 0.00%) 180252 ( 0.00%) 512.08
ftp 17587 ( 0.09%) 1559378 ( 0.01%) 88.67
ssh 464 ( 0.00%) 95136 ( 0.00%) 205.03
dns 16 ( 0.00%) 2070 ( 0.00%) 129.38
bgp 818 ( 0.00%) 70184 ( 0.00%) 85.80
other 36418 ( 0.19%) 49471509 ( 0.36%) 1358.44
udp6 11503 ( 0.06%) 2045081 ( 0.01%) 177.79
dns 11487 ( 0.06%) 2043321 ( 0.01%) 177.88
other 16 ( 0.00%) 1760 ( 0.00%) 110.00
icmp6 5693 ( 0.03%) 776578 ( 0.01%) 136.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 9637 ( 0.00%) 803.08
tcpdump file: 200808141400.dump.gz (472.85 MB)