Traffic Trace Info
DumpFile: 200808181400.dump
FileSize: 1787.66MB
Id: 200808181400
StartTime: Mon Aug 18 14:00:00 2008
EndTime: Mon Aug 18 14:15:00 2008
TotalTime: 900.26 seconds
TotalCapSize: 1395.70MB CapLen: 96 bytes
# of packets: 25686448 (18355.17MB)
AvgRate: 171.06Mbps stddev:27.27M
IP flow (unique src/dst pair) Information
# of flows: 612103 (avg. 41.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.2% 1.9% 1.7% 1.6% 1.3% 1.1% 1.1% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 323850
Top 10 bandwidth usage (bytes/total in %):
16.8% 13.0% 7.8% 6.3% 3.0% 2.7% 2.7% 2.2% 2.1% 2.0%
# of IPv6 addresses: 894
Top 10 bandwidth usage (bytes/total in %):
20.3% 17.6% 8.5% 7.1% 6.5% 5.1% 4.2% 4.0% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808181400.pktlen.png)
detailed numbers
[ 32- 63]: 5298475
[ 64- 127]: 5612195
[ 128- 255]: 1389593
[ 256- 511]: 637720
[ 512- 1023]: 846466
[ 1024- 2047]: 11901999
Protocol Breakdown
![[protocol breakdown chart]](200808181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25686448 (100.00%) 19246791895 (100.00%) 749.30
ip 25644815 ( 99.84%) 19241088100 ( 99.97%) 750.29
tcp 21628162 ( 84.20%) 18236647710 ( 94.75%) 843.19
http(s) 9506334 ( 37.01%) 12328471510 ( 64.05%) 1296.87
http(c) 4489515 ( 17.48%) 599472972 ( 3.11%) 133.53
squid 170983 ( 0.67%) 121659859 ( 0.63%) 711.53
smtp 633938 ( 2.47%) 180227453 ( 0.94%) 284.30
nntp 294 ( 0.00%) 31546 ( 0.00%) 107.30
ftp 203160 ( 0.79%) 146863289 ( 0.76%) 722.89
pop3 20100 ( 0.08%) 12170519 ( 0.06%) 605.50
imap 3665 ( 0.01%) 1098230 ( 0.01%) 299.65
telnet 949 ( 0.00%) 69912 ( 0.00%) 73.67
ssh 702630 ( 2.74%) 417321785 ( 2.17%) 593.94
dns 2817 ( 0.01%) 435963 ( 0.00%) 154.76
bgp 156 ( 0.00%) 62133 ( 0.00%) 398.29
napster 506 ( 0.00%) 35028 ( 0.00%) 69.23
realaud 39 ( 0.00%) 2684 ( 0.00%) 68.82
rtsp 611907 ( 2.38%) 689481957 ( 3.58%) 1126.78
icecast 26437 ( 0.10%) 23080829 ( 0.12%) 873.05
hotline 12 ( 0.00%) 1296 ( 0.00%) 108.00
other 5254720 ( 20.46%) 3716160745 ( 19.31%) 707.20
udp 2696692 ( 10.50%) 889289325 ( 4.62%) 329.77
dns 1071064 ( 4.17%) 199364752 ( 1.04%) 186.14
realaud 18079 ( 0.07%) 8273145 ( 0.04%) 457.61
halflif 27 ( 0.00%) 3080 ( 0.00%) 114.07
starcra 13 ( 0.00%) 1856 ( 0.00%) 142.77
everque 50 ( 0.00%) 6819 ( 0.00%) 136.38
unreal 8 ( 0.00%) 988 ( 0.00%) 123.50
quake 18 ( 0.00%) 1439 ( 0.00%) 79.94
cuseeme 13 ( 0.00%) 1655 ( 0.00%) 127.31
other 1607390 ( 6.26%) 681625152 ( 3.54%) 424.06
icmp 1262675 ( 4.92%) 105631263 ( 0.55%) 83.66
ipip 300 ( 0.00%) 36312 ( 0.00%) 121.04
ipsec 5267 ( 0.02%) 1163746 ( 0.01%) 220.95
ip6 1034 ( 0.00%) 127614 ( 0.00%) 123.42
other 50685 ( 0.20%) 8192130 ( 0.04%) 161.63
frag 1788 ( 0.01%) 1478507 ( 0.01%) 826.91
ip6 41633 ( 0.16%) 5703795 ( 0.03%) 137.00
tcp6 22973 ( 0.09%) 2738493 ( 0.01%) 119.20
http(s) 291 ( 0.00%) 354521 ( 0.00%) 1218.29
http(c) 4806 ( 0.02%) 748701 ( 0.00%) 155.78
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 427 ( 0.00%) 170225 ( 0.00%) 398.65
pop3 32 ( 0.00%) 3706 ( 0.00%) 115.81
ssh 555 ( 0.00%) 98242 ( 0.00%) 177.01
bgp 408 ( 0.00%) 37406 ( 0.00%) 91.68
rtsp 12990 ( 0.05%) 971805 ( 0.01%) 74.81
other 3463 ( 0.01%) 353813 ( 0.00%) 102.17
udp6 11887 ( 0.05%) 2060258 ( 0.01%) 173.32
dns 11870 ( 0.05%) 2058188 ( 0.01%) 173.39
other 17 ( 0.00%) 2070 ( 0.00%) 121.76
icmp6 6735 ( 0.03%) 894291 ( 0.00%) 132.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 6673 ( 0.00%) 834.12
tcpdump file: 200808181400.dump.gz (615.33 MB)