Traffic Trace Info
DumpFile: 200808191400.dump
FileSize: 1473.60MB
Id: 200808191400
StartTime: Tue Aug 19 14:00:00 2008
EndTime: Tue Aug 19 14:15:00 2008
TotalTime: 899.93 seconds
TotalCapSize: 1150.55MB CapLen: 96 bytes
# of packets: 21170650 (14099.19MB)
AvgRate: 131.43Mbps stddev:19.82M
IP flow (unique src/dst pair) Information
# of flows: 548416 (avg. 38.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 3.3% 1.5% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 265235
Top 10 bandwidth usage (bytes/total in %):
15.1% 7.5% 7.5% 4.8% 4.3% 3.9% 3.6% 3.4% 2.9% 2.3%
# of IPv6 addresses: 942
Top 10 bandwidth usage (bytes/total in %):
47.9% 47.0% 14.1% 14.1% 4.1% 4.1% 4.0% 2.4% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808191400.pktlen.png)
detailed numbers
[ 32- 63]: 4787651
[ 64- 127]: 5181584
[ 128- 255]: 909538
[ 256- 511]: 529589
[ 512- 1023]: 639965
[ 1024- 2047]: 9122323
Protocol Breakdown
![[protocol breakdown chart]](200808191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21170650 (100.00%) 14784074069 (100.00%) 698.33
ip 21019166 ( 99.28%) 14767675832 ( 99.89%) 702.58
tcp 17439795 ( 82.38%) 13794438392 ( 93.31%) 790.97
http(s) 7096919 ( 33.52%) 9300405783 ( 62.91%) 1310.48
http(c) 4405814 ( 20.81%) 570263339 ( 3.86%) 129.43
squid 481663 ( 2.28%) 287984876 ( 1.95%) 597.90
smtp 656102 ( 3.10%) 193050370 ( 1.31%) 294.24
nntp 70 ( 0.00%) 6025 ( 0.00%) 86.07
ftp 78157 ( 0.37%) 11856457 ( 0.08%) 151.70
pop3 33477 ( 0.16%) 18746148 ( 0.13%) 559.97
imap 19249 ( 0.09%) 13080353 ( 0.09%) 679.53
telnet 2585 ( 0.01%) 912050 ( 0.01%) 352.82
ssh 555952 ( 2.63%) 514167375 ( 3.48%) 924.84
dns 4211 ( 0.02%) 871904 ( 0.01%) 207.05
bgp 149 ( 0.00%) 56045 ( 0.00%) 376.14
napster 14 ( 0.00%) 939 ( 0.00%) 67.07
realaud 654 ( 0.00%) 269955 ( 0.00%) 412.78
rtsp 302408 ( 1.43%) 350820017 ( 2.37%) 1160.09
icecast 1280164 ( 6.05%) 1111624595 ( 7.52%) 868.35
other 2522207 ( 11.91%) 1420322161 ( 9.61%) 563.13
udp 2494117 ( 11.78%) 858141408 ( 5.80%) 344.07
dns 1202640 ( 5.68%) 217095485 ( 1.47%) 180.52
realaud 20268 ( 0.10%) 4825317 ( 0.03%) 238.08
halflif 14 ( 0.00%) 1511 ( 0.00%) 107.93
starcra 22 ( 0.00%) 3224 ( 0.00%) 146.55
everque 46 ( 0.00%) 8575 ( 0.00%) 186.41
unreal 16 ( 0.00%) 2855 ( 0.00%) 178.44
quake 24 ( 0.00%) 3623 ( 0.00%) 150.96
cuseeme 8 ( 0.00%) 687 ( 0.00%) 85.88
other 1271029 ( 6.00%) 636182613 ( 4.30%) 500.53
icmp 816000 ( 3.85%) 74853519 ( 0.51%) 91.73
ipip 299 ( 0.00%) 35622 ( 0.00%) 119.14
ipsec 3092 ( 0.01%) 439128 ( 0.00%) 142.02
ip6 896 ( 0.00%) 110664 ( 0.00%) 123.51
other 264967 ( 1.25%) 39657099 ( 0.27%) 149.67
frag 1728 ( 0.01%) 1443144 ( 0.01%) 835.15
ip6 151484 ( 0.72%) 16398237 ( 0.11%) 108.25
tcp6 126785 ( 0.60%) 12150843 ( 0.08%) 95.84
http(s) 558 ( 0.00%) 680737 ( 0.00%) 1219.96
http(c) 95022 ( 0.45%) 8223690 ( 0.06%) 86.55
smtp 511 ( 0.00%) 202826 ( 0.00%) 396.92
pop3 67 ( 0.00%) 7224 ( 0.00%) 107.82
imap 404 ( 0.00%) 271374 ( 0.00%) 671.72
ssh 135 ( 0.00%) 35486 ( 0.00%) 262.86
bgp 419 ( 0.00%) 48630 ( 0.00%) 116.06
other 29669 ( 0.14%) 2680876 ( 0.02%) 90.36
udp6 17132 ( 0.08%) 3278389 ( 0.02%) 191.36
dns 17090 ( 0.08%) 3266161 ( 0.02%) 191.12
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
other 41 ( 0.00%) 12118 ( 0.00%) 295.56
icmp6 7533 ( 0.04%) 961620 ( 0.01%) 127.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3305 ( 0.00%) 826.25
tcpdump file: 200808191400.dump.gz (518.30 MB)