Traffic Trace Info
DumpFile: 200808201400.dump
FileSize: 1643.84MB
Id: 200808201400
StartTime: Wed Aug 20 14:00:01 2008
EndTime: Wed Aug 20 14:15:01 2008
TotalTime: 899.74 seconds
TotalCapSize: 1288.23MB CapLen: 96 bytes
# of packets: 23303882 (15205.27MB)
AvgRate: 141.76Mbps stddev:23.32M
IP flow (unique src/dst pair) Information
# of flows: 807816 (avg. 28.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.2% 3.4% 3.2% 1.7% 1.5% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 423947
Top 10 bandwidth usage (bytes/total in %):
10.9% 7.8% 7.1% 7.1% 4.9% 4.5% 4.3% 3.5% 3.5% 3.4%
# of IPv6 addresses: 886
Top 10 bandwidth usage (bytes/total in %):
92.8% 92.8% 0.8% 0.8% 0.7% 0.6% 0.4% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808201400.pktlen.png)
detailed numbers
[ 32- 63]: 4834664
[ 64- 127]: 6219111
[ 128- 255]: 1175033
[ 256- 511]: 575695
[ 512- 1023]: 708771
[ 1024- 2047]: 9790608
Protocol Breakdown
![[protocol breakdown chart]](200808201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23303882 (100.00%) 15943876169 (100.00%) 684.17
ip 23223322 ( 99.65%) 15865277216 ( 99.51%) 683.16
tcp 19688549 ( 84.49%) 14915085351 ( 93.55%) 757.55
http(s) 8136043 ( 34.91%) 10299902305 ( 64.60%) 1265.96
http(c) 4943235 ( 21.21%) 930096578 ( 5.83%) 188.16
squid 303240 ( 1.30%) 53302424 ( 0.33%) 175.78
smtp 641085 ( 2.75%) 169071621 ( 1.06%) 263.73
ftp 100383 ( 0.43%) 22160217 ( 0.14%) 220.76
pop3 28355 ( 0.12%) 15280831 ( 0.10%) 538.91
imap 7125 ( 0.03%) 2341565 ( 0.01%) 328.64
telnet 4136 ( 0.02%) 484521 ( 0.00%) 117.15
ssh 1057521 ( 4.54%) 153147044 ( 0.96%) 144.82
dns 3851 ( 0.02%) 532580 ( 0.00%) 138.30
bgp 153 ( 0.00%) 56981 ( 0.00%) 372.42
napster 26 ( 0.00%) 5166 ( 0.00%) 198.69
realaud 25 ( 0.00%) 1752 ( 0.00%) 70.08
rtsp 169139 ( 0.73%) 174062024 ( 1.09%) 1029.11
icecast 1335191 ( 5.73%) 1137951457 ( 7.14%) 852.28
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2959035 ( 12.70%) 1956687923 ( 12.27%) 661.26
udp 2416647 ( 10.37%) 834877124 ( 5.24%) 345.47
dns 1226427 ( 5.26%) 223921872 ( 1.40%) 182.58
realaud 8269 ( 0.04%) 2965191 ( 0.02%) 358.59
halflif 27 ( 0.00%) 3070 ( 0.00%) 113.70
starcra 20 ( 0.00%) 2596 ( 0.00%) 129.80
everque 62 ( 0.00%) 8131 ( 0.00%) 131.15
unreal 10 ( 0.00%) 1452 ( 0.00%) 145.20
quake 32 ( 0.00%) 3431 ( 0.00%) 107.22
cuseeme 15 ( 0.00%) 1628 ( 0.00%) 108.53
other 1181765 ( 5.07%) 607961830 ( 3.81%) 514.45
icmp 969534 ( 4.16%) 85892581 ( 0.54%) 88.59
ipip 320 ( 0.00%) 38928 ( 0.00%) 121.65
ipsec 9086 ( 0.04%) 2177602 ( 0.01%) 239.67
ip6 935 ( 0.00%) 118208 ( 0.00%) 126.43
other 138251 ( 0.59%) 27087422 ( 0.17%) 195.93
frag 1700 ( 0.01%) 1422633 ( 0.01%) 836.84
ip6 80560 ( 0.35%) 78598953 ( 0.49%) 975.66
tcp6 59432 ( 0.26%) 75114582 ( 0.47%) 1263.87
http(s) 1049 ( 0.00%) 983626 ( 0.01%) 937.68
http(c) 3661 ( 0.02%) 349170 ( 0.00%) 95.38
smtp 554 ( 0.00%) 293143 ( 0.00%) 529.14
pop3 56 ( 0.00%) 6262 ( 0.00%) 111.82
ssh 702 ( 0.00%) 142688 ( 0.00%) 203.26
dns 21 ( 0.00%) 3815 ( 0.00%) 181.67
bgp 398 ( 0.00%) 35794 ( 0.00%) 89.93
other 52991 ( 0.23%) 73300084 ( 0.46%) 1383.26
udp6 15199 ( 0.07%) 2643852 ( 0.02%) 173.95
dns 15177 ( 0.07%) 2641432 ( 0.02%) 174.04
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 5887 ( 0.03%) 825878 ( 0.01%) 140.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10561 ( 0.00%) 880.08
tcpdump file: 200808201400.dump.gz (581.46 MB)