Traffic Trace Info
DumpFile: 200808211400.dump
FileSize: 1787.38MB
Id: 200808211400
StartTime: Thu Aug 21 14:00:00 2008
EndTime: Thu Aug 21 14:15:01 2008
TotalTime: 900.47 seconds
TotalCapSize: 1404.69MB CapLen: 96 bytes
# of packets: 25079379 (18246.27MB)
AvgRate: 169.98Mbps stddev:27.57M
IP flow (unique src/dst pair) Information
# of flows: 552529 (avg. 45.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.5% 3.0% 2.3% 1.7% 1.4% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 281662
Top 10 bandwidth usage (bytes/total in %):
22.0% 22.0% 9.8% 5.2% 3.7% 3.0% 3.0% 2.9% 2.7% 2.3%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.5% 7.5% 7.4% 6.7% 4.4% 4.4% 4.4% 3.5% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808211400.pktlen.png)
detailed numbers
[ 32- 63]: 4358088
[ 64- 127]: 6604530
[ 128- 255]: 911223
[ 256- 511]: 542696
[ 512- 1023]: 802767
[ 1024- 2047]: 11860075
Protocol Breakdown
![[protocol breakdown chart]](200808211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25079379 (100.00%) 19132598349 (100.00%) 762.88
ip 25048203 ( 99.88%) 19127097867 ( 99.97%) 763.61
tcp 21548602 ( 85.92%) 17789642017 ( 92.98%) 825.56
http(s) 7711151 ( 30.75%) 10052781621 ( 52.54%) 1303.67
http(c) 5081330 ( 20.26%) 943326849 ( 4.93%) 185.65
squid 290348 ( 1.16%) 58809006 ( 0.31%) 202.55
smtp 803299 ( 3.20%) 206324006 ( 1.08%) 256.85
nntp 376 ( 0.00%) 38445 ( 0.00%) 102.25
ftp 113005 ( 0.45%) 36851667 ( 0.19%) 326.11
pop3 35605 ( 0.14%) 15045746 ( 0.08%) 422.57
imap 6456 ( 0.03%) 1222449 ( 0.01%) 189.35
telnet 32901 ( 0.13%) 2705089 ( 0.01%) 82.22
ssh 374454 ( 1.49%) 214873395 ( 1.12%) 573.83
dns 3620 ( 0.01%) 337845 ( 0.00%) 93.33
bgp 171 ( 0.00%) 72135 ( 0.00%) 421.84
realaud 22 ( 0.00%) 1488 ( 0.00%) 67.64
rtsp 230275 ( 0.92%) 267434393 ( 1.40%) 1161.37
icecast 15730 ( 0.06%) 22620072 ( 0.12%) 1438.02
other 6849858 ( 27.31%) 5967197751 ( 31.19%) 871.14
udp 2577802 ( 10.28%) 1245868902 ( 6.51%) 483.31
dns 1333083 ( 5.32%) 236248896 ( 1.23%) 177.22
realaud 19913 ( 0.08%) 8373706 ( 0.04%) 420.51
halflif 17 ( 0.00%) 2209 ( 0.00%) 129.94
starcra 15 ( 0.00%) 2445 ( 0.00%) 163.00
everque 82 ( 0.00%) 11598 ( 0.00%) 141.44
unreal 14 ( 0.00%) 5382 ( 0.00%) 384.43
quake 30 ( 0.00%) 3339 ( 0.00%) 111.30
cuseeme 26 ( 0.00%) 3328 ( 0.00%) 128.00
other 1224588 ( 4.88%) 1001207601 ( 5.23%) 817.59
icmp 845540 ( 3.37%) 77679441 ( 0.41%) 91.87
ipip 330 ( 0.00%) 38704 ( 0.00%) 117.28
ipsec 9864 ( 0.04%) 2353942 ( 0.01%) 238.64
ip6 904 ( 0.00%) 110118 ( 0.00%) 121.81
other 65161 ( 0.26%) 11404743 ( 0.06%) 175.02
frag 1835 ( 0.01%) 1509378 ( 0.01%) 822.55
ip6 31176 ( 0.12%) 5500482 ( 0.03%) 176.43
tcp6 11111 ( 0.04%) 2063097 ( 0.01%) 185.68
http(s) 670 ( 0.00%) 541498 ( 0.00%) 808.21
http(c) 3663 ( 0.01%) 354532 ( 0.00%) 96.79
smtp 441 ( 0.00%) 133646 ( 0.00%) 303.05
pop3 50 ( 0.00%) 5792 ( 0.00%) 115.84
imap 829 ( 0.00%) 413426 ( 0.00%) 498.70
ssh 294 ( 0.00%) 110872 ( 0.00%) 377.12
bgp 402 ( 0.00%) 36710 ( 0.00%) 91.32
other 4762 ( 0.02%) 466621 ( 0.00%) 97.99
udp6 14122 ( 0.06%) 2604782 ( 0.01%) 184.45
dns 14107 ( 0.06%) 2603125 ( 0.01%) 184.53
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 5884 ( 0.02%) 804717 ( 0.00%) 136.76
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 28 ( 0.00%) 23670 ( 0.00%) 845.36
tcpdump file: 200808211400.dump.gz (601.52 MB)