Traffic Trace Info
DumpFile: 200808221400.dump
FileSize: 1635.90MB
Id: 200808221400
StartTime: Fri Aug 22 14:00:00 2008
EndTime: Fri Aug 22 14:15:00 2008
TotalTime: 900.03 seconds
TotalCapSize: 1283.67MB CapLen: 96 bytes
# of packets: 23083428 (18139.22MB)
AvgRate: 169.12Mbps stddev:44.14M
IP flow (unique src/dst pair) Information
# of flows: 529179 (avg. 43.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
34.7% 1.4% 1.0% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 268187
Top 10 bandwidth usage (bytes/total in %):
34.8% 34.7% 9.7% 2.7% 2.5% 2.4% 2.0% 1.7% 1.6% 1.5%
# of IPv6 addresses: 893
Top 10 bandwidth usage (bytes/total in %):
85.6% 85.5% 2.1% 2.1% 1.2% 1.2% 0.9% 0.7% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808221400.pktlen.png)
detailed numbers
[ 32- 63]: 3990260
[ 64- 127]: 4624894
[ 128- 255]: 1350175
[ 256- 511]: 541910
[ 512- 1023]: 621485
[ 1024- 2047]: 11954704
Protocol Breakdown
![[protocol breakdown chart]](200808221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23083428 (100.00%) 19020350596 (100.00%) 823.98
ip 23033056 ( 99.78%) 18985676325 ( 99.82%) 824.28
tcp 18964720 ( 82.16%) 17717869413 ( 93.15%) 934.25
http(s) 11345082 ( 49.15%) 15464493680 ( 81.30%) 1363.10
http(c) 4188772 ( 18.15%) 592219507 ( 3.11%) 141.38
squid 262685 ( 1.14%) 94448215 ( 0.50%) 359.55
smtp 752870 ( 3.26%) 212059600 ( 1.11%) 281.67
ftp 88690 ( 0.38%) 22417266 ( 0.12%) 252.76
pop3 27228 ( 0.12%) 15146492 ( 0.08%) 556.28
imap 11526 ( 0.05%) 5886402 ( 0.03%) 510.71
telnet 2624 ( 0.01%) 507619 ( 0.00%) 193.45
ssh 387822 ( 1.68%) 60919918 ( 0.32%) 157.08
dns 5525 ( 0.02%) 819763 ( 0.00%) 148.37
bgp 165 ( 0.00%) 57730 ( 0.00%) 349.88
napster 22 ( 0.00%) 3076 ( 0.00%) 139.82
realaud 60 ( 0.00%) 6429 ( 0.00%) 107.15
rtsp 123543 ( 0.54%) 135384989 ( 0.71%) 1095.85
icecast 33117 ( 0.14%) 26129957 ( 0.14%) 789.02
other 1734987 ( 7.52%) 1087368650 ( 5.72%) 626.73
udp 3202463 ( 13.87%) 1187142326 ( 6.24%) 370.70
dns 1330297 ( 5.76%) 236277443 ( 1.24%) 177.61
realaud 41984 ( 0.18%) 31781644 ( 0.17%) 756.99
halflif 6 ( 0.00%) 511 ( 0.00%) 85.17
starcra 9 ( 0.00%) 1437 ( 0.00%) 159.67
everque 39 ( 0.00%) 6162 ( 0.00%) 158.00
unreal 8 ( 0.00%) 693 ( 0.00%) 86.62
quake 24 ( 0.00%) 2314 ( 0.00%) 96.42
cuseeme 3 ( 0.00%) 231 ( 0.00%) 77.00
other 1830044 ( 7.93%) 919059532 ( 4.83%) 502.21
icmp 842239 ( 3.65%) 76669087 ( 0.40%) 91.03
ipip 316 ( 0.00%) 37320 ( 0.00%) 118.10
ipsec 4381 ( 0.02%) 846070 ( 0.00%) 193.12
ip6 1023 ( 0.00%) 124118 ( 0.00%) 121.33
other 17914 ( 0.08%) 2987991 ( 0.02%) 166.80
frag 11823 ( 0.05%) 9232025 ( 0.05%) 780.85
ip6 50372 ( 0.22%) 34674271 ( 0.18%) 688.36
tcp6 31848 ( 0.14%) 31495038 ( 0.17%) 988.92
http(s) 152 ( 0.00%) 172503 ( 0.00%) 1134.89
http(c) 3990 ( 0.02%) 380337 ( 0.00%) 95.32
smtp 464 ( 0.00%) 169082 ( 0.00%) 364.40
ssh 3099 ( 0.01%) 737154 ( 0.00%) 237.87
dns 20 ( 0.00%) 2012 ( 0.00%) 100.60
bgp 403 ( 0.00%) 36716 ( 0.00%) 91.11
other 23720 ( 0.10%) 29997234 ( 0.16%) 1264.64
udp6 13231 ( 0.06%) 2417581 ( 0.01%) 182.72
dns 13186 ( 0.06%) 2412634 ( 0.01%) 182.97
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 44 ( 0.00%) 4840 ( 0.00%) 110.00
icmp6 5251 ( 0.02%) 749159 ( 0.00%) 142.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 8413 ( 0.00%) 701.08
tcpdump file: 200808221400.dump.gz (555.34 MB)