Traffic Trace Info
DumpFile: 200808281400.dump
FileSize: 1522.47MB
Id: 200808281400
StartTime: Thu Aug 28 14:00:00 2008
EndTime: Thu Aug 28 14:15:00 2008
TotalTime: 899.81 seconds
TotalCapSize: 1193.55MB CapLen: 96 bytes
# of packets: 21555424 (15056.71MB)
AvgRate: 140.39Mbps stddev:26.77M
IP flow (unique src/dst pair) Information
# of flows: 522069 (avg. 41.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.9% 1.6% 1.6% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 278033
Top 10 bandwidth usage (bytes/total in %):
11.7% 6.4% 6.0% 5.9% 5.1% 4.6% 2.5% 2.4% 2.4% 2.3%
# of IPv6 addresses: 968
Top 10 bandwidth usage (bytes/total in %):
21.3% 21.1% 15.4% 10.9% 10.9% 8.0% 7.0% 5.0% 4.4% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808281400.pktlen.png)
detailed numbers
[ 32- 63]: 4480234
[ 64- 127]: 5454137
[ 128- 255]: 849264
[ 256- 511]: 441535
[ 512- 1023]: 611433
[ 1024- 2047]: 9718821
Protocol Breakdown
![[protocol breakdown chart]](200808281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21555424 (100.00%) 15788105015 (100.00%) 732.44
ip 21518464 ( 99.83%) 15780552499 ( 99.95%) 733.35
tcp 18445661 ( 85.57%) 14953269019 ( 94.71%) 810.67
http(s) 8204471 ( 38.06%) 11052680654 ( 70.01%) 1347.15
http(c) 5527421 ( 25.64%) 776967285 ( 4.92%) 140.57
squid 201301 ( 0.93%) 55207344 ( 0.35%) 274.25
smtp 562439 ( 2.61%) 139816723 ( 0.89%) 248.59
nntp 158 ( 0.00%) 37332 ( 0.00%) 236.28
ftp 50849 ( 0.24%) 6333836 ( 0.04%) 124.56
pop3 12153 ( 0.06%) 5134211 ( 0.03%) 422.46
imap 12898 ( 0.06%) 7980284 ( 0.05%) 618.72
telnet 26977 ( 0.13%) 1996608 ( 0.01%) 74.01
ssh 408673 ( 1.90%) 376653399 ( 2.39%) 921.65
dns 3325 ( 0.02%) 425271 ( 0.00%) 127.90
bgp 164 ( 0.00%) 69214 ( 0.00%) 422.04
napster 39 ( 0.00%) 4054 ( 0.00%) 103.95
rtsp 433782 ( 2.01%) 417414400 ( 2.64%) 962.27
icecast 26198 ( 0.12%) 23098654 ( 0.15%) 881.70
other 2974789 ( 13.80%) 2089448310 ( 13.23%) 702.39
udp 1688734 ( 7.83%) 355655459 ( 2.25%) 210.60
dns 1183244 ( 5.49%) 223794041 ( 1.42%) 189.14
realaud 34775 ( 0.16%) 14275540 ( 0.09%) 410.51
halflif 19 ( 0.00%) 2277 ( 0.00%) 119.84
starcra 23 ( 0.00%) 3160 ( 0.00%) 137.39
everque 63 ( 0.00%) 9147 ( 0.00%) 145.19
unreal 2 ( 0.00%) 143 ( 0.00%) 71.50
quake 24 ( 0.00%) 2511 ( 0.00%) 104.62
cuseeme 6 ( 0.00%) 507 ( 0.00%) 84.50
other 470537 ( 2.18%) 117549817 ( 0.74%) 249.82
icmp 859194 ( 3.99%) 77953299 ( 0.49%) 90.73
ipip 305 ( 0.00%) 36470 ( 0.00%) 119.57
ipsec 423067 ( 1.96%) 375482408 ( 2.38%) 887.52
ip6 1066 ( 0.00%) 156848 ( 0.00%) 147.14
other 100437 ( 0.47%) 17998996 ( 0.11%) 179.21
frag 1844 ( 0.01%) 1554051 ( 0.01%) 842.76
ip6 36960 ( 0.17%) 7552516 ( 0.05%) 204.34
tcp6 11093 ( 0.05%) 3514599 ( 0.02%) 316.83
http(s) 113 ( 0.00%) 161828 ( 0.00%) 1432.11
http(c) 4151 ( 0.02%) 410662 ( 0.00%) 98.93
smtp 223 ( 0.00%) 64425 ( 0.00%) 288.90
ftp 35 ( 0.00%) 3821 ( 0.00%) 109.17
pop3 95 ( 0.00%) 9597 ( 0.00%) 101.02
imap 855 ( 0.00%) 823862 ( 0.01%) 963.58
ssh 115 ( 0.00%) 30918 ( 0.00%) 268.85
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 398 ( 0.00%) 36157 ( 0.00%) 90.85
other 5101 ( 0.02%) 1972694 ( 0.01%) 386.73
udp6 14348 ( 0.07%) 2642301 ( 0.02%) 184.16
dns 14332 ( 0.07%) 2640541 ( 0.02%) 184.24
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 11481 ( 0.05%) 1385434 ( 0.01%) 120.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 6102 ( 0.00%) 762.75
tcpdump file: 200808281400.dump.gz (524.87 MB)