Traffic Trace Info
DumpFile: 200808291400.dump
FileSize: 1437.42MB
Id: 200808291400
StartTime: Fri Aug 29 14:00:01 2008
EndTime: Fri Aug 29 14:15:00 2008
TotalTime: 899.24 seconds
TotalCapSize: 1126.04MB CapLen: 96 bytes
# of packets: 20405951 (14442.25MB)
AvgRate: 134.75Mbps stddev:22.05M
IP flow (unique src/dst pair) Information
# of flows: 533847 (avg. 38.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.7% 1.6% 1.4% 1.2% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 271884
Top 10 bandwidth usage (bytes/total in %):
13.4% 10.2% 6.2% 5.7% 4.0% 3.9% 2.8% 2.5% 2.4% 1.9%
# of IPv6 addresses: 1014
Top 10 bandwidth usage (bytes/total in %):
17.7% 17.3% 10.7% 6.7% 6.3% 5.7% 4.5% 4.1% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808291400.pktlen.png)
detailed numbers
[ 32- 63]: 4355327
[ 64- 127]: 4860407
[ 128- 255]: 816089
[ 256- 511]: 479945
[ 512- 1023]: 566437
[ 1024- 2047]: 9327746
Protocol Breakdown
![[protocol breakdown chart]](200808291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20405951 (100.00%) 15143792575 (100.00%) 742.13
ip 20363262 ( 99.79%) 15137918727 ( 99.96%) 743.39
tcp 17815771 ( 87.31%) 14692645127 ( 97.02%) 824.70
http(s) 8383342 ( 41.08%) 11098406032 ( 73.29%) 1323.86
http(c) 5124916 ( 25.11%) 628887984 ( 4.15%) 122.71
squid 165565 ( 0.81%) 61745828 ( 0.41%) 372.94
smtp 627474 ( 3.07%) 177015695 ( 1.17%) 282.11
nntp 60 ( 0.00%) 4708 ( 0.00%) 78.47
ftp 105343 ( 0.52%) 31680826 ( 0.21%) 300.74
pop3 72673 ( 0.36%) 80856522 ( 0.53%) 1112.61
imap 5309 ( 0.03%) 1429341 ( 0.01%) 269.23
telnet 874 ( 0.00%) 76578 ( 0.00%) 87.62
ssh 469666 ( 2.30%) 415592581 ( 2.74%) 884.87
dns 3998 ( 0.02%) 367769 ( 0.00%) 91.99
bgp 164 ( 0.00%) 69652 ( 0.00%) 424.71
napster 18 ( 0.00%) 1523 ( 0.00%) 84.61
realaud 15 ( 0.00%) 1737 ( 0.00%) 115.80
rtsp 146080 ( 0.72%) 173575544 ( 1.15%) 1188.22
icecast 30544 ( 0.15%) 37736936 ( 0.25%) 1235.49
hotline 32 ( 0.00%) 2772 ( 0.00%) 86.62
other 2679694 ( 13.13%) 1985192859 ( 13.11%) 740.83
udp 1742460 ( 8.54%) 364249593 ( 2.41%) 209.04
dns 1289840 ( 6.32%) 236039464 ( 1.56%) 183.00
realaud 16133 ( 0.08%) 5914591 ( 0.04%) 366.61
halflif 21 ( 0.00%) 4623 ( 0.00%) 220.14
starcra 22 ( 0.00%) 2197 ( 0.00%) 99.86
everque 50 ( 0.00%) 8051 ( 0.00%) 161.02
unreal 11 ( 0.00%) 1819 ( 0.00%) 165.36
quake 23 ( 0.00%) 2275 ( 0.00%) 98.91
cuseeme 6 ( 0.00%) 478 ( 0.00%) 79.67
other 436329 ( 2.14%) 122265507 ( 0.81%) 280.21
icmp 797215 ( 3.91%) 79800410 ( 0.53%) 100.10
ipip 291 ( 0.00%) 34222 ( 0.00%) 117.60
ipsec 4783 ( 0.02%) 811914 ( 0.01%) 169.75
ip6 979 ( 0.00%) 117886 ( 0.00%) 120.41
other 1763 ( 0.01%) 259575 ( 0.00%) 147.23
frag 1766 ( 0.01%) 1455402 ( 0.01%) 824.12
ip6 42689 ( 0.21%) 5873848 ( 0.04%) 137.60
tcp6 22573 ( 0.11%) 2658184 ( 0.02%) 117.76
http(s) 142 ( 0.00%) 191269 ( 0.00%) 1346.96
http(c) 16082 ( 0.08%) 1428182 ( 0.01%) 88.81
smtp 636 ( 0.00%) 200589 ( 0.00%) 315.39
pop3 61 ( 0.00%) 6638 ( 0.00%) 108.82
ssh 932 ( 0.00%) 370728 ( 0.00%) 397.78
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 404 ( 0.00%) 37034 ( 0.00%) 91.67
other 4309 ( 0.02%) 423109 ( 0.00%) 98.19
udp6 12972 ( 0.06%) 2344516 ( 0.02%) 180.74
dns 12958 ( 0.06%) 2342976 ( 0.02%) 180.81
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 7101 ( 0.03%) 856041 ( 0.01%) 120.55
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 12 ( 0.00%) 10891 ( 0.00%) 907.58
tcpdump file: 200808291400.dump.gz (508.10 MB)