Traffic Trace Info
DumpFile: 200805111400.dump
FileSize: 922.15MB
Id: 200805111400
StartTime: Sun May 11 14:00:00 2008
EndTime: Sun May 11 14:15:00 2008
TotalTime: 899.88 seconds
TotalCapSize: 723.90MB CapLen: 96 bytes
# of packets: 12992198 (8172.18MB)
AvgRate: 76.19Mbps stddev:12.38M
IP flow (unique src/dst pair) Information
# of flows: 615715 (avg. 21.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 5.9% 2.6% 2.0% 1.6% 1.2% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 336971
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.7% 6.4% 6.4% 6.1% 6.1% 4.0% 4.0% 3.7% 2.7%
# of IPv6 addresses: 1199
Top 10 bandwidth usage (bytes/total in %):
12.3% 8.5% 8.0% 7.9% 7.6% 7.2% 7.2% 5.3% 5.3% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805111400.pktlen.png)
detailed numbers
[ 32- 63]: 2439579
[ 64- 127]: 3653468
[ 128- 255]: 708532
[ 256- 511]: 553267
[ 512- 1023]: 616581
[ 1024- 2047]: 5020771
Protocol Breakdown
![[protocol breakdown chart]](200805111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12992198 (100.00%) 8569147172 (100.00%) 659.56
ip 12974714 ( 99.87%) 8565857223 ( 99.96%) 660.20
tcp 10425738 ( 80.25%) 7991729649 ( 93.26%) 766.54
http(s) 4538384 ( 34.93%) 6159351966 ( 71.88%) 1357.17
http(c) 2543315 ( 19.58%) 232333814 ( 2.71%) 91.35
squid 369626 ( 2.84%) 150332681 ( 1.75%) 406.72
smtp 538352 ( 4.14%) 96694755 ( 1.13%) 179.61
nntp 15 ( 0.00%) 1660 ( 0.00%) 110.67
ftp 88542 ( 0.68%) 76099941 ( 0.89%) 859.48
pop3 7565 ( 0.06%) 2756872 ( 0.03%) 364.42
imap 6363 ( 0.05%) 1612171 ( 0.02%) 253.37
telnet 277 ( 0.00%) 54800 ( 0.00%) 197.83
ssh 58313 ( 0.45%) 12999960 ( 0.15%) 222.93
dns 3563 ( 0.03%) 385990 ( 0.00%) 108.33
bgp 176 ( 0.00%) 45819 ( 0.00%) 260.34
napster 11 ( 0.00%) 973 ( 0.00%) 88.45
realaud 93 ( 0.00%) 13115 ( 0.00%) 141.02
rtsp 300765 ( 2.31%) 294318539 ( 3.43%) 978.57
icecast 24601 ( 0.19%) 22080117 ( 0.26%) 897.53
hotline 28 ( 0.00%) 2281 ( 0.00%) 81.46
other 1945742 ( 14.98%) 942643775 ( 11.00%) 484.46
udp 1915227 ( 14.74%) 514165282 ( 6.00%) 268.46
dns 1443108 ( 11.11%) 326181902 ( 3.81%) 226.03
realaud 98 ( 0.00%) 8593 ( 0.00%) 87.68
halflif 19 ( 0.00%) 2517 ( 0.00%) 132.47
starcra 12 ( 0.00%) 1847 ( 0.00%) 153.92
everque 59 ( 0.00%) 7594 ( 0.00%) 128.71
unreal 11 ( 0.00%) 1221 ( 0.00%) 111.00
quake 4 ( 0.00%) 633 ( 0.00%) 158.25
cuseeme 6 ( 0.00%) 756 ( 0.00%) 126.00
other 471881 ( 3.63%) 187943192 ( 2.19%) 398.29
icmp 555034 ( 4.27%) 48194557 ( 0.56%) 86.83
ipip 422 ( 0.00%) 52862 ( 0.00%) 125.27
ipsec 810 ( 0.01%) 108540 ( 0.00%) 134.00
ip6 699 ( 0.01%) 90405 ( 0.00%) 129.33
other 76784 ( 0.59%) 11515928 ( 0.13%) 149.98
frag 14669 ( 0.11%) 13693272 ( 0.16%) 933.48
ip6 17482 ( 0.13%) 3289829 ( 0.04%) 188.18
tcp6 1981 ( 0.02%) 303140 ( 0.00%) 153.02
http(c) 400 ( 0.00%) 50625 ( 0.00%) 126.56
smtp 365 ( 0.00%) 125972 ( 0.00%) 345.13
pop3 17 ( 0.00%) 1927 ( 0.00%) 113.35
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 64 ( 0.00%) 6662 ( 0.00%) 104.09
other 1127 ( 0.01%) 117245 ( 0.00%) 104.03
udp6 11513 ( 0.09%) 2475830 ( 0.03%) 215.05
dns 10586 ( 0.08%) 2233811 ( 0.03%) 211.02
other 927 ( 0.01%) 242019 ( 0.00%) 261.08
icmp6 3950 ( 0.03%) 499184 ( 0.01%) 126.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7595 ( 0.00%) 949.38
tcpdump file: 200805111400.dump.gz (324.43 MB)