Traffic Trace Info
DumpFile: 200805251400.dump
FileSize: 909.44MB
Id: 200805251400
StartTime: Sun May 25 14:00:00 2008
EndTime: Sun May 25 14:15:00 2008
TotalTime: 899.95 seconds
TotalCapSize: 713.97MB CapLen: 96 bytes
# of packets: 12809750 (7071.72MB)
AvgRate: 65.93Mbps stddev:11.14M
IP flow (unique src/dst pair) Information
# of flows: 560722 (avg. 22.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.4% 2.1% 1.7% 1.5% 1.5% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 296013
Top 10 bandwidth usage (bytes/total in %):
8.2% 4.4% 4.3% 3.6% 3.3% 3.1% 2.8% 2.4% 2.2% 2.2%
# of IPv6 addresses: 1632
Top 10 bandwidth usage (bytes/total in %):
15.2% 11.1% 6.4% 5.2% 5.2% 5.1% 5.0% 4.9% 4.5% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200805251400.pktlen.png)
detailed numbers
[ 32- 63]: 2804355
[ 64- 127]: 4007145
[ 128- 255]: 834945
[ 256- 511]: 469892
[ 512- 1023]: 415485
[ 1024- 2047]: 4277928
Protocol Breakdown
![[protocol breakdown chart]](200805251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12809750 (100.00%) 7415237583 (100.00%) 578.87
ip 12790611 ( 99.85%) 7411945428 ( 99.96%) 579.48
tcp 10647266 ( 83.12%) 6986692403 ( 94.22%) 656.20
http(s) 3293050 ( 25.71%) 4314065471 ( 58.18%) 1310.05
http(c) 2071103 ( 16.17%) 229419005 ( 3.09%) 110.77
squid 818791 ( 6.39%) 349791240 ( 4.72%) 427.20
smtp 699987 ( 5.46%) 170485144 ( 2.30%) 243.55
ftp 210286 ( 1.64%) 183668181 ( 2.48%) 873.42
pop3 9239 ( 0.07%) 2197673 ( 0.03%) 237.87
imap 3908 ( 0.03%) 1216733 ( 0.02%) 311.34
telnet 572 ( 0.00%) 42805 ( 0.00%) 74.83
ssh 1264075 ( 9.87%) 297986061 ( 4.02%) 235.73
dns 3154 ( 0.02%) 268725 ( 0.00%) 85.20
bgp 234 ( 0.00%) 81441 ( 0.00%) 348.04
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 6 ( 0.00%) 812 ( 0.00%) 135.33
rtsp 259483 ( 2.03%) 206886516 ( 2.79%) 797.30
icecast 83219 ( 0.65%) 47052035 ( 0.63%) 565.40
hotline 32 ( 0.00%) 2434 ( 0.00%) 76.06
other 1930045 ( 15.07%) 1183523201 ( 15.96%) 613.21
udp 1662223 ( 12.98%) 382457565 ( 5.16%) 230.09
dns 974355 ( 7.61%) 144912569 ( 1.95%) 148.73
realaud 54095 ( 0.42%) 40009087 ( 0.54%) 739.61
halflif 9 ( 0.00%) 1023 ( 0.00%) 113.67
starcra 23 ( 0.00%) 2907 ( 0.00%) 126.39
everque 40 ( 0.00%) 5858 ( 0.00%) 146.45
unreal 2 ( 0.00%) 206 ( 0.00%) 103.00
quake 17 ( 0.00%) 5648 ( 0.00%) 332.24
cuseeme 2 ( 0.00%) 135 ( 0.00%) 67.50
other 633586 ( 4.95%) 197491181 ( 2.66%) 311.70
icmp 468068 ( 3.65%) 41076214 ( 0.55%) 87.76
ipip 332 ( 0.00%) 40044 ( 0.00%) 120.61
ipsec 1371 ( 0.01%) 218049 ( 0.00%) 159.04
ip6 1017 ( 0.01%) 124120 ( 0.00%) 122.05
other 10334 ( 0.08%) 1337033 ( 0.02%) 129.38
frag 1608 ( 0.01%) 1296295 ( 0.02%) 806.15
ip6 19139 ( 0.15%) 3292155 ( 0.04%) 172.01
tcp6 1904 ( 0.01%) 242193 ( 0.00%) 127.20
http(s) 23 ( 0.00%) 17762 ( 0.00%) 772.26
http(c) 332 ( 0.00%) 34247 ( 0.00%) 103.15
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 95 ( 0.00%) 29285 ( 0.00%) 308.26
pop3 48 ( 0.00%) 4592 ( 0.00%) 95.67
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 1339 ( 0.01%) 149540 ( 0.00%) 111.68
udp6 11981 ( 0.09%) 2385531 ( 0.03%) 199.11
dns 10386 ( 0.08%) 1919413 ( 0.03%) 184.81
unreal 2 ( 0.00%) 255 ( 0.00%) 127.50
other 1593 ( 0.01%) 465863 ( 0.01%) 292.44
icmp6 5217 ( 0.04%) 654641 ( 0.01%) 125.48
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5574 ( 0.00%) 929.00
tcpdump file: 200805251400.dump.gz (342.14 MB)