Traffic Trace Info
DumpFile: 200808031400.dump
FileSize: 888.94MB
Id: 200808031400
StartTime: Sun Aug 3 14:00:00 2008
EndTime: Sun Aug 3 14:15:00 2008
TotalTime: 899.93 seconds
TotalCapSize: 690.26MB CapLen: 96 bytes
# of packets: 13019949 (8381.53MB)
AvgRate: 78.10Mbps stddev:12.83M
IP flow (unique src/dst pair) Information
# of flows: 643782 (avg. 20.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.7% 1.4% 1.3% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 404391
Top 10 bandwidth usage (bytes/total in %):
15.6% 7.7% 5.6% 5.0% 3.8% 3.7% 3.2% 3.1% 2.8% 2.4%
# of IPv6 addresses: 822
Top 10 bandwidth usage (bytes/total in %):
14.6% 14.4% 14.1% 13.0% 13.0% 10.5% 9.4% 5.7% 4.7% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808031400.pktlen.png)
detailed numbers
[ 32- 63]: 2860337
[ 64- 127]: 3344756
[ 128- 255]: 629110
[ 256- 511]: 404200
[ 512- 1023]: 437730
[ 1024- 2047]: 5343816
Protocol Breakdown
![[protocol breakdown chart]](200808031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13019949 (100.00%) 8788672919 (100.00%) 675.02
ip 12972141 ( 99.63%) 8782648228 ( 99.93%) 677.04
tcp 9658070 ( 74.18%) 7510541386 ( 85.46%) 777.64
http(s) 4110120 ( 31.57%) 5528714700 ( 62.91%) 1345.15
http(c) 2600973 ( 19.98%) 328571224 ( 3.74%) 126.33
squid 80856 ( 0.62%) 36182976 ( 0.41%) 447.50
smtp 599013 ( 4.60%) 119333949 ( 1.36%) 199.22
ftp 394421 ( 3.03%) 375061858 ( 4.27%) 950.92
pop3 20255 ( 0.16%) 10634297 ( 0.12%) 525.02
imap 4404 ( 0.03%) 1015378 ( 0.01%) 230.56
telnet 21614 ( 0.17%) 1602661 ( 0.02%) 74.15
ssh 201488 ( 1.55%) 65080128 ( 0.74%) 323.00
dns 3988 ( 0.03%) 423399 ( 0.00%) 106.17
bgp 186 ( 0.00%) 44856 ( 0.00%) 241.16
napster 11 ( 0.00%) 660 ( 0.00%) 60.00
rtsp 75464 ( 0.58%) 76069762 ( 0.87%) 1008.03
icecast 72510 ( 0.56%) 40028484 ( 0.46%) 552.04
other 1472767 ( 11.31%) 927777054 ( 10.56%) 629.96
udp 2867972 ( 22.03%) 1231208082 ( 14.01%) 429.30
dns 928234 ( 7.13%) 187607123 ( 2.13%) 202.11
realaud 4608 ( 0.04%) 284261 ( 0.00%) 61.69
halflif 8 ( 0.00%) 998 ( 0.00%) 124.75
starcra 21 ( 0.00%) 3104 ( 0.00%) 147.81
everque 103 ( 0.00%) 20144 ( 0.00%) 195.57
unreal 16 ( 0.00%) 3967 ( 0.00%) 247.94
quake 14 ( 0.00%) 1285 ( 0.00%) 91.79
cuseeme 6 ( 0.00%) 606 ( 0.00%) 101.00
other 1934945 ( 14.86%) 1043277885 ( 11.87%) 539.18
icmp 431880 ( 3.32%) 38816692 ( 0.44%) 89.88
ipip 314 ( 0.00%) 37012 ( 0.00%) 117.87
ipsec 2964 ( 0.02%) 397176 ( 0.00%) 134.00
ip6 4643 ( 0.04%) 463082 ( 0.01%) 99.74
other 6298 ( 0.05%) 1184798 ( 0.01%) 188.12
frag 15695 ( 0.12%) 13623448 ( 0.16%) 868.01
ip6 47808 ( 0.37%) 6024691 ( 0.07%) 126.02
tcp6 31150 ( 0.24%) 3451369 ( 0.04%) 110.80
http(s) 9 ( 0.00%) 1591 ( 0.00%) 176.78
http(c) 6008 ( 0.05%) 1328399 ( 0.02%) 221.11
smtp 161 ( 0.00%) 45878 ( 0.00%) 284.96
ftp 8837 ( 0.07%) 783542 ( 0.01%) 88.67
pop3 72 ( 0.00%) 7742 ( 0.00%) 107.53
ssh 109 ( 0.00%) 16510 ( 0.00%) 151.47
bgp 1318 ( 0.01%) 109569 ( 0.00%) 83.13
rtsp 11451 ( 0.09%) 851844 ( 0.01%) 74.39
other 3185 ( 0.02%) 306294 ( 0.00%) 96.17
udp6 9573 ( 0.07%) 1633929 ( 0.02%) 170.68
dns 9537 ( 0.07%) 1629800 ( 0.02%) 170.89
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
other 35 ( 0.00%) 4020 ( 0.00%) 114.86
icmp6 7055 ( 0.05%) 935313 ( 0.01%) 132.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200808031400.dump.gz (317.31 MB)