Traffic Trace Info
DumpFile: 200808091400.dump
FileSize: 940.14MB
Id: 200808091400
StartTime: Sat Aug 9 14:00:01 2008
EndTime: Sat Aug 9 14:15:00 2008
TotalTime: 899.41 seconds
TotalCapSize: 736.48MB CapLen: 96 bytes
# of packets: 13346361 (9517.73MB)
AvgRate: 88.78Mbps stddev:22.50M
IP flow (unique src/dst pair) Information
# of flows: 535448 (avg. 24.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.4% 3.3% 1.7% 1.5% 1.5% 1.5% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 340222
Top 10 bandwidth usage (bytes/total in %):
14.8% 9.8% 9.2% 4.4% 4.4% 4.4% 3.4% 3.4% 3.3% 3.1%
# of IPv6 addresses: 804
Top 10 bandwidth usage (bytes/total in %):
26.0% 18.9% 11.3% 9.6% 8.9% 8.8% 7.5% 7.1% 6.8% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808091400.pktlen.png)
detailed numbers
[ 32- 63]: 2367228
[ 64- 127]: 3492581
[ 128- 255]: 693351
[ 256- 511]: 296627
[ 512- 1023]: 331156
[ 1024- 2047]: 6165418
Protocol Breakdown
![[protocol breakdown chart]](200808091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13346361 (100.00%) 9980062534 (100.00%) 747.77
ip 13264784 ( 99.39%) 9970452721 ( 99.90%) 751.65
tcp 10917098 ( 81.80%) 9548370468 ( 95.67%) 874.63
http(s) 5618543 ( 42.10%) 7668589955 ( 76.84%) 1364.87
http(c) 2854626 ( 21.39%) 245066684 ( 2.46%) 85.85
squid 204965 ( 1.54%) 103540136 ( 1.04%) 505.16
smtp 391452 ( 2.93%) 74510092 ( 0.75%) 190.34
ftp 50784 ( 0.38%) 22517812 ( 0.23%) 443.40
pop3 19485 ( 0.15%) 13454129 ( 0.13%) 690.49
imap 3416 ( 0.03%) 863508 ( 0.01%) 252.78
telnet 85798 ( 0.64%) 6344710 ( 0.06%) 73.95
ssh 5990 ( 0.04%) 1679519 ( 0.02%) 280.39
dns 2477 ( 0.02%) 255951 ( 0.00%) 103.33
bgp 191 ( 0.00%) 48956 ( 0.00%) 256.31
napster 28 ( 0.00%) 2232 ( 0.00%) 79.71
realaud 32 ( 0.00%) 5767 ( 0.00%) 180.22
rtsp 176100 ( 1.32%) 238230796 ( 2.39%) 1352.82
icecast 26431 ( 0.20%) 23087870 ( 0.23%) 873.51
hotline 5 ( 0.00%) 1881 ( 0.00%) 376.20
other 1476774 ( 11.06%) 1150170410 ( 11.52%) 778.84
udp 1389733 ( 10.41%) 335727239 ( 3.36%) 241.58
dns 860463 ( 6.45%) 155987955 ( 1.56%) 181.28
realaud 25 ( 0.00%) 3638 ( 0.00%) 145.52
halflif 23 ( 0.00%) 3076 ( 0.00%) 133.74
starcra 49 ( 0.00%) 8964 ( 0.00%) 182.94
everque 229 ( 0.00%) 23946 ( 0.00%) 104.57
unreal 25 ( 0.00%) 3098 ( 0.00%) 123.92
quake 49 ( 0.00%) 6015 ( 0.00%) 122.76
cuseeme 9 ( 0.00%) 1251 ( 0.00%) 139.00
other 527518 ( 3.95%) 177868986 ( 1.78%) 337.18
icmp 948165 ( 7.10%) 85056951 ( 0.85%) 89.71
ipip 315 ( 0.00%) 38784 ( 0.00%) 123.12
ipsec 2967 ( 0.02%) 397578 ( 0.00%) 134.00
ip6 898 ( 0.01%) 108266 ( 0.00%) 120.56
other 5608 ( 0.04%) 753435 ( 0.01%) 134.35
frag 6591 ( 0.05%) 7505622 ( 0.08%) 1138.77
ip6 81577 ( 0.61%) 9609813 ( 0.10%) 117.80
tcp6 64430 ( 0.48%) 6608253 ( 0.07%) 102.56
http(s) 14 ( 0.00%) 11361 ( 0.00%) 811.50
http(c) 47853 ( 0.36%) 5236356 ( 0.05%) 109.43
smtp 521 ( 0.00%) 64973 ( 0.00%) 124.71
pop3 58 ( 0.00%) 6447 ( 0.00%) 111.16
ssh 73 ( 0.00%) 8438 ( 0.00%) 115.59
bgp 824 ( 0.01%) 72314 ( 0.00%) 87.76
rtsp 11413 ( 0.09%) 849857 ( 0.01%) 74.46
other 3674 ( 0.03%) 358507 ( 0.00%) 97.58
udp6 11232 ( 0.08%) 2200760 ( 0.02%) 195.94
dns 11208 ( 0.08%) 2198112 ( 0.02%) 196.12
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
other 23 ( 0.00%) 2530 ( 0.00%) 110.00
icmp6 5880 ( 0.04%) 793134 ( 0.01%) 134.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3450 ( 0.00%) 862.50
tcpdump file: 200808091400.dump.gz (318.70 MB)