Traffic Trace Info
DumpFile: 200808171400.dump
FileSize: 1060.03MB
Id: 200808171400
StartTime: Sun Aug 17 14:00:01 2008
EndTime: Sun Aug 17 14:15:00 2008
TotalTime: 899.38 seconds
TotalCapSize: 828.44MB CapLen: 96 bytes
# of packets: 15176424 (10406.74MB)
AvgRate: 97.03Mbps stddev:19.79M
IP flow (unique src/dst pair) Information
# of flows: 472404 (avg. 32.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 279147
Top 10 bandwidth usage (bytes/total in %):
14.1% 9.9% 9.2% 6.3% 4.3% 3.7% 3.5% 3.2% 3.2% 2.2%
# of IPv6 addresses: 845
Top 10 bandwidth usage (bytes/total in %):
93.4% 93.4% 0.7% 0.6% 0.5% 0.4% 0.4% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808171400.pktlen.png)
detailed numbers
[ 32- 63]: 2859364
[ 64- 127]: 4085558
[ 128- 255]: 630702
[ 256- 511]: 394983
[ 512- 1023]: 516036
[ 1024- 2047]: 6689781
Protocol Breakdown
![[protocol breakdown chart]](200808171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15176424 (100.00%) 10912261553 (100.00%) 719.03
ip 15117124 ( 99.61%) 10856695833 ( 99.49%) 718.17
tcp 11982868 ( 78.96%) 9763679275 ( 89.47%) 814.80
http(s) 6069357 ( 39.99%) 8164735566 ( 74.82%) 1345.24
http(c) 3378407 ( 22.26%) 371528857 ( 3.40%) 109.97
squid 202297 ( 1.33%) 150890117 ( 1.38%) 745.88
smtp 498950 ( 3.29%) 76857642 ( 0.70%) 154.04
ftp 161771 ( 1.07%) 81206777 ( 0.74%) 501.99
pop3 11499 ( 0.08%) 4082436 ( 0.04%) 355.03
imap 3021 ( 0.02%) 470324 ( 0.00%) 155.68
telnet 717 ( 0.00%) 45422 ( 0.00%) 63.35
ssh 18119 ( 0.12%) 10181532 ( 0.09%) 561.93
dns 2535 ( 0.02%) 229903 ( 0.00%) 90.69
bgp 139 ( 0.00%) 33252 ( 0.00%) 239.22
napster 30 ( 0.00%) 2212 ( 0.00%) 73.73
realaud 31 ( 0.00%) 2162 ( 0.00%) 69.74
rtsp 30320 ( 0.20%) 9493853 ( 0.09%) 313.12
icecast 806 ( 0.01%) 63271 ( 0.00%) 78.50
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1604863 ( 10.57%) 893855589 ( 8.19%) 556.97
udp 2266931 ( 14.94%) 1014861964 ( 9.30%) 447.68
dns 836422 ( 5.51%) 151368867 ( 1.39%) 180.97
realaud 3450 ( 0.02%) 741093 ( 0.01%) 214.81
halflif 16 ( 0.00%) 2181 ( 0.00%) 136.31
starcra 15 ( 0.00%) 2066 ( 0.00%) 137.73
everque 38 ( 0.00%) 5723 ( 0.00%) 150.61
unreal 5 ( 0.00%) 463 ( 0.00%) 92.60
quake 19 ( 0.00%) 2056 ( 0.00%) 108.21
cuseeme 5 ( 0.00%) 471 ( 0.00%) 94.20
other 1426796 ( 9.40%) 862720983 ( 7.91%) 604.66
icmp 843869 ( 5.56%) 75146711 ( 0.69%) 89.05
ipip 308 ( 0.00%) 36964 ( 0.00%) 120.01
ipsec 2967 ( 0.02%) 397578 ( 0.00%) 134.00
ip6 992 ( 0.01%) 122216 ( 0.00%) 123.20
other 19189 ( 0.13%) 2451125 ( 0.02%) 127.74
frag 2860 ( 0.02%) 2301557 ( 0.02%) 804.74
ip6 59300 ( 0.39%) 55565720 ( 0.51%) 937.03
tcp6 44162 ( 0.29%) 53147140 ( 0.49%) 1203.46
http(s) 115 ( 0.00%) 128064 ( 0.00%) 1113.60
http(c) 4131 ( 0.03%) 383657 ( 0.00%) 92.87
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 579 ( 0.00%) 180345 ( 0.00%) 311.48
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 540 ( 0.00%) 219948 ( 0.00%) 407.31
bgp 404 ( 0.00%) 36491 ( 0.00%) 90.32
other 38359 ( 0.25%) 52195711 ( 0.48%) 1360.72
udp6 9712 ( 0.06%) 1686700 ( 0.02%) 173.67
dns 9692 ( 0.06%) 1684503 ( 0.02%) 173.80
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 19 ( 0.00%) 2090 ( 0.00%) 110.00
icmp6 5386 ( 0.04%) 719453 ( 0.01%) 133.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8347 ( 0.00%) 834.70
tcpdump file: 200808171400.dump.gz (370.00 MB)