Traffic Trace Info
DumpFile: 200808231400.dump
FileSize: 1176.86MB
Id: 200808231400
StartTime: Sat Aug 23 14:00:00 2008
EndTime: Sat Aug 23 14:15:01 2008
TotalTime: 900.58 seconds
TotalCapSize: 921.58MB CapLen: 96 bytes
# of packets: 16728812 (10281.82MB)
AvgRate: 95.77Mbps stddev:13.93M
IP flow (unique src/dst pair) Information
# of flows: 683633 (avg. 24.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.6% 1.5% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 387845
Top 10 bandwidth usage (bytes/total in %):
15.0% 4.3% 4.3% 3.1% 3.0% 3.0% 2.9% 2.9% 2.6% 2.3%
# of IPv6 addresses: 859
Top 10 bandwidth usage (bytes/total in %):
13.2% 12.7% 6.9% 6.3% 5.9% 5.9% 5.5% 5.2% 5.0% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808231400.pktlen.png)
detailed numbers
[ 32- 63]: 3874063
[ 64- 127]: 4629421
[ 128- 255]: 914006
[ 256- 511]: 404680
[ 512- 1023]: 435205
[ 1024- 2047]: 6471437
Protocol Breakdown
![[protocol breakdown chart]](200808231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16728812 (100.00%) 10781269904 (100.00%) 644.47
ip 16701962 ( 99.84%) 10777417919 ( 99.96%) 645.28
tcp 14096257 ( 84.26%) 10230163702 ( 94.89%) 725.74
http(s) 6014930 ( 35.96%) 8151027084 ( 75.60%) 1355.13
http(c) 3925186 ( 23.46%) 382888768 ( 3.55%) 97.55
squid 388908 ( 2.32%) 82875584 ( 0.77%) 213.10
smtp 604911 ( 3.62%) 168288297 ( 1.56%) 278.20
ftp 165966 ( 0.99%) 110072859 ( 1.02%) 663.23
pop3 35143 ( 0.21%) 16346262 ( 0.15%) 465.14
imap 4934 ( 0.03%) 2133970 ( 0.02%) 432.50
telnet 59629 ( 0.36%) 4425322 ( 0.04%) 74.21
ssh 724500 ( 4.33%) 101852927 ( 0.94%) 140.58
dns 8151 ( 0.05%) 1313796 ( 0.01%) 161.18
bgp 155 ( 0.00%) 61140 ( 0.00%) 394.45
napster 34 ( 0.00%) 2424 ( 0.00%) 71.29
realaud 13 ( 0.00%) 1259 ( 0.00%) 96.85
rtsp 123102 ( 0.74%) 124285068 ( 1.15%) 1009.61
icecast 31716 ( 0.19%) 23685386 ( 0.22%) 746.80
other 2008979 ( 12.01%) 1060903556 ( 9.84%) 528.08
udp 1714947 ( 10.25%) 431788044 ( 4.00%) 251.78
dns 1094880 ( 6.54%) 205288840 ( 1.90%) 187.50
realaud 4320 ( 0.03%) 309172 ( 0.00%) 71.57
halflif 10 ( 0.00%) 879 ( 0.00%) 87.90
starcra 12 ( 0.00%) 1806 ( 0.00%) 150.50
everque 55 ( 0.00%) 7141 ( 0.00%) 129.84
unreal 1 ( 0.00%) 84 ( 0.00%) 84.00
quake 19 ( 0.00%) 1606 ( 0.00%) 84.53
cuseeme 7 ( 0.00%) 564 ( 0.00%) 80.57
other 615528 ( 3.68%) 226143643 ( 2.10%) 367.40
icmp 834030 ( 4.99%) 75621602 ( 0.70%) 90.67
ipip 308 ( 0.00%) 36724 ( 0.00%) 119.23
ipsec 3420 ( 0.02%) 459080 ( 0.00%) 134.23
ip6 1015 ( 0.01%) 122920 ( 0.00%) 121.10
other 51985 ( 0.31%) 39225847 ( 0.36%) 754.56
frag 2715 ( 0.02%) 2508614 ( 0.02%) 923.98
ip6 26850 ( 0.16%) 3851985 ( 0.04%) 143.46
tcp6 10634 ( 0.06%) 1231138 ( 0.01%) 115.77
http(c) 4048 ( 0.02%) 385682 ( 0.00%) 95.28
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 351 ( 0.00%) 219198 ( 0.00%) 624.50
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 64 ( 0.00%) 10612 ( 0.00%) 165.81
dns 24 ( 0.00%) 4508 ( 0.00%) 187.83
bgp 832 ( 0.00%) 72004 ( 0.00%) 86.54
other 5276 ( 0.03%) 535776 ( 0.00%) 101.55
udp6 10168 ( 0.06%) 1853833 ( 0.02%) 182.32
dns 10143 ( 0.06%) 1851083 ( 0.02%) 182.50
other 25 ( 0.00%) 2750 ( 0.00%) 110.00
icmp6 6015 ( 0.04%) 760540 ( 0.01%) 126.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2394 ( 0.00%) 798.00
tcpdump file: 200808231400.dump.gz (422.31 MB)