Traffic Trace Info
DumpFile: 200808241400.dump
FileSize: 956.05MB
Id: 200808241400
StartTime: Sun Aug 24 14:00:01 2008
EndTime: Sun Aug 24 14:15:01 2008
TotalTime: 899.94 seconds
TotalCapSize: 748.29MB CapLen: 96 bytes
# of packets: 13615102 (8291.66MB)
AvgRate: 77.25Mbps stddev:13.73M
IP flow (unique src/dst pair) Information
# of flows: 467804 (avg. 29.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.3% 2.0% 1.5% 1.3% 1.1% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 257232
Top 10 bandwidth usage (bytes/total in %):
23.9% 5.6% 4.0% 3.4% 3.4% 3.3% 3.0% 2.8% 2.6% 2.6%
# of IPv6 addresses: 835
Top 10 bandwidth usage (bytes/total in %):
93.0% 93.0% 1.0% 0.9% 0.5% 0.5% 0.4% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808241400.pktlen.png)
detailed numbers
[ 32- 63]: 2911478
[ 64- 127]: 3993014
[ 128- 255]: 842269
[ 256- 511]: 343596
[ 512- 1023]: 284475
[ 1024- 2047]: 5240270
Protocol Breakdown
![[protocol breakdown chart]](200808241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13615102 (100.00%) 8694434703 (100.00%) 638.59
ip 13555103 ( 99.56%) 8641493571 ( 99.39%) 637.51
tcp 10800485 ( 79.33%) 8206263223 ( 94.39%) 759.81
http(s) 4393584 ( 32.27%) 5895326128 ( 67.81%) 1341.80
http(c) 2414230 ( 17.73%) 263995517 ( 3.04%) 109.35
squid 347068 ( 2.55%) 78453619 ( 0.90%) 226.05
smtp 690371 ( 5.07%) 124312289 ( 1.43%) 180.07
ftp 99030 ( 0.73%) 59149933 ( 0.68%) 597.29
pop3 17002 ( 0.12%) 11224975 ( 0.13%) 660.21
imap 3851 ( 0.03%) 1806925 ( 0.02%) 469.21
telnet 1015 ( 0.01%) 109098 ( 0.00%) 107.49
ssh 618421 ( 4.54%) 462605194 ( 5.32%) 748.04
dns 3373 ( 0.02%) 342620 ( 0.00%) 101.58
bgp 149 ( 0.00%) 47854 ( 0.00%) 321.17
napster 14 ( 0.00%) 1374 ( 0.00%) 98.14
realaud 29 ( 0.00%) 2387 ( 0.00%) 82.31
rtsp 123913 ( 0.91%) 115267820 ( 1.33%) 930.23
icecast 513 ( 0.00%) 40019 ( 0.00%) 78.01
other 2087922 ( 15.34%) 1193577471 ( 13.73%) 571.66
udp 1525618 ( 11.21%) 291164882 ( 3.35%) 190.85
dns 1006025 ( 7.39%) 178406312 ( 2.05%) 177.34
realaud 2394 ( 0.02%) 144668 ( 0.00%) 60.43
halflif 9 ( 0.00%) 1530 ( 0.00%) 170.00
starcra 39 ( 0.00%) 3863 ( 0.00%) 99.05
everque 40 ( 0.00%) 6864 ( 0.00%) 171.60
unreal 14 ( 0.00%) 2025 ( 0.00%) 144.64
quake 16 ( 0.00%) 1363 ( 0.00%) 85.19
cuseeme 2 ( 0.00%) 158 ( 0.00%) 79.00
other 517068 ( 3.80%) 112596557 ( 1.30%) 217.76
icmp 1164187 ( 8.55%) 99320303 ( 1.14%) 85.31
igmp 1 ( 0.00%) 213 ( 0.00%) 213.00
ipip 285 ( 0.00%) 34186 ( 0.00%) 119.95
ipsec 3422 ( 0.03%) 459252 ( 0.01%) 134.21
ip6 1011 ( 0.01%) 121347 ( 0.00%) 120.03
other 60094 ( 0.44%) 44130165 ( 0.51%) 734.35
frag 1315 ( 0.01%) 1082958 ( 0.01%) 823.54
ip6 59999 ( 0.44%) 52941132 ( 0.61%) 882.37
tcp6 43923 ( 0.32%) 50334046 ( 0.58%) 1145.96
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 3739 ( 0.03%) 355992 ( 0.00%) 95.21
smtp 506 ( 0.00%) 116714 ( 0.00%) 230.66
pop3 115 ( 0.00%) 11379 ( 0.00%) 98.95
imap 11 ( 0.00%) 6848 ( 0.00%) 622.55
ssh 98 ( 0.00%) 18340 ( 0.00%) 187.14
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 846 ( 0.01%) 73568 ( 0.00%) 86.96
other 38597 ( 0.28%) 49750040 ( 0.57%) 1288.96
udp6 9739 ( 0.07%) 1793471 ( 0.02%) 184.15
dns 9724 ( 0.07%) 1791821 ( 0.02%) 184.27
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 6306 ( 0.05%) 809399 ( 0.01%) 128.35
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200808241400.dump.gz (336.51 MB)