Traffic Trace Info
DumpFile: 200808301400.dump
FileSize: 1222.98MB
Id: 200808301400
StartTime: Sat Aug 30 14:00:01 2008
EndTime: Sat Aug 30 14:15:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 954.52MB CapLen: 96 bytes
# of packets: 17592799 (11119.92MB)
AvgRate: 103.66Mbps stddev:15.94M
IP flow (unique src/dst pair) Information
# of flows: 576639 (avg. 30.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 1.5% 1.4% 1.3% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 323811
Top 10 bandwidth usage (bytes/total in %):
16.2% 11.6% 11.6% 5.7% 3.8% 3.5% 3.1% 2.7% 2.6% 2.2%
# of IPv6 addresses: 894
Top 10 bandwidth usage (bytes/total in %):
17.2% 10.5% 9.1% 6.7% 6.1% 6.1% 5.3% 4.5% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200808301400.pktlen.png)
detailed numbers
[ 32- 63]: 3793277
[ 64- 127]: 4914990
[ 128- 255]: 905106
[ 256- 511]: 388106
[ 512- 1023]: 503451
[ 1024- 2047]: 7087869
Protocol Breakdown
![[protocol breakdown chart]](200808301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17592799 (100.00%) 11660082465 (100.00%) 662.78
ip 17565749 ( 99.85%) 11656426129 ( 99.97%) 663.59
tcp 14407865 ( 81.90%) 10881999653 ( 93.33%) 755.28
http(s) 6077893 ( 34.55%) 8080732258 ( 69.30%) 1329.53
http(c) 3809625 ( 21.65%) 448793657 ( 3.85%) 117.81
squid 114862 ( 0.65%) 32377910 ( 0.28%) 281.89
smtp 481286 ( 2.74%) 68032873 ( 0.58%) 141.36
ftp 96092 ( 0.55%) 51777667 ( 0.44%) 538.83
pop3 11192 ( 0.06%) 4324146 ( 0.04%) 386.36
imap 8637 ( 0.05%) 4859888 ( 0.04%) 562.68
telnet 29073 ( 0.17%) 2131428 ( 0.02%) 73.31
ssh 1038564 ( 5.90%) 256119177 ( 2.20%) 246.61
dns 2946 ( 0.02%) 254082 ( 0.00%) 86.25
bgp 137 ( 0.00%) 43780 ( 0.00%) 319.56
rtsp 529602 ( 3.01%) 600383702 ( 5.15%) 1133.65
icecast 56288 ( 0.32%) 58325075 ( 0.50%) 1036.19
other 2151647 ( 12.23%) 1273842750 ( 10.92%) 592.03
udp 2184304 ( 12.42%) 680956135 ( 5.84%) 311.75
dns 1157707 ( 6.58%) 203082063 ( 1.74%) 175.42
realaud 1132 ( 0.01%) 82073 ( 0.00%) 72.50
halflif 14 ( 0.00%) 1111 ( 0.00%) 79.36
starcra 12 ( 0.00%) 1288 ( 0.00%) 107.33
everque 33 ( 0.00%) 5770 ( 0.00%) 174.85
unreal 3 ( 0.00%) 303 ( 0.00%) 101.00
quake 12 ( 0.00%) 1359 ( 0.00%) 113.25
cuseeme 15 ( 0.00%) 2000 ( 0.00%) 133.33
other 1024496 ( 5.82%) 477666920 ( 4.10%) 466.25
icmp 902675 ( 5.13%) 83565612 ( 0.72%) 92.58
ipip 317 ( 0.00%) 38828 ( 0.00%) 122.49
ipsec 3618 ( 0.02%) 523380 ( 0.00%) 144.66
ip6 1023 ( 0.01%) 126488 ( 0.00%) 123.64
other 65947 ( 0.37%) 9216033 ( 0.08%) 139.75
frag 4266 ( 0.02%) 3335425 ( 0.03%) 781.86
ip6 27050 ( 0.15%) 3656336 ( 0.03%) 135.17
tcp6 8986 ( 0.05%) 941404 ( 0.01%) 104.76
http(c) 3954 ( 0.02%) 378417 ( 0.00%) 95.70
smtp 449 ( 0.00%) 114534 ( 0.00%) 255.09
pop3 86 ( 0.00%) 8879 ( 0.00%) 103.24
ssh 25 ( 0.00%) 3302 ( 0.00%) 132.08
bgp 403 ( 0.00%) 36711 ( 0.00%) 91.09
other 4069 ( 0.02%) 399561 ( 0.00%) 98.20
udp6 11196 ( 0.06%) 1927191 ( 0.02%) 172.13
dns 11168 ( 0.06%) 1924111 ( 0.02%) 172.29
other 28 ( 0.00%) 3080 ( 0.00%) 110.00
icmp6 6836 ( 0.04%) 781830 ( 0.01%) 114.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1831 ( 0.00%) 915.50
tcpdump file: 200808301400.dump.gz (430.95 MB)