Traffic Trace Info
DumpFile: 200810051400.dump
FileSize: 967.81MB
Id: 200810051400
StartTime: Sun Oct 5 14:00:01 2008
EndTime: Sun Oct 5 14:15:00 2008
TotalTime: 899.52 seconds
TotalCapSize: 757.44MB CapLen: 96 bytes
# of packets: 13785807 (8296.91MB)
AvgRate: 77.35Mbps stddev:15.68M
IP flow (unique src/dst pair) Information
# of flows: 559456 (avg. 24.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.6% 1.4% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 333080
Top 10 bandwidth usage (bytes/total in %):
11.4% 10.7% 6.6% 4.5% 4.3% 4.3% 3.9% 3.8% 2.5% 1.9%
# of IPv6 addresses: 713
Top 10 bandwidth usage (bytes/total in %):
73.9% 73.8% 10.4% 9.6% 2.2% 2.1% 1.1% 1.1% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810051400.pktlen.png)
detailed numbers
[ 32- 63]: 3571270
[ 64- 127]: 3415430
[ 128- 255]: 686754
[ 256- 511]: 450949
[ 512- 1023]: 402645
[ 1024- 2047]: 5258759
Protocol Breakdown
![[protocol breakdown chart]](200810051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13785807 (100.00%) 8699943566 (100.00%) 631.08
ip 13740770 ( 99.67%) 8682946750 ( 99.80%) 631.91
tcp 11775398 ( 85.42%) 8248131898 ( 94.81%) 700.45
http(s) 4367553 ( 31.68%) 5554725408 ( 63.85%) 1271.82
http(c) 2596112 ( 18.83%) 243456252 ( 2.80%) 93.78
squid 406534 ( 2.95%) 106737741 ( 1.23%) 262.56
smtp 434322 ( 3.15%) 67917420 ( 0.78%) 156.38
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 54921 ( 0.40%) 22337649 ( 0.26%) 406.72
pop3 37514 ( 0.27%) 26731431 ( 0.31%) 712.57
imap 3768 ( 0.03%) 1075015 ( 0.01%) 285.30
telnet 481 ( 0.00%) 33060 ( 0.00%) 68.73
ssh 807754 ( 5.86%) 129113728 ( 1.48%) 159.84
dns 2889 ( 0.02%) 278846 ( 0.00%) 96.52
bgp 207 ( 0.00%) 70341 ( 0.00%) 339.81
napster 541 ( 0.00%) 331336 ( 0.00%) 612.45
realaud 97 ( 0.00%) 12297 ( 0.00%) 126.77
rtsp 222371 ( 1.61%) 232487612 ( 2.67%) 1045.49
icecast 488 ( 0.00%) 40828 ( 0.00%) 83.66
hotline 8 ( 0.00%) 835 ( 0.00%) 104.38
other 2839720 ( 20.60%) 1862775015 ( 21.41%) 655.97
udp 1595094 ( 11.57%) 398663800 ( 4.58%) 249.93
dns 1099129 ( 7.97%) 214199224 ( 2.46%) 194.88
realaud 847 ( 0.01%) 51158 ( 0.00%) 60.40
halflif 15 ( 0.00%) 1609 ( 0.00%) 107.27
starcra 9 ( 0.00%) 1481 ( 0.00%) 164.56
everque 88 ( 0.00%) 13372 ( 0.00%) 151.95
unreal 13 ( 0.00%) 1547 ( 0.00%) 119.00
quake 13 ( 0.00%) 1363 ( 0.00%) 104.85
cuseeme 8 ( 0.00%) 666 ( 0.00%) 83.25
other 494957 ( 3.59%) 184376421 ( 2.12%) 372.51
icmp 347041 ( 2.52%) 32626209 ( 0.38%) 94.01
ipip 330 ( 0.00%) 39922 ( 0.00%) 120.98
ipsec 3233 ( 0.02%) 433254 ( 0.00%) 134.01
ip6 713 ( 0.01%) 91285 ( 0.00%) 128.03
other 18961 ( 0.14%) 2960382 ( 0.03%) 156.13
frag 4372 ( 0.03%) 4316975 ( 0.05%) 987.41
ip6 45037 ( 0.33%) 16996816 ( 0.20%) 377.40
tcp6 29485 ( 0.21%) 14543990 ( 0.17%) 493.27
http(s) 8660 ( 0.06%) 12584573 ( 0.14%) 1453.18
http(c) 19189 ( 0.14%) 1804433 ( 0.02%) 94.03
smtp 53 ( 0.00%) 9181 ( 0.00%) 173.23
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 84 ( 0.00%) 9724 ( 0.00%) 115.76
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 378 ( 0.00%) 32520 ( 0.00%) 86.03
other 1081 ( 0.01%) 100074 ( 0.00%) 92.58
udp6 10190 ( 0.07%) 1734336 ( 0.02%) 170.20
dns 10165 ( 0.07%) 1731591 ( 0.02%) 170.35
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 24 ( 0.00%) 2640 ( 0.00%) 110.00
icmp6 5332 ( 0.04%) 714410 ( 0.01%) 133.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200810051400.dump.gz (348.88 MB)