Traffic Trace Info
DumpFile: 200809021400.dump
FileSize: 1488.08MB
Id: 200809021400
StartTime: Tue Sep 2 14:00:01 2008
EndTime: Tue Sep 2 14:15:01 2008
TotalTime: 899.70 seconds
TotalCapSize: 1164.13MB CapLen: 96 bytes
# of packets: 21229792 (13287.63MB)
AvgRate: 123.90Mbps stddev:21.10M
IP flow (unique src/dst pair) Information
# of flows: 511586 (avg. 41.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.3% 1.9% 1.7% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 252839
Top 10 bandwidth usage (bytes/total in %):
11.9% 6.7% 4.7% 4.1% 3.5% 3.5% 3.5% 3.5% 3.2% 3.0%
# of IPv6 addresses: 949
Top 10 bandwidth usage (bytes/total in %):
34.0% 34.0% 10.1% 9.7% 6.4% 6.3% 3.6% 3.1% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809021400.pktlen.png)
detailed numbers
[ 32- 63]: 4890725
[ 64- 127]: 5670243
[ 128- 255]: 1143647
[ 256- 511]: 530152
[ 512- 1023]: 617763
[ 1024- 2047]: 8377262
Protocol Breakdown
![[protocol breakdown chart]](200809021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21229792 (100.00%) 13933087165 (100.00%) 656.30
ip 21190264 ( 99.81%) 13925366694 ( 99.94%) 657.16
tcp 17799182 ( 83.84%) 12874017735 ( 92.40%) 723.29
http(s) 7664586 ( 36.10%) 9831772800 ( 70.56%) 1282.75
http(c) 4541913 ( 21.39%) 497275835 ( 3.57%) 109.49
squid 118719 ( 0.56%) 38899226 ( 0.28%) 327.66
smtp 747534 ( 3.52%) 180350116 ( 1.29%) 241.26
nntp 171 ( 0.00%) 17508 ( 0.00%) 102.39
ftp 118443 ( 0.56%) 28002614 ( 0.20%) 236.42
pop3 76762 ( 0.36%) 62163588 ( 0.45%) 809.82
imap 6419 ( 0.03%) 1090628 ( 0.01%) 169.91
telnet 5146 ( 0.02%) 519584 ( 0.00%) 100.97
ssh 1432564 ( 6.75%) 205047755 ( 1.47%) 143.13
dns 4750 ( 0.02%) 397106 ( 0.00%) 83.60
bgp 151 ( 0.00%) 61691 ( 0.00%) 408.55
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 635104 ( 2.99%) 593799252 ( 4.26%) 934.96
icecast 24427 ( 0.12%) 23196757 ( 0.17%) 949.64
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2422460 ( 11.41%) 1411421295 ( 10.13%) 582.64
udp 2067030 ( 9.74%) 483256113 ( 3.47%) 233.79
dns 1526046 ( 7.19%) 268264396 ( 1.93%) 175.79
realaud 8081 ( 0.04%) 2539878 ( 0.02%) 314.30
halflif 19 ( 0.00%) 2310 ( 0.00%) 121.58
starcra 14 ( 0.00%) 2457 ( 0.00%) 175.50
everque 58 ( 0.00%) 8775 ( 0.00%) 151.29
unreal 15 ( 0.00%) 1854 ( 0.00%) 123.60
quake 45 ( 0.00%) 3907 ( 0.00%) 86.82
cuseeme 25 ( 0.00%) 2298 ( 0.00%) 91.92
other 532662 ( 2.51%) 212367073 ( 1.52%) 398.69
icmp 781420 ( 3.68%) 76500281 ( 0.55%) 97.90
ipip 319 ( 0.00%) 38756 ( 0.00%) 121.49
ipsec 7530 ( 0.04%) 1610992 ( 0.01%) 213.94
ip6 1986 ( 0.01%) 320094 ( 0.00%) 161.18
other 532797 ( 2.51%) 489622723 ( 3.51%) 918.97
frag 3029 ( 0.01%) 2237960 ( 0.02%) 738.84
ip6 39528 ( 0.19%) 7720471 ( 0.06%) 195.32
tcp6 19658 ( 0.09%) 4754293 ( 0.03%) 241.85
http(s) 263 ( 0.00%) 354883 ( 0.00%) 1349.37
http(c) 3924 ( 0.02%) 379364 ( 0.00%) 96.68
smtp 450 ( 0.00%) 108509 ( 0.00%) 241.13
ftp 360 ( 0.00%) 41857 ( 0.00%) 116.27
pop3 56 ( 0.00%) 6534 ( 0.00%) 116.68
ssh 435 ( 0.00%) 160462 ( 0.00%) 368.88
bgp 414 ( 0.00%) 39014 ( 0.00%) 94.24
other 13756 ( 0.06%) 3663670 ( 0.03%) 266.33
udp6 14147 ( 0.07%) 2237977 ( 0.02%) 158.19
dns 14135 ( 0.07%) 2236661 ( 0.02%) 158.24
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
other 10 ( 0.00%) 1100 ( 0.00%) 110.00
icmp6 5668 ( 0.03%) 703124 ( 0.01%) 124.05
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 24 ( 0.00%) 20861 ( 0.00%) 869.21
tcpdump file: 200809021400.dump.gz (545.69 MB)