Traffic Trace Info
DumpFile: 200809031400.dump
FileSize: 1561.96MB
Id: 200809031400
StartTime: Wed Sep 3 14:00:00 2008
EndTime: Wed Sep 3 14:15:01 2008
TotalTime: 900.00 seconds
TotalCapSize: 1222.62MB CapLen: 96 bytes
# of packets: 22238453 (13970.80MB)
AvgRate: 130.22Mbps stddev:17.54M
IP flow (unique src/dst pair) Information
# of flows: 604801 (avg. 36.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.0% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 315236
Top 10 bandwidth usage (bytes/total in %):
10.8% 5.4% 4.9% 4.1% 3.7% 3.4% 2.9% 2.8% 2.4% 2.4%
# of IPv6 addresses: 987
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.7% 6.9% 5.2% 4.2% 4.1% 4.1% 3.9% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809031400.pktlen.png)
detailed numbers
[ 32- 63]: 5145119
[ 64- 127]: 5902825
[ 128- 255]: 1163156
[ 256- 511]: 536365
[ 512- 1023]: 675014
[ 1024- 2047]: 8815974
Protocol Breakdown
![[protocol breakdown chart]](200809031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22238453 (100.00%) 14649449247 (100.00%) 658.74
ip 22207589 ( 99.86%) 14644804804 ( 99.97%) 659.45
tcp 18978123 ( 85.34%) 13937437898 ( 95.14%) 734.39
http(s) 7701712 ( 34.63%) 9759288005 ( 66.62%) 1267.16
http(c) 4791149 ( 21.54%) 504702135 ( 3.45%) 105.34
squid 86552 ( 0.39%) 39043849 ( 0.27%) 451.10
smtp 813529 ( 3.66%) 207182773 ( 1.41%) 254.67
nntp 34 ( 0.00%) 2598 ( 0.00%) 76.41
ftp 125635 ( 0.56%) 52748303 ( 0.36%) 419.85
pop3 35204 ( 0.16%) 23145274 ( 0.16%) 657.46
imap 9140 ( 0.04%) 2790446 ( 0.02%) 305.30
telnet 1929 ( 0.01%) 481339 ( 0.00%) 249.53
ssh 1359242 ( 6.11%) 190111116 ( 1.30%) 139.87
dns 5174 ( 0.02%) 441363 ( 0.00%) 85.30
bgp 185 ( 0.00%) 57988 ( 0.00%) 313.45
napster 7 ( 0.00%) 975 ( 0.00%) 139.29
realaud 75 ( 0.00%) 37268 ( 0.00%) 496.91
rtsp 930471 ( 4.18%) 962234895 ( 6.57%) 1034.14
icecast 24819 ( 0.11%) 30401331 ( 0.21%) 1224.92
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 3093261 ( 13.91%) 2164767940 ( 14.78%) 699.83
udp 2212047 ( 9.95%) 587960936 ( 4.01%) 265.80
dns 1405097 ( 6.32%) 246867808 ( 1.69%) 175.69
realaud 2747 ( 0.01%) 166502 ( 0.00%) 60.61
halflif 26 ( 0.00%) 2700 ( 0.00%) 103.85
starcra 35 ( 0.00%) 6238 ( 0.00%) 178.23
everque 54 ( 0.00%) 8501 ( 0.00%) 157.43
unreal 12 ( 0.00%) 1985 ( 0.00%) 165.42
quake 31 ( 0.00%) 2605 ( 0.00%) 84.03
cuseeme 2 ( 0.00%) 166 ( 0.00%) 83.00
other 804029 ( 3.62%) 340901441 ( 2.33%) 423.99
icmp 851501 ( 3.83%) 86890470 ( 0.59%) 102.04
ipip 301 ( 0.00%) 36928 ( 0.00%) 122.68
ipsec 4230 ( 0.02%) 703906 ( 0.00%) 166.41
ip6 1005 ( 0.00%) 124448 ( 0.00%) 123.83
other 160382 ( 0.72%) 31650218 ( 0.22%) 197.34
frag 1648 ( 0.01%) 1355888 ( 0.01%) 822.75
ip6 30864 ( 0.14%) 4644443 ( 0.03%) 150.48
tcp6 8859 ( 0.04%) 1097773 ( 0.01%) 123.92
http(s) 130 ( 0.00%) 166610 ( 0.00%) 1281.62
http(c) 4133 ( 0.02%) 402798 ( 0.00%) 97.46
smtp 334 ( 0.00%) 127944 ( 0.00%) 383.07
pop3 51 ( 0.00%) 5855 ( 0.00%) 114.80
ssh 31 ( 0.00%) 3614 ( 0.00%) 116.58
dns 8 ( 0.00%) 1624 ( 0.00%) 203.00
bgp 416 ( 0.00%) 38739 ( 0.00%) 93.12
other 3756 ( 0.02%) 350589 ( 0.00%) 93.34
udp6 15578 ( 0.07%) 2759466 ( 0.02%) 177.14
dns 15361 ( 0.07%) 2695455 ( 0.02%) 175.47
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
other 216 ( 0.00%) 63912 ( 0.00%) 295.89
icmp6 6387 ( 0.03%) 774393 ( 0.01%) 121.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8731 ( 0.00%) 873.10
tcpdump file: 200809031400.dump.gz (576.42 MB)