Traffic Trace Info
DumpFile: 200809111400.dump
FileSize: 1578.99MB
Id: 200809111400
StartTime: Thu Sep 11 14:00:00 2008
EndTime: Thu Sep 11 14:15:00 2008
TotalTime: 900.08 seconds
TotalCapSize: 1236.39MB CapLen: 96 bytes
# of packets: 22451845 (16064.49MB)
AvgRate: 149.68Mbps stddev:25.14M
IP flow (unique src/dst pair) Information
# of flows: 543015 (avg. 41.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.7% 1.5% 1.3% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 281685
Top 10 bandwidth usage (bytes/total in %):
12.6% 5.6% 5.6% 3.6% 3.1% 2.6% 2.5% 2.3% 2.1% 2.0%
# of IPv6 addresses: 872
Top 10 bandwidth usage (bytes/total in %):
54.8% 54.8% 6.1% 5.7% 5.0% 4.8% 2.7% 2.7% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809111400.pktlen.png)
detailed numbers
[ 32- 63]: 4960019
[ 64- 127]: 5030178
[ 128- 255]: 1041541
[ 256- 511]: 535126
[ 512- 1023]: 555673
[ 1024- 2047]: 10329308
Protocol Breakdown
![[protocol breakdown chart]](200809111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22451845 (100.00%) 16844840705 (100.00%) 750.27
ip 22416584 ( 99.84%) 16830700985 ( 99.92%) 750.81
tcp 19707742 ( 87.78%) 16038621698 ( 95.21%) 813.82
http(s) 9219114 ( 41.06%) 12495268761 ( 74.18%) 1355.37
http(c) 6192224 ( 27.58%) 843926071 ( 5.01%) 136.29
squid 181648 ( 0.81%) 149399459 ( 0.89%) 822.47
smtp 438391 ( 1.95%) 87677188 ( 0.52%) 200.00
ftp 45999 ( 0.20%) 12151934 ( 0.07%) 264.18
pop3 21995 ( 0.10%) 12430013 ( 0.07%) 565.13
imap 10064 ( 0.04%) 2589752 ( 0.02%) 257.33
telnet 334 ( 0.00%) 23970 ( 0.00%) 71.77
ssh 109600 ( 0.49%) 70575797 ( 0.42%) 643.94
dns 10113 ( 0.05%) 1089741 ( 0.01%) 107.76
bgp 207 ( 0.00%) 68655 ( 0.00%) 331.67
napster 4 ( 0.00%) 296 ( 0.00%) 74.00
realaud 42 ( 0.00%) 4557 ( 0.00%) 108.50
rtsp 75122 ( 0.33%) 73695600 ( 0.44%) 981.01
icecast 479 ( 0.00%) 36106 ( 0.00%) 75.38
hotline 28 ( 0.00%) 2174 ( 0.00%) 77.64
other 3402372 ( 15.15%) 2289681264 ( 13.59%) 672.97
udp 2270422 ( 10.11%) 723840920 ( 4.30%) 318.81
dns 1184019 ( 5.27%) 249463494 ( 1.48%) 210.69
realaud 905 ( 0.00%) 55048 ( 0.00%) 60.83
halflif 34 ( 0.00%) 3983 ( 0.00%) 117.15
starcra 113 ( 0.00%) 19231 ( 0.00%) 170.19
everque 104 ( 0.00%) 21300 ( 0.00%) 204.81
unreal 40 ( 0.00%) 7896 ( 0.00%) 197.40
quake 13 ( 0.00%) 1356 ( 0.00%) 104.31
cuseeme 5 ( 0.00%) 493 ( 0.00%) 98.60
other 1085066 ( 4.83%) 474241446 ( 2.82%) 437.06
icmp 236449 ( 1.05%) 34429040 ( 0.20%) 145.61
ipip 330 ( 0.00%) 40828 ( 0.00%) 123.72
ipsec 4009 ( 0.02%) 651846 ( 0.00%) 162.60
ip6 1011 ( 0.00%) 124580 ( 0.00%) 123.22
other 196621 ( 0.88%) 32992073 ( 0.20%) 167.80
frag 71954 ( 0.32%) 66922629 ( 0.40%) 930.08
ip6 35261 ( 0.16%) 14139720 ( 0.08%) 401.00
tcp6 14886 ( 0.07%) 10839019 ( 0.06%) 728.14
http(s) 1704 ( 0.01%) 2141073 ( 0.01%) 1256.50
http(c) 3309 ( 0.01%) 359312 ( 0.00%) 108.59
smtp 542 ( 0.00%) 240804 ( 0.00%) 444.29
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 160 ( 0.00%) 41932 ( 0.00%) 262.07
bgp 397 ( 0.00%) 35316 ( 0.00%) 88.96
other 8772 ( 0.04%) 8020357 ( 0.05%) 914.31
udp6 14192 ( 0.06%) 2618319 ( 0.02%) 184.49
dns 14151 ( 0.06%) 2613812 ( 0.02%) 184.71
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 40 ( 0.00%) 4400 ( 0.00%) 110.00
icmp6 6152 ( 0.03%) 678166 ( 0.00%) 110.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200809111400.dump.gz (545.37 MB)