Traffic Trace Info
DumpFile: 200809191400.dump
FileSize: 1324.98MB
Id: 200809191400
StartTime: Fri Sep 19 14:00:00 2008
EndTime: Fri Sep 19 14:15:01 2008
TotalTime: 900.51 seconds
TotalCapSize: 1028.43MB CapLen: 96 bytes
# of packets: 19434433 (12815.06MB)
AvgRate: 119.39Mbps stddev:17.74M
IP flow (unique src/dst pair) Information
# of flows: 570733 (avg. 34.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.6% 1.4% 1.3% 1.3% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 300385
Top 10 bandwidth usage (bytes/total in %):
9.8% 5.4% 5.3% 3.3% 3.0% 2.6% 2.5% 2.3% 2.3% 2.0%
# of IPv6 addresses: 841
Top 10 bandwidth usage (bytes/total in %):
31.9% 29.4% 11.0% 7.1% 4.4% 3.5% 3.4% 3.2% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809191400.pktlen.png)
detailed numbers
[ 32- 63]: 4285991
[ 64- 127]: 5064763
[ 128- 255]: 773095
[ 256- 511]: 411313
[ 512- 1023]: 599531
[ 1024- 2047]: 8299740
Protocol Breakdown
![[protocol breakdown chart]](200809191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19434433 (100.00%) 13437564789 (100.00%) 691.43
ip 19392471 ( 99.78%) 13432047870 ( 99.96%) 692.64
tcp 14798534 ( 76.15%) 11680631316 ( 86.93%) 789.31
http(s) 6192231 ( 31.86%) 7942213140 ( 59.10%) 1282.61
http(c) 3868728 ( 19.91%) 478669774 ( 3.56%) 123.73
squid 135822 ( 0.70%) 38785700 ( 0.29%) 285.56
smtp 628581 ( 3.23%) 201198562 ( 1.50%) 320.08
nntp 65 ( 0.00%) 5427 ( 0.00%) 83.49
ftp 185525 ( 0.95%) 45474122 ( 0.34%) 245.11
pop3 33105 ( 0.17%) 17214049 ( 0.13%) 519.98
imap 6028 ( 0.03%) 952463 ( 0.01%) 158.01
telnet 1651 ( 0.01%) 155473 ( 0.00%) 94.17
ssh 6458 ( 0.03%) 1461758 ( 0.01%) 226.35
dns 4610 ( 0.02%) 448195 ( 0.00%) 97.22
bgp 217 ( 0.00%) 76157 ( 0.00%) 350.95
napster 385 ( 0.00%) 265139 ( 0.00%) 688.67
realaud 31 ( 0.00%) 4861 ( 0.00%) 156.81
rtsp 276119 ( 1.42%) 342051332 ( 2.55%) 1238.78
icecast 30436 ( 0.16%) 9156124 ( 0.07%) 300.83
hotline 23 ( 0.00%) 5902 ( 0.00%) 256.61
other 3428508 ( 17.64%) 2602492478 ( 19.37%) 759.07
udp 4130882 ( 21.26%) 1682087039 ( 12.52%) 407.20
dns 1411208 ( 7.26%) 231563561 ( 1.72%) 164.09
realaud 26 ( 0.00%) 3358 ( 0.00%) 129.15
halflif 45 ( 0.00%) 4593 ( 0.00%) 102.07
starcra 50 ( 0.00%) 9917 ( 0.00%) 198.34
everque 85 ( 0.00%) 12853 ( 0.00%) 151.21
unreal 15 ( 0.00%) 2541 ( 0.00%) 169.40
quake 36 ( 0.00%) 3603 ( 0.00%) 100.08
cuseeme 9 ( 0.00%) 967 ( 0.00%) 107.44
other 2719349 ( 13.99%) 1450471342 ( 10.79%) 533.39
icmp 265885 ( 1.37%) 34178101 ( 0.25%) 128.54
ipip 338 ( 0.00%) 41380 ( 0.00%) 122.43
ipsec 3762 ( 0.02%) 586940 ( 0.00%) 156.02
ip6 3202 ( 0.02%) 3027330 ( 0.02%) 945.45
other 189868 ( 0.98%) 31495764 ( 0.23%) 165.88
frag 3878 ( 0.02%) 3753275 ( 0.03%) 967.84
ip6 41962 ( 0.22%) 5516919 ( 0.04%) 131.47
tcp6 22686 ( 0.12%) 2518149 ( 0.02%) 111.00
http(s) 160 ( 0.00%) 188401 ( 0.00%) 1177.51
http(c) 19625 ( 0.10%) 1863736 ( 0.01%) 94.97
smtp 341 ( 0.00%) 186282 ( 0.00%) 546.28
pop3 64 ( 0.00%) 6895 ( 0.00%) 107.73
ssh 365 ( 0.00%) 73814 ( 0.00%) 202.23
dns 53 ( 0.00%) 4425 ( 0.00%) 83.49
bgp 397 ( 0.00%) 37514 ( 0.00%) 94.49
other 1681 ( 0.01%) 157082 ( 0.00%) 93.45
udp6 11417 ( 0.06%) 2024391 ( 0.02%) 177.31
dns 11378 ( 0.06%) 2020101 ( 0.02%) 177.54
other 39 ( 0.00%) 4290 ( 0.00%) 110.00
icmp6 7825 ( 0.04%) 966849 ( 0.01%) 123.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3450 ( 0.00%) 862.50
tcpdump file: 200809191400.dump.gz (473.38 MB)