Traffic Trace Info
DumpFile: 200809221400.dump
FileSize: 1739.15MB
Id: 200809221400
StartTime: Mon Sep 22 14:00:00 2008
EndTime: Mon Sep 22 14:15:01 2008
TotalTime: 900.61 seconds
TotalCapSize: 1359.97MB CapLen: 96 bytes
# of packets: 24849310 (15541.57MB)
AvgRate: 144.73Mbps stddev:34.50M
IP flow (unique src/dst pair) Information
# of flows: 828228 (avg. 30.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.5% 2.3% 2.3% 2.1% 1.6% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 464076
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.8% 6.4% 3.9% 3.8% 3.6% 3.2% 3.0% 3.0% 2.4%
# of IPv6 addresses: 794
Top 10 bandwidth usage (bytes/total in %):
35.1% 35.0% 17.0% 15.6% 13.6% 13.6% 4.1% 3.7% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809221400.pktlen.png)
detailed numbers
[ 32- 63]: 6104948
[ 64- 127]: 6435685
[ 128- 255]: 1149997
[ 256- 511]: 519136
[ 512- 1023]: 729153
[ 1024- 2047]: 9910391
Protocol Breakdown
![[protocol breakdown chart]](200809221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24849310 (100.00%) 16296518553 (100.00%) 655.81
ip 24800895 ( 99.81%) 16286131952 ( 99.94%) 656.68
tcp 20355582 ( 81.92%) 14499633372 ( 88.97%) 712.32
http(s) 7329289 ( 29.49%) 9302623183 ( 57.08%) 1269.24
http(c) 5782764 ( 23.27%) 762340712 ( 4.68%) 131.83
squid 345687 ( 1.39%) 322296032 ( 1.98%) 932.33
smtp 816561 ( 3.29%) 216053634 ( 1.33%) 264.59
nntp 401 ( 0.00%) 48303 ( 0.00%) 120.46
ftp 103493 ( 0.42%) 17235323 ( 0.11%) 166.54
pop3 29581 ( 0.12%) 20690215 ( 0.13%) 699.44
imap 8608 ( 0.03%) 1730196 ( 0.01%) 201.00
telnet 3476 ( 0.01%) 501221 ( 0.00%) 144.19
ssh 78080 ( 0.31%) 19930007 ( 0.12%) 255.25
dns 45481 ( 0.18%) 25720631 ( 0.16%) 565.52
bgp 203 ( 0.00%) 63410 ( 0.00%) 312.36
napster 1 ( 0.00%) 74 ( 0.00%) 74.00
realaud 58 ( 0.00%) 4514 ( 0.00%) 77.83
rtsp 342396 ( 1.38%) 365744819 ( 2.24%) 1068.19
icecast 916 ( 0.00%) 73533 ( 0.00%) 80.28
other 5468525 ( 22.01%) 3444573845 ( 21.14%) 629.89
udp 3761748 ( 15.14%) 1700477810 ( 10.43%) 452.04
dns 1373869 ( 5.53%) 224785060 ( 1.38%) 163.61
realaud 1825 ( 0.01%) 110094 ( 0.00%) 60.33
halflif 26 ( 0.00%) 2432 ( 0.00%) 93.54
starcra 40 ( 0.00%) 8043 ( 0.00%) 201.07
everque 90 ( 0.00%) 12872 ( 0.00%) 143.02
unreal 22 ( 0.00%) 3198 ( 0.00%) 145.36
quake 22 ( 0.00%) 1790 ( 0.00%) 81.36
cuseeme 3 ( 0.00%) 334 ( 0.00%) 111.33
other 2385497 ( 9.60%) 1475507524 ( 9.05%) 618.53
icmp 509953 ( 2.05%) 57816971 ( 0.35%) 113.38
ipip 365 ( 0.00%) 43432 ( 0.00%) 118.99
ipsec 4043 ( 0.02%) 655642 ( 0.00%) 162.17
ip6 1019 ( 0.00%) 125042 ( 0.00%) 122.71
other 168185 ( 0.68%) 27379683 ( 0.17%) 162.80
frag 3117 ( 0.01%) 2990163 ( 0.02%) 959.31
ip6 48415 ( 0.19%) 10386601 ( 0.06%) 214.53
tcp6 30260 ( 0.12%) 7497343 ( 0.05%) 247.76
http(s) 44 ( 0.00%) 48195 ( 0.00%) 1095.34
http(c) 19389 ( 0.08%) 1826739 ( 0.01%) 94.22
smtp 4615 ( 0.02%) 3614262 ( 0.02%) 783.16
imap 1019 ( 0.00%) 1331890 ( 0.01%) 1307.06
ssh 1460 ( 0.01%) 339740 ( 0.00%) 232.70
bgp 414 ( 0.00%) 39191 ( 0.00%) 94.66
other 3319 ( 0.01%) 297326 ( 0.00%) 89.58
udp6 11999 ( 0.05%) 2063407 ( 0.01%) 171.96
dns 11950 ( 0.05%) 2058026 ( 0.01%) 172.22
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
other 48 ( 0.00%) 5280 ( 0.00%) 110.00
icmp6 6119 ( 0.02%) 816454 ( 0.01%) 133.43
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5181 ( 0.00%) 863.50
tcpdump file: 200809221400.dump.gz (621.59 MB)