Traffic Trace Info
DumpFile: 200809241400.dump
FileSize: 1768.26MB
Id: 200809241400
StartTime: Wed Sep 24 14:00:00 2008
EndTime: Wed Sep 24 14:15:00 2008
TotalTime: 900.00 seconds
TotalCapSize: 1389.41MB CapLen: 96 bytes
# of packets: 24827402 (15366.33MB)
AvgRate: 143.24Mbps stddev:34.51M
IP flow (unique src/dst pair) Information
# of flows: 680615 (avg. 36.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.3% 1.1% 1.0% 1.0% 0.9% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 356589
Top 10 bandwidth usage (bytes/total in %):
12.4% 8.9% 8.0% 4.5% 4.4% 2.6% 2.4% 2.2% 1.9% 1.8%
# of IPv6 addresses: 887
Top 10 bandwidth usage (bytes/total in %):
91.6% 91.6% 3.8% 3.8% 1.4% 1.4% 0.9% 0.9% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809241400.pktlen.png)
detailed numbers
[ 32- 63]: 4982571
[ 64- 127]: 7437634
[ 128- 255]: 1327789
[ 256- 511]: 591619
[ 512- 1023]: 860157
[ 1024- 2047]: 9627632
Protocol Breakdown
![[protocol breakdown chart]](200809241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24827402 (100.00%) 16112760401 (100.00%) 648.99
ip 24667563 ( 99.36%) 15925519537 ( 98.84%) 645.61
tcp 20907053 ( 84.21%) 15118056167 ( 93.83%) 723.11
http(s) 9095200 ( 36.63%) 11932158935 ( 74.05%) 1311.92
http(c) 6159076 ( 24.81%) 673142807 ( 4.18%) 109.29
squid 256482 ( 1.03%) 165782446 ( 1.03%) 646.37
smtp 704400 ( 2.84%) 170068080 ( 1.06%) 241.44
nntp 233 ( 0.00%) 31734 ( 0.00%) 136.20
ftp 97270 ( 0.39%) 46256887 ( 0.29%) 475.55
pop3 30990 ( 0.12%) 15050145 ( 0.09%) 485.65
imap 8245 ( 0.03%) 1767104 ( 0.01%) 214.32
telnet 23738 ( 0.10%) 1892823 ( 0.01%) 79.74
ssh 952597 ( 3.84%) 164154002 ( 1.02%) 172.32
dns 5302 ( 0.02%) 464933 ( 0.00%) 87.69
bgp 217 ( 0.00%) 70611 ( 0.00%) 325.40
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 16 ( 0.00%) 1819 ( 0.00%) 113.69
rtsp 97920 ( 0.39%) 107201466 ( 0.67%) 1094.79
icecast 12400 ( 0.05%) 8022652 ( 0.05%) 646.99
other 3462948 ( 13.95%) 1831988583 ( 11.37%) 529.03
udp 3070462 ( 12.37%) 733142319 ( 4.55%) 238.77
dns 1995479 ( 8.04%) 322740920 ( 2.00%) 161.74
realaud 14 ( 0.00%) 1513 ( 0.00%) 108.07
halflif 43 ( 0.00%) 4275 ( 0.00%) 99.42
starcra 51 ( 0.00%) 8059 ( 0.00%) 158.02
everque 73 ( 0.00%) 11493 ( 0.00%) 157.44
unreal 28 ( 0.00%) 4201 ( 0.00%) 150.04
quake 34 ( 0.00%) 3198 ( 0.00%) 94.06
cuseeme 7 ( 0.00%) 1151 ( 0.00%) 164.43
other 1074627 ( 4.33%) 410338549 ( 2.55%) 381.84
icmp 622492 ( 2.51%) 61421493 ( 0.38%) 98.67
ipip 336 ( 0.00%) 41116 ( 0.00%) 122.37
ipsec 5158 ( 0.02%) 1078076 ( 0.01%) 209.01
ip6 901 ( 0.00%) 111204 ( 0.00%) 123.42
other 61161 ( 0.25%) 11669162 ( 0.07%) 190.79
frag 3374 ( 0.01%) 3378130 ( 0.02%) 1001.22
ip6 159837 ( 0.64%) 187240744 ( 1.16%) 1171.45
tcp6 143116 ( 0.58%) 184440768 ( 1.14%) 1288.75
http(s) 5555 ( 0.02%) 8109297 ( 0.05%) 1459.82
http(c) 19078 ( 0.08%) 1790305 ( 0.01%) 93.84
smtp 2785 ( 0.01%) 2814473 ( 0.02%) 1010.58
pop3 91 ( 0.00%) 9148 ( 0.00%) 100.53
ssh 208 ( 0.00%) 52752 ( 0.00%) 253.62
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 415 ( 0.00%) 38047 ( 0.00%) 91.68
other 114977 ( 0.46%) 171626111 ( 1.07%) 1492.70
udp6 12315 ( 0.05%) 2187641 ( 0.01%) 177.64
dns 12284 ( 0.05%) 2184231 ( 0.01%) 177.81
other 31 ( 0.00%) 3410 ( 0.00%) 110.00
icmp6 4366 ( 0.02%) 600008 ( 0.00%) 137.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8247 ( 0.00%) 824.70
tcpdump file: 200809241400.dump.gz (668.24 MB)