Traffic Trace Info
DumpFile: 200809251400.dump
FileSize: 1619.34MB
Id: 200809251400
StartTime: Thu Sep 25 14:00:00 2008
EndTime: Thu Sep 25 14:15:01 2008
TotalTime: 900.69 seconds
TotalCapSize: 1269.04MB CapLen: 96 bytes
# of packets: 22956755 (15537.40MB)
AvgRate: 144.72Mbps stddev:25.60M
IP flow (unique src/dst pair) Information
# of flows: 753154 (avg. 30.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.7% 1.4% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 408914
Top 10 bandwidth usage (bytes/total in %):
11.8% 8.3% 4.1% 2.6% 2.4% 1.9% 1.9% 1.9% 1.8% 1.7%
# of IPv6 addresses: 852
Top 10 bandwidth usage (bytes/total in %):
57.8% 57.6% 11.2% 10.6% 3.5% 3.4% 2.5% 2.2% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809251400.pktlen.png)
detailed numbers
[ 32- 63]: 5086248
[ 64- 127]: 5534348
[ 128- 255]: 1025474
[ 256- 511]: 565381
[ 512- 1023]: 836139
[ 1024- 2047]: 9909165
Protocol Breakdown
![[protocol breakdown chart]](200809251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22956755 (100.00%) 16292145011 (100.00%) 709.69
ip 22814752 ( 99.38%) 16276817181 ( 99.91%) 713.43
tcp 19841054 ( 86.43%) 15547800681 ( 95.43%) 783.62
http(s) 9486907 ( 41.33%) 12461409330 ( 76.49%) 1313.54
http(c) 6361760 ( 27.71%) 861494498 ( 5.29%) 135.42
squid 269289 ( 1.17%) 114622265 ( 0.70%) 425.65
smtp 677499 ( 2.95%) 249523219 ( 1.53%) 368.30
nntp 232 ( 0.00%) 30355 ( 0.00%) 130.84
ftp 102802 ( 0.45%) 33033983 ( 0.20%) 321.34
pop3 35791 ( 0.16%) 21220952 ( 0.13%) 592.91
imap 5918 ( 0.03%) 1463169 ( 0.01%) 247.24
telnet 2543 ( 0.01%) 428099 ( 0.00%) 168.34
ssh 320409 ( 1.40%) 203089556 ( 1.25%) 633.84
dns 11179 ( 0.05%) 4042432 ( 0.02%) 361.61
bgp 184 ( 0.00%) 50449 ( 0.00%) 274.18
napster 9 ( 0.00%) 588 ( 0.00%) 65.33
realaud 18 ( 0.00%) 1930 ( 0.00%) 107.22
rtsp 227704 ( 0.99%) 231219235 ( 1.42%) 1015.44
icecast 4698 ( 0.02%) 4022034 ( 0.02%) 856.12
hotline 4 ( 0.00%) 256 ( 0.00%) 64.00
other 2334048 ( 10.17%) 1362144731 ( 8.36%) 583.60
udp 2401895 ( 10.46%) 647138464 ( 3.97%) 269.43
dns 1377188 ( 6.00%) 232650967 ( 1.43%) 168.93
realaud 31 ( 0.00%) 3313 ( 0.00%) 106.87
halflif 39 ( 0.00%) 4575 ( 0.00%) 117.31
starcra 38 ( 0.00%) 6146 ( 0.00%) 161.74
everque 1202 ( 0.01%) 177647 ( 0.00%) 147.79
unreal 11 ( 0.00%) 1688 ( 0.00%) 153.45
quake 35 ( 0.00%) 3523 ( 0.00%) 100.66
cuseeme 12 ( 0.00%) 1080 ( 0.00%) 90.00
other 1023323 ( 4.46%) 414277295 ( 2.54%) 404.84
icmp 349639 ( 1.52%) 38875911 ( 0.24%) 111.19
ipip 329 ( 0.00%) 38596 ( 0.00%) 117.31
ipsec 6933 ( 0.03%) 1725776 ( 0.01%) 248.92
ip6 1712 ( 0.01%) 1112636 ( 0.01%) 649.90
other 213190 ( 0.93%) 40125117 ( 0.25%) 188.21
frag 3493 ( 0.02%) 3877260 ( 0.02%) 1110.01
ip6 142001 ( 0.62%) 15327710 ( 0.09%) 107.94
tcp6 123653 ( 0.54%) 12110766 ( 0.07%) 97.94
http(s) 288 ( 0.00%) 351216 ( 0.00%) 1219.50
http(c) 120428 ( 0.52%) 10580569 ( 0.06%) 87.86
smtp 607 ( 0.00%) 564282 ( 0.00%) 929.62
imap 364 ( 0.00%) 337415 ( 0.00%) 926.96
ssh 107 ( 0.00%) 87394 ( 0.00%) 816.77
bgp 417 ( 0.00%) 39924 ( 0.00%) 95.74
other 1442 ( 0.01%) 149966 ( 0.00%) 104.00
udp6 13077 ( 0.06%) 2570220 ( 0.02%) 196.55
dns 13042 ( 0.06%) 2566370 ( 0.02%) 196.78
other 35 ( 0.00%) 3850 ( 0.00%) 110.00
icmp6 5235 ( 0.02%) 641918 ( 0.00%) 122.62
ip6 5 ( 0.00%) 590 ( 0.00%) 118.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200809251400.dump.gz (603.58 MB)