Traffic Trace Info
DumpFile: 200809291400.dump
FileSize: 1693.41MB
Id: 200809291400
StartTime: Mon Sep 29 14:00:00 2008
EndTime: Mon Sep 29 14:15:01 2008
TotalTime: 900.68 seconds
TotalCapSize: 1328.35MB CapLen: 96 bytes
# of packets: 23923600 (16468.64MB)
AvgRate: 153.39Mbps stddev:31.36M
IP flow (unique src/dst pair) Information
# of flows: 633286 (avg. 37.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.9% 1.7% 1.6% 1.5% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 297901
Top 10 bandwidth usage (bytes/total in %):
11.4% 6.9% 5.1% 4.8% 4.1% 2.7% 2.7% 2.6% 2.6% 2.3%
# of IPv6 addresses: 816
Top 10 bandwidth usage (bytes/total in %):
31.4% 28.8% 11.2% 8.9% 8.9% 5.5% 4.8% 3.5% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200809291400.pktlen.png)
detailed numbers
[ 32- 63]: 5176496
[ 64- 127]: 5906016
[ 128- 255]: 996013
[ 256- 511]: 502640
[ 512- 1023]: 578941
[ 1024- 2047]: 10763494
Protocol Breakdown
![[protocol breakdown chart]](200809291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23923600 (100.00%) 17268625051 (100.00%) 721.82
ip 23879563 ( 99.82%) 17262986925 ( 99.97%) 722.92
tcp 20768755 ( 86.81%) 16418637376 ( 95.08%) 790.55
http(s) 9085316 ( 37.98%) 12216605528 ( 70.74%) 1344.65
http(c) 5749056 ( 24.03%) 607948231 ( 3.52%) 105.75
squid 132661 ( 0.55%) 79389440 ( 0.46%) 598.44
smtp 837792 ( 3.50%) 235458806 ( 1.36%) 281.05
nntp 20 ( 0.00%) 1627 ( 0.00%) 81.35
ftp 144989 ( 0.61%) 118891791 ( 0.69%) 820.01
pop3 29555 ( 0.12%) 13632700 ( 0.08%) 461.27
imap 10891 ( 0.05%) 6782745 ( 0.04%) 622.78
telnet 519 ( 0.00%) 48806 ( 0.00%) 94.04
ssh 802715 ( 3.36%) 91891405 ( 0.53%) 114.48
dns 17434 ( 0.07%) 1829908 ( 0.01%) 104.96
bgp 432 ( 0.00%) 249630 ( 0.00%) 577.85
napster 710 ( 0.00%) 55519 ( 0.00%) 78.20
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 961439 ( 4.02%) 963362970 ( 5.58%) 1002.00
icecast 778 ( 0.00%) 81592 ( 0.00%) 104.87
other 2994158 ( 12.52%) 2082389138 ( 12.06%) 695.48
udp 2717398 ( 11.36%) 793635023 ( 4.60%) 292.06
dns 1352003 ( 5.65%) 240632660 ( 1.39%) 177.98
rip 1 ( 0.00%) 73 ( 0.00%) 73.00
realaud 4136 ( 0.02%) 1377764 ( 0.01%) 333.12
halflif 30 ( 0.00%) 3267 ( 0.00%) 108.90
starcra 57 ( 0.00%) 9289 ( 0.00%) 162.96
everque 78 ( 0.00%) 10443 ( 0.00%) 133.88
unreal 9 ( 0.00%) 1194 ( 0.00%) 132.67
quake 25 ( 0.00%) 2379 ( 0.00%) 95.16
cuseeme 4 ( 0.00%) 371 ( 0.00%) 92.75
other 1360858 ( 5.69%) 551514611 ( 3.19%) 405.27
icmp 348148 ( 1.46%) 33290538 ( 0.19%) 95.62
ipip 332 ( 0.00%) 39529 ( 0.00%) 119.06
ipsec 9360 ( 0.04%) 3201256 ( 0.02%) 342.01
ip6 924 ( 0.00%) 116099 ( 0.00%) 125.65
other 34646 ( 0.14%) 14067104 ( 0.08%) 406.02
frag 58735 ( 0.25%) 51460862 ( 0.30%) 876.15
ip6 44037 ( 0.18%) 5638126 ( 0.03%) 128.03
tcp6 25310 ( 0.11%) 2693936 ( 0.02%) 106.44
http(s) 126 ( 0.00%) 162688 ( 0.00%) 1291.17
http(c) 19400 ( 0.08%) 1838114 ( 0.01%) 94.75
smtp 68 ( 0.00%) 12984 ( 0.00%) 190.94
pop3 47 ( 0.00%) 5448 ( 0.00%) 115.91
imap 6 ( 0.00%) 5075 ( 0.00%) 845.83
ssh 14 ( 0.00%) 1908 ( 0.00%) 136.29
dns 16 ( 0.00%) 2989 ( 0.00%) 186.81
bgp 401 ( 0.00%) 37743 ( 0.00%) 94.12
other 5232 ( 0.02%) 626987 ( 0.00%) 119.84
udp6 14124 ( 0.06%) 2287577 ( 0.01%) 161.96
dns 14101 ( 0.06%) 2285049 ( 0.01%) 162.05
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 4560 ( 0.02%) 641198 ( 0.00%) 140.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 11335 ( 0.00%) 871.92
tcpdump file: 200809291400.dump.gz (603.44 MB)