Traffic Trace Info
DumpFile: 200810011400.dump
FileSize: 1620.56MB
Id: 200810011400
StartTime: Wed Oct 1 14:00:01 2008
EndTime: Wed Oct 1 14:15:01 2008
TotalTime: 900.16 seconds
TotalCapSize: 1265.43MB CapLen: 96 bytes
# of packets: 23272800 (16527.56MB)
AvgRate: 154.00Mbps stddev:30.54M
IP flow (unique src/dst pair) Information
# of flows: 559014 (avg. 41.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.8% 1.6% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 286763
Top 10 bandwidth usage (bytes/total in %):
9.5% 6.2% 4.5% 3.2% 3.2% 2.6% 2.5% 2.3% 2.2% 1.8%
# of IPv6 addresses: 813
Top 10 bandwidth usage (bytes/total in %):
37.1% 35.2% 6.8% 6.6% 3.9% 3.9% 3.5% 3.3% 3.2% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810011400.pktlen.png)
detailed numbers
[ 32- 63]: 5332775
[ 64- 127]: 5049850
[ 128- 255]: 868167
[ 256- 511]: 605250
[ 512- 1023]: 702489
[ 1024- 2047]: 10714269
Protocol Breakdown
![[protocol breakdown chart]](200810011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23272800 (100.00%) 17330401303 (100.00%) 744.66
ip 23236721 ( 99.84%) 17325770573 ( 99.97%) 745.62
tcp 19461754 ( 83.62%) 15796150836 ( 91.15%) 811.65
http(s) 8726316 ( 37.50%) 11982451721 ( 69.14%) 1373.14
http(c) 5816098 ( 24.99%) 615410781 ( 3.55%) 105.81
squid 230781 ( 0.99%) 145188296 ( 0.84%) 629.12
smtp 770917 ( 3.31%) 160335917 ( 0.93%) 207.98
nntp 38 ( 0.00%) 3145 ( 0.00%) 82.76
ftp 161237 ( 0.69%) 180018402 ( 1.04%) 1116.48
pop3 28371 ( 0.12%) 13172788 ( 0.08%) 464.30
imap 7860 ( 0.03%) 3749107 ( 0.02%) 476.99
telnet 377 ( 0.00%) 42122 ( 0.00%) 111.73
ssh 207799 ( 0.89%) 23989874 ( 0.14%) 115.45
dns 15137 ( 0.07%) 1852356 ( 0.01%) 122.37
bgp 201 ( 0.00%) 59883 ( 0.00%) 297.93
napster 46 ( 0.00%) 8115 ( 0.00%) 176.41
realaud 43 ( 0.00%) 2928 ( 0.00%) 68.09
rtsp 438333 ( 1.88%) 395662859 ( 2.28%) 902.65
icecast 2354 ( 0.01%) 155571 ( 0.00%) 66.09
other 3055708 ( 13.13%) 2274038691 ( 13.12%) 744.19
udp 3479507 ( 14.95%) 1500687187 ( 8.66%) 431.29
dns 1227853 ( 5.28%) 226519297 ( 1.31%) 184.48
realaud 60818 ( 0.26%) 36372195 ( 0.21%) 598.05
halflif 23 ( 0.00%) 4023 ( 0.00%) 174.91
starcra 73 ( 0.00%) 11711 ( 0.00%) 160.42
everque 185 ( 0.00%) 18949 ( 0.00%) 102.43
unreal 19 ( 0.00%) 3341 ( 0.00%) 175.84
quake 21 ( 0.00%) 2169 ( 0.00%) 103.29
cuseeme 5 ( 0.00%) 471 ( 0.00%) 94.20
other 2190271 ( 9.41%) 1237676637 ( 7.14%) 565.08
icmp 275815 ( 1.19%) 26116915 ( 0.15%) 94.69
ipip 322 ( 0.00%) 38296 ( 0.00%) 118.93
ipsec 4768 ( 0.02%) 841926 ( 0.00%) 176.58
ip6 692 ( 0.00%) 88907 ( 0.00%) 128.48
other 13863 ( 0.06%) 1846506 ( 0.01%) 133.20
frag 58099 ( 0.25%) 51305596 ( 0.30%) 883.07
ip6 36079 ( 0.16%) 4630730 ( 0.03%) 128.35
tcp6 20920 ( 0.09%) 2207080 ( 0.01%) 105.50
http(s) 88 ( 0.00%) 115813 ( 0.00%) 1316.06
http(c) 18534 ( 0.08%) 1743704 ( 0.01%) 94.08
smtp 226 ( 0.00%) 66344 ( 0.00%) 293.56
pop3 61 ( 0.00%) 6743 ( 0.00%) 110.54
ssh 210 ( 0.00%) 37856 ( 0.00%) 180.27
bgp 400 ( 0.00%) 41685 ( 0.00%) 104.21
other 1401 ( 0.01%) 194935 ( 0.00%) 139.14
udp6 10245 ( 0.04%) 1744035 ( 0.01%) 170.23
dns 10224 ( 0.04%) 1741725 ( 0.01%) 170.36
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 4879 ( 0.02%) 671935 ( 0.00%) 137.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 3600 ( 0.00%) 720.00
tcpdump file: 200810011400.dump.gz (560.33 MB)