Traffic Trace Info
DumpFile: 200810031400.dump
FileSize: 1483.13MB
Id: 200810031400
StartTime: Fri Oct 3 14:00:01 2008
EndTime: Fri Oct 3 14:15:01 2008
TotalTime: 900.22 seconds
TotalCapSize: 1159.42MB CapLen: 96 bytes
# of packets: 21213897 (14273.39MB)
AvgRate: 133.05Mbps stddev:27.00M
IP flow (unique src/dst pair) Information
# of flows: 871857 (avg. 24.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.3% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 521151
Top 10 bandwidth usage (bytes/total in %):
8.4% 6.2% 4.5% 4.0% 2.9% 2.3% 2.2% 1.6% 1.6% 1.6%
# of IPv6 addresses: 850
Top 10 bandwidth usage (bytes/total in %):
56.2% 56.2% 13.5% 12.4% 3.8% 2.9% 2.9% 2.0% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810031400.pktlen.png)
detailed numbers
[ 32- 63]: 5105201
[ 64- 127]: 4680899
[ 128- 255]: 915094
[ 256- 511]: 730027
[ 512- 1023]: 589842
[ 1024- 2047]: 9192834
Protocol Breakdown
![[protocol breakdown chart]](200810031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21213897 (100.00%) 14966732582 (100.00%) 705.52
ip 21166183 ( 99.78%) 14953628420 ( 99.91%) 706.49
tcp 17719295 ( 83.53%) 13948553214 ( 93.20%) 787.20
http(s) 7909776 ( 37.29%) 10682726112 ( 71.38%) 1350.57
http(c) 5405487 ( 25.48%) 568595853 ( 3.80%) 105.19
squid 239073 ( 1.13%) 149021446 ( 1.00%) 623.33
smtp 866477 ( 4.08%) 171227610 ( 1.14%) 197.61
nntp 20 ( 0.00%) 1289 ( 0.00%) 64.45
ftp 97179 ( 0.46%) 86721084 ( 0.58%) 892.39
pop3 33344 ( 0.16%) 15136874 ( 0.10%) 453.96
imap 6474 ( 0.03%) 2920820 ( 0.02%) 451.16
telnet 11358 ( 0.05%) 958646 ( 0.01%) 84.40
ssh 51119 ( 0.24%) 46857577 ( 0.31%) 916.64
dns 15415 ( 0.07%) 1652293 ( 0.01%) 107.19
bgp 992 ( 0.00%) 602892 ( 0.00%) 607.75
napster 191 ( 0.00%) 30605 ( 0.00%) 160.24
realaud 24 ( 0.00%) 3409 ( 0.00%) 142.04
rtsp 382633 ( 1.80%) 410485279 ( 2.74%) 1072.79
icecast 797 ( 0.00%) 101450 ( 0.00%) 127.29
hotline 9 ( 0.00%) 546 ( 0.00%) 60.67
other 2698764 ( 12.72%) 1811499649 ( 12.10%) 671.23
udp 2860909 ( 13.49%) 940647648 ( 6.28%) 328.79
dns 1330861 ( 6.27%) 251603357 ( 1.68%) 189.05
realaud 17058 ( 0.08%) 5975504 ( 0.04%) 350.31
halflif 24 ( 0.00%) 2788 ( 0.00%) 116.17
starcra 125 ( 0.00%) 26089 ( 0.00%) 208.71
everque 116 ( 0.00%) 21890 ( 0.00%) 188.71
unreal 31 ( 0.00%) 5017 ( 0.00%) 161.84
quake 36 ( 0.00%) 3963 ( 0.00%) 110.08
cuseeme 10 ( 0.00%) 1387 ( 0.00%) 138.70
other 1512362 ( 7.13%) 682924284 ( 4.56%) 451.56
icmp 539884 ( 2.54%) 54118981 ( 0.36%) 100.24
ipip 319 ( 0.00%) 39190 ( 0.00%) 122.85
ipsec 9842 ( 0.05%) 3634084 ( 0.02%) 369.24
ip6 742 ( 0.00%) 95835 ( 0.00%) 129.16
other 35192 ( 0.17%) 6539468 ( 0.04%) 185.82
frag 57802 ( 0.27%) 50717713 ( 0.34%) 877.44
ip6 47714 ( 0.22%) 13104162 ( 0.09%) 274.64
tcp6 30617 ( 0.14%) 10300408 ( 0.07%) 336.43
http(s) 5438 ( 0.03%) 7752014 ( 0.05%) 1425.53
http(c) 22367 ( 0.11%) 2092613 ( 0.01%) 93.56
smtp 541 ( 0.00%) 219590 ( 0.00%) 405.90
pop3 31 ( 0.00%) 2670 ( 0.00%) 86.13
ssh 100 ( 0.00%) 22088 ( 0.00%) 220.88
bgp 376 ( 0.00%) 39803 ( 0.00%) 105.86
other 1764 ( 0.01%) 171630 ( 0.00%) 97.30
udp6 11538 ( 0.05%) 2016631 ( 0.01%) 174.78
dns 11489 ( 0.05%) 2011241 ( 0.01%) 175.06
other 49 ( 0.00%) 5390 ( 0.00%) 110.00
icmp6 5529 ( 0.03%) 783043 ( 0.01%) 141.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200810031400.dump.gz (510.72 MB)