Traffic Trace Info
DumpFile: 200810041400.dump
FileSize: 1130.10MB
Id: 200810041400
StartTime: Sat Oct 4 14:00:00 2008
EndTime: Sat Oct 4 14:15:00 2008
TotalTime: 900.19 seconds
TotalCapSize: 884.13MB CapLen: 96 bytes
# of packets: 16119015 (11386.16MB)
AvgRate: 106.10Mbps stddev:23.13M
IP flow (unique src/dst pair) Information
# of flows: 516351 (avg. 31.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.6% 1.6% 1.2% 1.2% 1.1% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 278169
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.7% 6.5% 6.3% 6.3% 5.7% 3.3% 3.3% 3.2% 3.1%
# of IPv6 addresses: 759
Top 10 bandwidth usage (bytes/total in %):
30.5% 30.5% 24.7% 24.6% 14.7% 13.5% 5.5% 3.5% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810041400.pktlen.png)
detailed numbers
[ 32- 63]: 3587734
[ 64- 127]: 3512481
[ 128- 255]: 633149
[ 256- 511]: 581455
[ 512- 1023]: 501245
[ 1024- 2047]: 7302951
Protocol Breakdown
![[protocol breakdown chart]](200810041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16119015 (100.00%) 11939253050 (100.00%) 740.69
ip 16067174 ( 99.68%) 11927186119 ( 99.90%) 742.33
tcp 13578324 ( 84.24%) 11222839110 ( 94.00%) 826.53
http(s) 5771438 ( 35.81%) 7886389249 ( 66.05%) 1366.45
http(c) 3925384 ( 24.35%) 680727268 ( 5.70%) 173.42
squid 131030 ( 0.81%) 54288643 ( 0.45%) 414.32
smtp 594927 ( 3.69%) 106562180 ( 0.89%) 179.12
ftp 222710 ( 1.38%) 220209152 ( 1.84%) 988.77
pop3 52546 ( 0.33%) 35410134 ( 0.30%) 673.89
imap 4127 ( 0.03%) 956036 ( 0.01%) 231.65
telnet 689 ( 0.00%) 47244 ( 0.00%) 68.57
ssh 94877 ( 0.59%) 12795825 ( 0.11%) 134.87
dns 14365 ( 0.09%) 1506528 ( 0.01%) 104.87
bgp 193 ( 0.00%) 46869 ( 0.00%) 242.84
napster 287 ( 0.00%) 27836 ( 0.00%) 96.99
realaud 9 ( 0.00%) 666 ( 0.00%) 74.00
rtsp 591494 ( 3.67%) 608393157 ( 5.10%) 1028.57
icecast 538 ( 0.00%) 75471 ( 0.00%) 140.28
hotline 16 ( 0.00%) 1764 ( 0.00%) 110.25
other 2173595 ( 13.48%) 1615395148 ( 13.53%) 743.19
udp 2018356 ( 12.52%) 653402951 ( 5.47%) 323.73
dns 1140052 ( 7.07%) 236121927 ( 1.98%) 207.12
rip 1 ( 0.00%) 78 ( 0.00%) 78.00
realaud 2146 ( 0.01%) 138998 ( 0.00%) 64.77
halflif 15 ( 0.00%) 1587 ( 0.00%) 105.80
starcra 11 ( 0.00%) 1717 ( 0.00%) 156.09
everque 45 ( 0.00%) 6938 ( 0.00%) 154.18
unreal 27 ( 0.00%) 5562 ( 0.00%) 206.00
quake 25 ( 0.00%) 2919 ( 0.00%) 116.76
cuseeme 7 ( 0.00%) 599 ( 0.00%) 85.57
other 875889 ( 5.43%) 417074510 ( 3.49%) 476.17
icmp 436691 ( 2.71%) 43566511 ( 0.36%) 99.77
ipip 335 ( 0.00%) 41842 ( 0.00%) 124.90
ipsec 11464 ( 0.07%) 4275376 ( 0.04%) 372.94
ip6 708 ( 0.00%) 90359 ( 0.00%) 127.63
other 21296 ( 0.13%) 2969970 ( 0.02%) 139.46
frag 51836 ( 0.32%) 45481003 ( 0.38%) 877.40
ip6 51841 ( 0.32%) 12066931 ( 0.10%) 232.77
tcp6 35656 ( 0.22%) 9562240 ( 0.08%) 268.18
http(s) 6735 ( 0.04%) 6644936 ( 0.06%) 986.63
http(c) 19549 ( 0.12%) 1833143 ( 0.02%) 93.77
smtp 572 ( 0.00%) 232880 ( 0.00%) 407.13
ftp 3720 ( 0.02%) 382169 ( 0.00%) 102.73
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 108 ( 0.00%) 26108 ( 0.00%) 241.74
bgp 356 ( 0.00%) 29477 ( 0.00%) 82.80
other 4583 ( 0.03%) 410677 ( 0.00%) 89.61
udp6 10848 ( 0.07%) 1811587 ( 0.02%) 167.00
dns 10819 ( 0.07%) 1800633 ( 0.02%) 166.43
other 29 ( 0.00%) 10954 ( 0.00%) 377.72
icmp6 5301 ( 0.03%) 683853 ( 0.01%) 129.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5171 ( 0.00%) 861.83
tcpdump file: 200810041400.dump.gz (381.86 MB)