Traffic Trace Info
DumpFile: 200810061400.dump
FileSize: 1957.69MB
Id: 200810061400
StartTime: Mon Oct 6 14:00:00 2008
EndTime: Mon Oct 6 14:15:00 2008
TotalTime: 899.97 seconds
TotalCapSize: 1536.14MB CapLen: 96 bytes
# of packets: 27626283 (20217.35MB)
AvgRate: 188.48Mbps stddev:27.14M
IP flow (unique src/dst pair) Information
# of flows: 734392 (avg. 37.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 2.0% 1.9% 1.6% 1.6% 1.6% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 390532
Top 10 bandwidth usage (bytes/total in %):
7.8% 6.0% 5.1% 4.4% 4.2% 3.0% 2.6% 2.5% 2.4% 2.4%
# of IPv6 addresses: 817
Top 10 bandwidth usage (bytes/total in %):
93.4% 70.7% 22.7% 1.7% 1.5% 1.5% 1.5% 0.4% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810061400.pktlen.png)
detailed numbers
[ 32- 63]: 6017085
[ 64- 127]: 6141894
[ 128- 255]: 903456
[ 256- 511]: 676473
[ 512- 1023]: 644016
[ 1024- 2047]: 13243359
Protocol Breakdown
![[protocol breakdown chart]](200810061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27626283 (100.00%) 21199426783 (100.00%) 767.36
ip 27517559 ( 99.61%) 21092639348 ( 99.50%) 766.52
tcp 24281381 ( 87.89%) 20438755464 ( 96.41%) 841.75
http(s) 10900656 ( 39.46%) 14772428524 ( 69.68%) 1355.19
http(c) 6890904 ( 24.94%) 999918122 ( 4.72%) 145.11
squid 127812 ( 0.46%) 33036457 ( 0.16%) 258.48
smtp 680613 ( 2.46%) 149044449 ( 0.70%) 218.99
nntp 20 ( 0.00%) 1232 ( 0.00%) 61.60
ftp 138780 ( 0.50%) 103441620 ( 0.49%) 745.36
pop3 46143 ( 0.17%) 28088601 ( 0.13%) 608.73
imap 7870 ( 0.03%) 2468249 ( 0.01%) 313.63
telnet 15267 ( 0.06%) 1184544 ( 0.01%) 77.59
ssh 165453 ( 0.60%) 135699051 ( 0.64%) 820.17
dns 5599 ( 0.02%) 512453 ( 0.00%) 91.53
bgp 181 ( 0.00%) 52393 ( 0.00%) 289.46
napster 25 ( 0.00%) 2312 ( 0.00%) 92.48
realaud 14 ( 0.00%) 1260 ( 0.00%) 90.00
rtsp 1483297 ( 5.37%) 1456289093 ( 6.87%) 981.79
icecast 1108 ( 0.00%) 121195 ( 0.00%) 109.38
hotline 26 ( 0.00%) 2070 ( 0.00%) 79.62
other 3817520 ( 13.82%) 2756458259 ( 13.00%) 722.05
udp 2201520 ( 7.97%) 543711498 ( 2.56%) 246.97
dns 1392303 ( 5.04%) 254147974 ( 1.20%) 182.54
realaud 4163 ( 0.02%) 289469 ( 0.00%) 69.53
halflif 18 ( 0.00%) 2298 ( 0.00%) 127.67
starcra 36 ( 0.00%) 5719 ( 0.00%) 158.86
everque 158 ( 0.00%) 20973 ( 0.00%) 132.74
unreal 14 ( 0.00%) 1836 ( 0.00%) 131.14
quake 34 ( 0.00%) 3126 ( 0.00%) 91.94
cuseeme 7 ( 0.00%) 941 ( 0.00%) 134.43
other 804710 ( 2.91%) 289130059 ( 1.36%) 359.30
icmp 914915 ( 3.31%) 87063657 ( 0.41%) 95.16
ipip 324 ( 0.00%) 38398 ( 0.00%) 118.51
ipsec 3756 ( 0.01%) 563336 ( 0.00%) 149.98
ip6 733 ( 0.00%) 94098 ( 0.00%) 128.37
other 114930 ( 0.42%) 22412897 ( 0.11%) 195.01
frag 4561 ( 0.02%) 4362528 ( 0.02%) 956.48
ip6 108724 ( 0.39%) 106787435 ( 0.50%) 982.19
tcp6 92226 ( 0.33%) 104105902 ( 0.49%) 1128.81
http(s) 68525 ( 0.25%) 100199466 ( 0.47%) 1462.23
http(c) 19427 ( 0.07%) 1825293 ( 0.01%) 93.96
smtp 675 ( 0.00%) 240830 ( 0.00%) 356.79
ftp 60 ( 0.00%) 7162 ( 0.00%) 119.37
ssh 258 ( 0.00%) 70252 ( 0.00%) 272.29
bgp 363 ( 0.00%) 30872 ( 0.00%) 85.05
other 2918 ( 0.01%) 1732027 ( 0.01%) 593.57
udp6 11052 ( 0.04%) 1947564 ( 0.01%) 176.22
dns 11022 ( 0.04%) 1944271 ( 0.01%) 176.40
starcra 1 ( 0.00%) 119 ( 0.00%) 119.00
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 27 ( 0.00%) 2970 ( 0.00%) 110.00
icmp6 5416 ( 0.02%) 729889 ( 0.00%) 134.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200810061400.dump.gz (655.77 MB)