Traffic Trace Info
DumpFile: 200810081400.dump
FileSize: 1483.28MB
Id: 200810081400
StartTime: Wed Oct 8 14:00:01 2008
EndTime: Wed Oct 8 14:15:00 2008
TotalTime: 899.43 seconds
TotalCapSize: 1162.33MB CapLen: 96 bytes
# of packets: 21032981 (13929.10MB)
AvgRate: 129.92Mbps stddev:27.18M
IP flow (unique src/dst pair) Information
# of flows: 570842 (avg. 36.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.5% 1.5% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 283683
Top 10 bandwidth usage (bytes/total in %):
6.9% 4.9% 4.9% 3.9% 3.4% 3.1% 2.6% 2.6% 2.3% 2.3%
# of IPv6 addresses: 831
Top 10 bandwidth usage (bytes/total in %):
34.9% 34.9% 26.2% 26.2% 11.9% 10.8% 8.4% 7.7% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810081400.pktlen.png)
detailed numbers
[ 32- 63]: 4956096
[ 64- 127]: 5120257
[ 128- 255]: 940234
[ 256- 511]: 492572
[ 512- 1023]: 605193
[ 1024- 2047]: 8918629
Protocol Breakdown
![[protocol breakdown chart]](200810081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21032981 (100.00%) 14605716366 (100.00%) 694.42
ip 20983103 ( 99.76%) 14584583006 ( 99.86%) 695.06
tcp 18352532 ( 87.26%) 13994690068 ( 95.82%) 762.55
http(s) 8390114 ( 39.89%) 10971485755 ( 75.12%) 1307.67
http(c) 6263270 ( 29.78%) 678085887 ( 4.64%) 108.26
squid 275204 ( 1.31%) 100762101 ( 0.69%) 366.14
smtp 703704 ( 3.35%) 171547049 ( 1.17%) 243.78
nntp 100 ( 0.00%) 9702 ( 0.00%) 97.02
ftp 140844 ( 0.67%) 80704276 ( 0.55%) 573.00
pop3 50965 ( 0.24%) 31076732 ( 0.21%) 609.77
imap 7717 ( 0.04%) 3839082 ( 0.03%) 497.48
telnet 1687 ( 0.01%) 326034 ( 0.00%) 193.26
ssh 6891 ( 0.03%) 2186580 ( 0.01%) 317.31
dns 5534 ( 0.03%) 574918 ( 0.00%) 103.89
bgp 207 ( 0.00%) 65843 ( 0.00%) 318.08
napster 8 ( 0.00%) 1035 ( 0.00%) 129.38
realaud 26 ( 0.00%) 2050 ( 0.00%) 78.85
rtsp 319491 ( 1.52%) 338661895 ( 2.32%) 1060.00
icecast 26454 ( 0.13%) 1649055 ( 0.01%) 62.34
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2160069 ( 10.27%) 1613697252 ( 11.05%) 747.06
udp 2219647 ( 10.55%) 525912001 ( 3.60%) 236.93
dns 1498572 ( 7.12%) 251854913 ( 1.72%) 168.06
realaud 17944 ( 0.09%) 6020049 ( 0.04%) 335.49
halflif 19 ( 0.00%) 1793 ( 0.00%) 94.37
starcra 31 ( 0.00%) 4840 ( 0.00%) 156.13
everque 72 ( 0.00%) 10145 ( 0.00%) 140.90
unreal 21 ( 0.00%) 3287 ( 0.00%) 156.52
quake 16 ( 0.00%) 1310 ( 0.00%) 81.88
cuseeme 6 ( 0.00%) 547 ( 0.00%) 91.17
other 702747 ( 3.34%) 267705823 ( 1.83%) 380.94
icmp 248461 ( 1.18%) 33183179 ( 0.23%) 133.55
ipip 314 ( 0.00%) 37440 ( 0.00%) 119.24
ipsec 3758 ( 0.02%) 562260 ( 0.00%) 149.62
ip6 709 ( 0.00%) 90471 ( 0.00%) 127.60
other 157682 ( 0.75%) 30107587 ( 0.21%) 190.94
frag 26817 ( 0.13%) 24614256 ( 0.17%) 917.86
ip6 49878 ( 0.24%) 21133360 ( 0.14%) 423.70
tcp6 34838 ( 0.17%) 18496773 ( 0.13%) 530.94
http(s) 8460 ( 0.04%) 10701762 ( 0.07%) 1264.98
http(c) 19336 ( 0.09%) 1813823 ( 0.01%) 93.81
smtp 404 ( 0.00%) 133738 ( 0.00%) 331.03
ftp 18 ( 0.00%) 2095 ( 0.00%) 116.39
pop3 3 ( 0.00%) 254 ( 0.00%) 84.67
ssh 96 ( 0.00%) 23008 ( 0.00%) 239.67
bgp 356 ( 0.00%) 29807 ( 0.00%) 83.73
other 6165 ( 0.03%) 5792286 ( 0.04%) 939.54
udp6 9691 ( 0.05%) 1906970 ( 0.01%) 196.78
dns 9669 ( 0.05%) 1904542 ( 0.01%) 196.97
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 5308 ( 0.03%) 715925 ( 0.00%) 134.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 9612 ( 0.00%) 873.82
tcpdump file: 200810081400.dump.gz (519.74 MB)