Traffic Trace Info
DumpFile: 200810091400.dump
FileSize: 1701.26MB
Id: 200810091400
StartTime: Thu Oct 9 14:00:00 2008
EndTime: Thu Oct 9 14:15:00 2008
TotalTime: 900.07 seconds
TotalCapSize: 1330.42MB CapLen: 96 bytes
# of packets: 24303227 (16141.41MB)
AvgRate: 150.46Mbps stddev:28.67M
IP flow (unique src/dst pair) Information
# of flows: 661159 (avg. 36.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.7% 1.2% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 382431
Top 10 bandwidth usage (bytes/total in %):
6.4% 5.7% 3.1% 2.8% 2.4% 2.3% 2.2% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1430
Top 10 bandwidth usage (bytes/total in %):
48.6% 48.5% 14.1% 14.1% 10.4% 10.4% 10.3% 10.3% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810091400.pktlen.png)
detailed numbers
[ 32- 63]: 6926253
[ 64- 127]: 4834830
[ 128- 255]: 960444
[ 256- 511]: 486728
[ 512- 1023]: 719014
[ 1024- 2047]: 10375958
Protocol Breakdown
![[protocol breakdown chart]](200810091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24303227 (100.00%) 16925496286 (100.00%) 696.43
ip 24237982 ( 99.73%) 16883585565 ( 99.75%) 696.58
tcp 21467416 ( 88.33%) 16196232116 ( 95.69%) 754.46
http(s) 9344223 ( 38.45%) 12546669520 ( 74.13%) 1342.72
http(c) 5774871 ( 23.76%) 605280491 ( 3.58%) 104.81
squid 379809 ( 1.56%) 214226548 ( 1.27%) 564.04
smtp 690177 ( 2.84%) 148338499 ( 0.88%) 214.93
nntp 1547262 ( 6.37%) 93653978 ( 0.55%) 60.53
ftp 135562 ( 0.56%) 91900408 ( 0.54%) 677.92
pop3 48365 ( 0.20%) 30663681 ( 0.18%) 634.01
imap 9590 ( 0.04%) 2592576 ( 0.02%) 270.34
telnet 5014 ( 0.02%) 462853 ( 0.00%) 92.31
ssh 13879 ( 0.06%) 3496955 ( 0.02%) 251.96
dns 4891 ( 0.02%) 502800 ( 0.00%) 102.80
bgp 220 ( 0.00%) 80831 ( 0.00%) 367.41
napster 66 ( 0.00%) 11625 ( 0.00%) 176.14
realaud 45 ( 0.00%) 5844 ( 0.00%) 129.87
rtsp 462339 ( 1.90%) 443238363 ( 2.62%) 958.69
icecast 6675 ( 0.03%) 418912 ( 0.00%) 62.76
other 3044126 ( 12.53%) 2014670112 ( 11.90%) 661.82
udp 2434418 ( 10.02%) 637991701 ( 3.77%) 262.07
dns 1334515 ( 5.49%) 236858475 ( 1.40%) 177.49
realaud 7597 ( 0.03%) 494279 ( 0.00%) 65.06
halflif 27 ( 0.00%) 2430 ( 0.00%) 90.00
starcra 45 ( 0.00%) 7300 ( 0.00%) 162.22
everque 66 ( 0.00%) 10827 ( 0.00%) 164.05
unreal 20 ( 0.00%) 3684 ( 0.00%) 184.20
quake 20 ( 0.00%) 1883 ( 0.00%) 94.15
cuseeme 6 ( 0.00%) 477 ( 0.00%) 79.50
other 1092110 ( 4.49%) 400603841 ( 2.37%) 366.82
icmp 213876 ( 0.88%) 28300077 ( 0.17%) 132.32
ipip 341 ( 0.00%) 41754 ( 0.00%) 122.45
ipsec 4600 ( 0.02%) 819666 ( 0.00%) 178.19
ip6 730 ( 0.00%) 96782 ( 0.00%) 132.58
other 116601 ( 0.48%) 20103469 ( 0.12%) 172.41
frag 23046 ( 0.09%) 20327662 ( 0.12%) 882.05
ip6 65245 ( 0.27%) 41910721 ( 0.25%) 642.36
tcp6 47949 ( 0.20%) 38759016 ( 0.23%) 808.34
http(s) 25889 ( 0.11%) 36496163 ( 0.22%) 1409.72
http(c) 19242 ( 0.08%) 1829371 ( 0.01%) 95.07
smtp 568 ( 0.00%) 175673 ( 0.00%) 309.28
ssh 87 ( 0.00%) 10166 ( 0.00%) 116.85
bgp 361 ( 0.00%) 42028 ( 0.00%) 116.42
other 1802 ( 0.01%) 205615 ( 0.00%) 114.10
udp6 11513 ( 0.05%) 2342621 ( 0.01%) 203.48
dns 10439 ( 0.04%) 2072082 ( 0.01%) 198.49
other 1074 ( 0.00%) 270539 ( 0.00%) 251.90
icmp6 5709 ( 0.02%) 765296 ( 0.00%) 134.05
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 43 ( 0.00%) 39572 ( 0.00%) 920.28
tcpdump file: 200810091400.dump.gz (582.65 MB)