Traffic Trace Info
DumpFile: 200810111400.dump
FileSize: 1450.31MB
Id: 200810111400
StartTime: Sat Oct 11 14:00:00 2008
EndTime: Sat Oct 11 14:15:00 2008
TotalTime: 899.85 seconds
TotalCapSize: 1134.21MB CapLen: 96 bytes
# of packets: 20715653 (14579.60MB)
AvgRate: 135.92Mbps stddev:22.88M
IP flow (unique src/dst pair) Information
# of flows: 716946 (avg. 28.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 3.6% 2.4% 1.8% 1.3% 1.3% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 354545
Top 10 bandwidth usage (bytes/total in %):
13.6% 9.2% 5.2% 4.9% 4.7% 3.7% 3.7% 3.6% 3.4% 3.3%
# of IPv6 addresses: 1449
Top 10 bandwidth usage (bytes/total in %):
58.9% 58.9% 26.6% 26.6% 4.8% 4.4% 1.3% 0.9% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810111400.pktlen.png)
detailed numbers
[ 32- 63]: 4215391
[ 64- 127]: 5249788
[ 128- 255]: 730930
[ 256- 511]: 426683
[ 512- 1023]: 489436
[ 1024- 2047]: 9603425
Protocol Breakdown
![[protocol breakdown chart]](200810111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20715653 (100.00%) 15287819345 (100.00%) 737.98
ip 20654921 ( 99.71%) 15251679945 ( 99.76%) 738.40
tcp 16985754 ( 81.99%) 13839577255 ( 90.53%) 814.78
http(s) 6453686 ( 31.15%) 8760154134 ( 57.30%) 1357.39
http(c) 4398577 ( 21.23%) 378045656 ( 2.47%) 85.95
squid 228779 ( 1.10%) 90315723 ( 0.59%) 394.77
smtp 545892 ( 2.64%) 92146705 ( 0.60%) 168.80
nntp 24 ( 0.00%) 1902 ( 0.00%) 79.25
ftp 152074 ( 0.73%) 104369571 ( 0.68%) 686.31
pop3 32180 ( 0.16%) 18079750 ( 0.12%) 561.83
imap 3174 ( 0.02%) 1260797 ( 0.01%) 397.23
telnet 96532 ( 0.47%) 7136807 ( 0.05%) 73.93
ssh 53715 ( 0.26%) 15845043 ( 0.10%) 294.98
dns 4010 ( 0.02%) 402014 ( 0.00%) 100.25
bgp 191 ( 0.00%) 55906 ( 0.00%) 292.70
napster 237 ( 0.00%) 81453 ( 0.00%) 343.68
realaud 274 ( 0.00%) 79102 ( 0.00%) 288.69
rtsp 601285 ( 2.90%) 645606080 ( 4.22%) 1073.71
icecast 10358 ( 0.05%) 7242316 ( 0.05%) 699.20
other 4404156 ( 21.26%) 3718717696 ( 24.32%) 844.37
udp 3129918 ( 15.11%) 1305104645 ( 8.54%) 416.98
dns 1094336 ( 5.28%) 190086821 ( 1.24%) 173.70
rip 1 ( 0.00%) 98 ( 0.00%) 98.00
realaud 2387 ( 0.01%) 146990 ( 0.00%) 61.58
halflif 19 ( 0.00%) 2111 ( 0.00%) 111.11
starcra 31 ( 0.00%) 4577 ( 0.00%) 147.65
everque 3203 ( 0.02%) 1968313 ( 0.01%) 614.52
unreal 30 ( 0.00%) 7214 ( 0.00%) 240.47
quake 26 ( 0.00%) 2263 ( 0.00%) 87.04
cuseeme 4 ( 0.00%) 295 ( 0.00%) 73.75
other 2029825 ( 9.80%) 1112861074 ( 7.28%) 548.25
icmp 392946 ( 1.90%) 37017800 ( 0.24%) 94.21
ipip 306 ( 0.00%) 38040 ( 0.00%) 124.31
ipsec 3235 ( 0.02%) 433522 ( 0.00%) 134.01
ip6 700 ( 0.00%) 91956 ( 0.00%) 131.37
other 142062 ( 0.69%) 69416727 ( 0.45%) 488.64
frag 60993 ( 0.29%) 52008817 ( 0.34%) 852.70
ip6 60732 ( 0.29%) 36139400 ( 0.24%) 595.06
tcp6 46413 ( 0.22%) 33509211 ( 0.22%) 721.98
http(s) 6612 ( 0.03%) 9789806 ( 0.06%) 1480.61
http(c) 19010 ( 0.09%) 1797431 ( 0.01%) 94.55
smtp 601 ( 0.00%) 243353 ( 0.00%) 404.91
ftp 1010 ( 0.00%) 98426 ( 0.00%) 97.45
pop3 32 ( 0.00%) 2768 ( 0.00%) 86.50
imap 1 ( 0.00%) 74 ( 0.00%) 74.00
ssh 76 ( 0.00%) 8808 ( 0.00%) 115.89
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 364 ( 0.00%) 31313 ( 0.00%) 86.02
other 18700 ( 0.09%) 21536597 ( 0.14%) 1151.69
udp6 9365 ( 0.05%) 1954540 ( 0.01%) 208.71
dns 7918 ( 0.04%) 1551906 ( 0.01%) 196.00
other 1447 ( 0.01%) 402634 ( 0.00%) 278.25
icmp6 4909 ( 0.02%) 658732 ( 0.00%) 134.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 12837 ( 0.00%) 855.80
tcpdump file: 200810111400.dump.gz (489.16 MB)