Traffic Trace Info
DumpFile: 200810141400.dump
FileSize: 1816.43MB
Id: 200810141400
StartTime: Tue Oct 14 14:00:01 2008
EndTime: Tue Oct 14 14:15:01 2008
TotalTime: 899.87 seconds
TotalCapSize: 1421.67MB CapLen: 96 bytes
# of packets: 25870513 (18254.39MB)
AvgRate: 170.18Mbps stddev:28.36M
IP flow (unique src/dst pair) Information
# of flows: 635155 (avg. 40.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.8% 1.6% 1.5% 1.3% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 349071
Top 10 bandwidth usage (bytes/total in %):
4.8% 3.8% 3.5% 3.4% 2.9% 2.9% 2.9% 2.7% 2.6% 2.2%
# of IPv6 addresses: 823
Top 10 bandwidth usage (bytes/total in %):
27.5% 26.0% 9.4% 9.4% 6.4% 6.4% 5.1% 4.6% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810141400.pktlen.png)
detailed numbers
[ 32- 63]: 5799748
[ 64- 127]: 5754981
[ 128- 255]: 1008697
[ 256- 511]: 660619
[ 512- 1023]: 723116
[ 1024- 2047]: 11923352
Protocol Breakdown
![[protocol breakdown chart]](200810141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25870513 (100.00%) 19141112115 (100.00%) 739.88
ip 25829036 ( 99.84%) 19134861795 ( 99.97%) 740.83
tcp 22137124 ( 85.57%) 17954783446 ( 93.80%) 811.07
http(s) 9630682 ( 37.23%) 12481901716 ( 65.21%) 1296.06
http(c) 6229194 ( 24.08%) 743832263 ( 3.89%) 119.41
squid 344450 ( 1.33%) 161084133 ( 0.84%) 467.66
smtp 643937 ( 2.49%) 171237614 ( 0.89%) 265.92
nntp 57 ( 0.00%) 6053 ( 0.00%) 106.19
ftp 143157 ( 0.55%) 100271434 ( 0.52%) 700.43
pop3 36404 ( 0.14%) 21847655 ( 0.11%) 600.14
imap 20103 ( 0.08%) 17425069 ( 0.09%) 866.79
telnet 9061 ( 0.04%) 767440 ( 0.00%) 84.70
ssh 51780 ( 0.20%) 25223549 ( 0.13%) 487.13
dns 9111 ( 0.04%) 1081894 ( 0.01%) 118.75
bgp 189 ( 0.00%) 52029 ( 0.00%) 275.29
napster 43 ( 0.00%) 3346 ( 0.00%) 77.81
realaud 176 ( 0.00%) 74102 ( 0.00%) 421.03
rtsp 650940 ( 2.52%) 666763199 ( 3.48%) 1024.31
icecast 706531 ( 2.73%) 602622456 ( 3.15%) 852.93
hotline 4 ( 0.00%) 242 ( 0.00%) 60.50
other 3661305 ( 14.15%) 2960589252 ( 15.47%) 808.62
udp 3096245 ( 11.97%) 1099823225 ( 5.75%) 355.21
dns 1300654 ( 5.03%) 231852003 ( 1.21%) 178.26
realaud 3822 ( 0.01%) 240243 ( 0.00%) 62.86
halflif 19 ( 0.00%) 1795 ( 0.00%) 94.47
starcra 27 ( 0.00%) 3071 ( 0.00%) 113.74
everque 49 ( 0.00%) 7405 ( 0.00%) 151.12
unreal 111 ( 0.00%) 29654 ( 0.00%) 267.15
quake 28 ( 0.00%) 2217 ( 0.00%) 79.18
cuseeme 7 ( 0.00%) 910 ( 0.00%) 130.00
other 1791417 ( 6.92%) 867546279 ( 4.53%) 484.28
icmp 407402 ( 1.57%) 49276089 ( 0.26%) 120.95
ipip 306 ( 0.00%) 37820 ( 0.00%) 123.59
ipsec 3754 ( 0.01%) 602292 ( 0.00%) 160.44
ip6 749 ( 0.00%) 101160 ( 0.00%) 135.06
other 183456 ( 0.71%) 30237763 ( 0.16%) 164.82
frag 25525 ( 0.10%) 23335968 ( 0.12%) 914.24
ip6 41477 ( 0.16%) 6250320 ( 0.03%) 150.69
tcp6 27189 ( 0.11%) 3753879 ( 0.02%) 138.07
http(s) 585 ( 0.00%) 711680 ( 0.00%) 1216.55
http(c) 18528 ( 0.07%) 1747038 ( 0.01%) 94.29
smtp 161 ( 0.00%) 64205 ( 0.00%) 398.79
ftp 2211 ( 0.01%) 270890 ( 0.00%) 122.52
pop3 54 ( 0.00%) 4259 ( 0.00%) 78.87
ssh 1833 ( 0.01%) 589950 ( 0.00%) 321.85
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 351 ( 0.00%) 29234 ( 0.00%) 83.29
other 3459 ( 0.01%) 335988 ( 0.00%) 97.13
udp6 9784 ( 0.04%) 1915801 ( 0.01%) 195.81
dns 9745 ( 0.04%) 1911407 ( 0.01%) 196.14
other 39 ( 0.00%) 4394 ( 0.00%) 112.67
icmp6 4471 ( 0.02%) 574288 ( 0.00%) 128.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2272 ( 0.00%) 757.33
tcpdump file: 200810141400.dump.gz (635.50 MB)