Traffic Trace Info
DumpFile: 200810151400.dump
FileSize: 1799.87MB
Id: 200810151400
StartTime: Wed Oct 15 14:00:01 2008
EndTime: Wed Oct 15 14:15:01 2008
TotalTime: 900.11 seconds
TotalCapSize: 1411.15MB CapLen: 96 bytes
# of packets: 25474534 (19412.86MB)
AvgRate: 180.92Mbps stddev:29.54M
IP flow (unique src/dst pair) Information
# of flows: 771099 (avg. 33.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 2.3% 2.2% 1.8% 1.3% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 475789
Top 10 bandwidth usage (bytes/total in %):
4.7% 4.5% 3.9% 3.5% 3.0% 2.6% 2.5% 2.5% 2.5% 2.4%
# of IPv6 addresses: 802
Top 10 bandwidth usage (bytes/total in %):
31.4% 28.8% 16.9% 11.3% 4.9% 3.9% 3.6% 3.6% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810151400.pktlen.png)
detailed numbers
[ 32- 63]: 5638630
[ 64- 127]: 5139459
[ 128- 255]: 772666
[ 256- 511]: 580674
[ 512- 1023]: 593691
[ 1024- 2047]: 12749414
Protocol Breakdown
![[protocol breakdown chart]](200810151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25474534 (100.00%) 20355860247 (100.00%) 799.07
ip 25431666 ( 99.83%) 20350231991 ( 99.97%) 800.19
tcp 22927286 ( 90.00%) 19620818037 ( 96.39%) 855.78
http(s) 10808221 ( 42.43%) 14430984547 ( 70.89%) 1335.19
http(c) 5745330 ( 22.55%) 642117275 ( 3.15%) 111.76
squid 360750 ( 1.42%) 181824594 ( 0.89%) 504.02
smtp 685119 ( 2.69%) 222470804 ( 1.09%) 324.72
nntp 41 ( 0.00%) 3408 ( 0.00%) 83.12
ftp 539968 ( 2.12%) 499324760 ( 2.45%) 924.73
pop3 42547 ( 0.17%) 24479360 ( 0.12%) 575.35
imap 9285 ( 0.04%) 1865104 ( 0.01%) 200.87
telnet 2349 ( 0.01%) 372265 ( 0.00%) 158.48
ssh 93054 ( 0.37%) 71854836 ( 0.35%) 772.18
dns 6059 ( 0.02%) 780876 ( 0.00%) 128.88
bgp 235 ( 0.00%) 88566 ( 0.00%) 376.88
napster 25 ( 0.00%) 2106 ( 0.00%) 84.24
realaud 327 ( 0.00%) 138857 ( 0.00%) 424.64
rtsp 606269 ( 2.38%) 620800453 ( 3.05%) 1023.97
icecast 58897 ( 0.23%) 46673843 ( 0.23%) 792.47
hotline 16 ( 0.00%) 4728 ( 0.00%) 295.50
other 3968789 ( 15.58%) 2877031355 ( 14.13%) 724.91
udp 2161595 ( 8.49%) 666249096 ( 3.27%) 308.22
dns 1196417 ( 4.70%) 205611996 ( 1.01%) 171.86
realaud 16815 ( 0.07%) 5966447 ( 0.03%) 354.83
halflif 17 ( 0.00%) 2663 ( 0.00%) 156.65
starcra 160 ( 0.00%) 22809 ( 0.00%) 142.56
everque 97 ( 0.00%) 14674 ( 0.00%) 151.28
unreal 84 ( 0.00%) 23487 ( 0.00%) 279.61
quake 26 ( 0.00%) 2202 ( 0.00%) 84.69
cuseeme 5 ( 0.00%) 489 ( 0.00%) 97.80
other 947940 ( 3.72%) 454585605 ( 2.23%) 479.55
icmp 257101 ( 1.01%) 34787812 ( 0.17%) 135.31
ipip 313 ( 0.00%) 37468 ( 0.00%) 119.71
ipsec 3295 ( 0.01%) 461562 ( 0.00%) 140.08
ip6 723 ( 0.00%) 91979 ( 0.00%) 127.22
other 81353 ( 0.32%) 27786037 ( 0.14%) 341.55
frag 23772 ( 0.09%) 21561496 ( 0.11%) 907.01
ip6 42868 ( 0.17%) 5628256 ( 0.03%) 131.29
tcp6 24751 ( 0.10%) 2729755 ( 0.01%) 110.29
http(s) 135 ( 0.00%) 165084 ( 0.00%) 1222.84
http(c) 20438 ( 0.08%) 1918957 ( 0.01%) 93.89
smtp 534 ( 0.00%) 264791 ( 0.00%) 495.86
ftp 808 ( 0.00%) 84276 ( 0.00%) 104.30
pop3 28 ( 0.00%) 2285 ( 0.00%) 81.61
ssh 92 ( 0.00%) 10620 ( 0.00%) 115.43
bgp 399 ( 0.00%) 40375 ( 0.00%) 101.19
other 2317 ( 0.01%) 243367 ( 0.00%) 105.04
udp6 8522 ( 0.03%) 1718216 ( 0.01%) 201.62
dns 8492 ( 0.03%) 1714203 ( 0.01%) 201.86
other 30 ( 0.00%) 4013 ( 0.00%) 133.77
icmp6 9562 ( 0.04%) 1173879 ( 0.01%) 122.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2326 ( 0.00%) 775.33
tcpdump file: 200810151400.dump.gz (612.85 MB)