Traffic Trace Info
DumpFile: 200810211400.dump
FileSize: 1884.33MB
Id: 200810211400
StartTime: Tue Oct 21 14:00:00 2008
EndTime: Tue Oct 21 14:15:00 2008
TotalTime: 899.67 seconds
TotalCapSize: 1470.67MB CapLen: 96 bytes
# of packets: 27109107 (19154.27MB)
AvgRate: 178.60Mbps stddev:25.21M
IP flow (unique src/dst pair) Information
# of flows: 612478 (avg. 44.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.0% 1.0% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 312342
Top 10 bandwidth usage (bytes/total in %):
4.9% 4.8% 4.5% 4.2% 4.0% 2.5% 2.4% 2.3% 1.9% 1.9%
# of IPv6 addresses: 849
Top 10 bandwidth usage (bytes/total in %):
95.5% 95.3% 1.0% 1.0% 0.6% 0.6% 0.3% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810211400.pktlen.png)
detailed numbers
[ 32- 63]: 6458937
[ 64- 127]: 5611262
[ 128- 255]: 1189825
[ 256- 511]: 619069
[ 512- 1023]: 727529
[ 1024- 2047]: 12502485
Protocol Breakdown
![[protocol breakdown chart]](200810211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27109107 (100.00%) 20084703460 (100.00%) 740.88
ip 26940064 ( 99.38%) 19915377078 ( 99.16%) 739.25
tcp 22887051 ( 84.43%) 18409576768 ( 91.66%) 804.37
http(s) 10616340 ( 39.16%) 13932796302 ( 69.37%) 1312.39
http(c) 6102723 ( 22.51%) 663249949 ( 3.30%) 108.68
squid 241536 ( 0.89%) 122793992 ( 0.61%) 508.39
smtp 899644 ( 3.32%) 240393646 ( 1.20%) 267.21
nntp 125 ( 0.00%) 16293 ( 0.00%) 130.34
ftp 81014 ( 0.30%) 41957766 ( 0.21%) 517.91
pop3 44249 ( 0.16%) 28075759 ( 0.14%) 634.49
imap 12105 ( 0.04%) 3747100 ( 0.02%) 309.55
telnet 1982 ( 0.01%) 210583 ( 0.00%) 106.25
ssh 21903 ( 0.08%) 5604747 ( 0.03%) 255.89
dns 5376 ( 0.02%) 542174 ( 0.00%) 100.85
bgp 184 ( 0.00%) 56398 ( 0.00%) 306.51
napster 17 ( 0.00%) 1120 ( 0.00%) 65.88
realaud 10 ( 0.00%) 731 ( 0.00%) 73.10
rtsp 556936 ( 2.05%) 598458482 ( 2.98%) 1074.56
icecast 10230 ( 0.04%) 4936197 ( 0.02%) 482.52
hotline 39 ( 0.00%) 17294 ( 0.00%) 443.44
other 4292638 ( 15.83%) 2766718235 ( 13.78%) 644.53
udp 3549986 ( 13.10%) 1418179625 ( 7.06%) 399.49
dns 1325838 ( 4.89%) 228945511 ( 1.14%) 172.68
realaud 13368 ( 0.05%) 3474491 ( 0.02%) 259.91
halflif 61 ( 0.00%) 7985 ( 0.00%) 130.90
starcra 89 ( 0.00%) 14275 ( 0.00%) 160.39
everque 79 ( 0.00%) 11139 ( 0.00%) 141.00
unreal 66 ( 0.00%) 17909 ( 0.00%) 271.35
quake 27 ( 0.00%) 3031 ( 0.00%) 112.26
cuseeme 12 ( 0.00%) 1038 ( 0.00%) 86.50
other 2210329 ( 8.15%) 1185673915 ( 5.90%) 536.42
icmp 277942 ( 1.03%) 31364203 ( 0.16%) 112.84
ipip 291 ( 0.00%) 34398 ( 0.00%) 118.21
ipsec 3987 ( 0.01%) 733702 ( 0.00%) 184.02
ip6 1085 ( 0.00%) 139509 ( 0.00%) 128.58
other 219722 ( 0.81%) 55348873 ( 0.28%) 251.90
frag 33972 ( 0.13%) 33755127 ( 0.17%) 993.62
ip6 169043 ( 0.62%) 169326382 ( 0.84%) 1001.68
tcp6 152119 ( 0.56%) 166331666 ( 0.83%) 1093.43
http(s) 127126 ( 0.47%) 163436223 ( 0.81%) 1285.62
http(c) 20168 ( 0.07%) 2083369 ( 0.01%) 103.30
smtp 455 ( 0.00%) 197727 ( 0.00%) 434.56
ftp 16 ( 0.00%) 1510 ( 0.00%) 94.38
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 1953 ( 0.01%) 358918 ( 0.00%) 183.78
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 375 ( 0.00%) 32978 ( 0.00%) 87.94
other 1986 ( 0.01%) 217456 ( 0.00%) 109.49
udp6 10687 ( 0.04%) 2150156 ( 0.01%) 201.19
dns 10637 ( 0.04%) 2143872 ( 0.01%) 201.55
other 50 ( 0.00%) 6284 ( 0.00%) 125.68
icmp6 6184 ( 0.02%) 819189 ( 0.00%) 132.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 21291 ( 0.00%) 925.70
tcpdump file: 200810211400.dump.gz (655.01 MB)