Traffic Trace Info
DumpFile: 200810221400.dump
FileSize: 1808.23MB
Id: 200810221400
StartTime: Wed Oct 22 14:00:00 2008
EndTime: Wed Oct 22 14:15:01 2008
TotalTime: 900.48 seconds
TotalCapSize: 1409.95MB CapLen: 96 bytes
# of packets: 26101053 (18569.65MB)
AvgRate: 173.00Mbps stddev:24.93M
IP flow (unique src/dst pair) Information
# of flows: 607879 (avg. 42.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.0% 1.2% 1.2% 1.1% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 336648
Top 10 bandwidth usage (bytes/total in %):
7.2% 5.5% 4.4% 4.0% 4.0% 3.0% 3.0% 2.9% 2.0% 2.0%
# of IPv6 addresses: 808
Top 10 bandwidth usage (bytes/total in %):
25.6% 23.5% 16.9% 12.3% 9.5% 9.5% 5.6% 5.3% 5.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810221400.pktlen.png)
detailed numbers
[ 32- 63]: 6270626
[ 64- 127]: 5267279
[ 128- 255]: 968915
[ 256- 511]: 566210
[ 512- 1023]: 798757
[ 1024- 2047]: 12229266
Protocol Breakdown
![[protocol breakdown chart]](200810221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26101053 (100.00%) 19471690440 (100.00%) 746.01
ip 26057834 ( 99.83%) 19464718161 ( 99.96%) 746.98
tcp 21988051 ( 84.24%) 17979533310 ( 92.34%) 817.70
http(s) 9674343 ( 37.06%) 12476260499 ( 64.07%) 1289.62
http(c) 5507641 ( 21.10%) 727676870 ( 3.74%) 132.12
squid 281395 ( 1.08%) 186079609 ( 0.96%) 661.28
smtp 732625 ( 2.81%) 210995273 ( 1.08%) 288.00
nntp 129 ( 0.00%) 15961 ( 0.00%) 123.73
ftp 147682 ( 0.57%) 125063685 ( 0.64%) 846.84
pop3 36469 ( 0.14%) 19650971 ( 0.10%) 538.84
imap 11692 ( 0.04%) 2618207 ( 0.01%) 223.93
telnet 50605 ( 0.19%) 3769951 ( 0.02%) 74.50
ssh 96418 ( 0.37%) 77991931 ( 0.40%) 808.89
dns 14409 ( 0.06%) 3428637 ( 0.02%) 237.95
bgp 287 ( 0.00%) 130815 ( 0.00%) 455.80
napster 202 ( 0.00%) 19694 ( 0.00%) 97.50
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 639414 ( 2.45%) 639351924 ( 3.28%) 999.90
icecast 6931 ( 0.03%) 753749 ( 0.00%) 108.75
hotline 10 ( 0.00%) 1009 ( 0.00%) 100.90
other 4787791 ( 18.34%) 3505724039 ( 18.00%) 732.22
udp 3413354 ( 13.08%) 1392520481 ( 7.15%) 407.96
dns 1206147 ( 4.62%) 212824358 ( 1.09%) 176.45
realaud 1727 ( 0.01%) 114629 ( 0.00%) 66.37
halflif 13 ( 0.00%) 1162 ( 0.00%) 89.38
starcra 34 ( 0.00%) 6365 ( 0.00%) 187.21
everque 49 ( 0.00%) 7156 ( 0.00%) 146.04
unreal 198 ( 0.00%) 59644 ( 0.00%) 301.23
quake 27 ( 0.00%) 2388 ( 0.00%) 88.44
cuseeme 13 ( 0.00%) 1487 ( 0.00%) 114.38
other 2204834 ( 8.45%) 1179114968 ( 6.06%) 534.79
icmp 508789 ( 1.95%) 75925659 ( 0.39%) 149.23
ipip 293 ( 0.00%) 34102 ( 0.00%) 116.39
ipsec 4573 ( 0.02%) 865908 ( 0.00%) 189.35
ip6 940 ( 0.00%) 115048 ( 0.00%) 122.39
other 141834 ( 0.54%) 15723653 ( 0.08%) 110.86
frag 24312 ( 0.09%) 22923895 ( 0.12%) 942.90
ip6 43219 ( 0.17%) 6972279 ( 0.04%) 161.32
tcp6 23813 ( 0.09%) 2659465 ( 0.01%) 111.68
http(s) 325 ( 0.00%) 380192 ( 0.00%) 1169.82
http(c) 19835 ( 0.08%) 1881462 ( 0.01%) 94.86
smtp 46 ( 0.00%) 15283 ( 0.00%) 332.24
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 172 ( 0.00%) 43816 ( 0.00%) 254.74
dns 838 ( 0.00%) 62269 ( 0.00%) 74.31
bgp 371 ( 0.00%) 32356 ( 0.00%) 87.21
other 2193 ( 0.01%) 241237 ( 0.00%) 110.00
udp6 9170 ( 0.04%) 1631093 ( 0.01%) 177.87
dns 9120 ( 0.03%) 1624226 ( 0.01%) 178.09
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
other 48 ( 0.00%) 6640 ( 0.00%) 138.33
icmp6 10203 ( 0.04%) 2675247 ( 0.01%) 262.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2394 ( 0.00%) 798.00
tcpdump file: 200810221400.dump.gz (627.80 MB)