Traffic Trace Info
DumpFile: 200810241400.dump
FileSize: 1954.52MB
Id: 200810241400
StartTime: Fri Oct 24 14:00:00 2008
EndTime: Fri Oct 24 14:15:00 2008
TotalTime: 899.78 seconds
TotalCapSize: 1523.47MB CapLen: 96 bytes
# of packets: 28249209 (20391.01MB)
AvgRate: 190.12Mbps stddev:23.20M
IP flow (unique src/dst pair) Information
# of flows: 631778 (avg. 44.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 6.1% 4.0% 3.5% 2.0% 2.0% 1.4% 1.0% 0.9% 0.6%
IP address Information
# of IPv4 addresses: 324335
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.0% 6.7% 6.3% 4.2% 4.2% 3.9% 3.7% 3.7% 3.4%
# of IPv6 addresses: 854
Top 10 bandwidth usage (bytes/total in %):
91.7% 91.7% 2.5% 2.3% 0.5% 0.5% 0.5% 0.4% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810241400.pktlen.png)
detailed numbers
[ 32- 63]: 6968198
[ 64- 127]: 5582285
[ 128- 255]: 1012395
[ 256- 511]: 597672
[ 512- 1023]: 692145
[ 1024- 2047]: 13396514
Protocol Breakdown
![[protocol breakdown chart]](200810241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28249209 (100.00%) 21381523742 (100.00%) 756.89
ip 28166010 ( 99.71%) 21310198818 ( 99.67%) 756.59
tcp 23941620 ( 84.75%) 19499555499 ( 91.20%) 814.46
http(s) 10170115 ( 36.00%) 13407690652 ( 62.71%) 1318.34
http(c) 5765825 ( 20.41%) 794226703 ( 3.71%) 137.75
squid 456438 ( 1.62%) 258772583 ( 1.21%) 566.94
smtp 832416 ( 2.95%) 257505890 ( 1.20%) 309.35
nntp 62 ( 0.00%) 6453 ( 0.00%) 104.08
ftp 108747 ( 0.38%) 79396281 ( 0.37%) 730.10
pop3 46646 ( 0.17%) 30657630 ( 0.14%) 657.24
imap 9337 ( 0.03%) 3730043 ( 0.02%) 399.49
telnet 4995 ( 0.02%) 394326 ( 0.00%) 78.94
ssh 1035601 ( 3.67%) 793396194 ( 3.71%) 766.12
dns 7296 ( 0.03%) 1021464 ( 0.00%) 140.00
bgp 147 ( 0.00%) 59441 ( 0.00%) 404.36
napster 70 ( 0.00%) 7410 ( 0.00%) 105.86
realaud 21 ( 0.00%) 2457 ( 0.00%) 117.00
rtsp 310596 ( 1.10%) 303793805 ( 1.42%) 978.10
icecast 20122 ( 0.07%) 8549276 ( 0.04%) 424.87
other 5172417 ( 18.31%) 3560298751 ( 16.65%) 688.32
udp 3792605 ( 13.43%) 1770437844 ( 8.28%) 466.81
dns 1364711 ( 4.83%) 257535405 ( 1.20%) 188.71
realaud 79827 ( 0.28%) 44504107 ( 0.21%) 557.51
halflif 35 ( 0.00%) 4242 ( 0.00%) 121.20
starcra 63 ( 0.00%) 10344 ( 0.00%) 164.19
everque 173 ( 0.00%) 17852 ( 0.00%) 103.19
unreal 204 ( 0.00%) 51217 ( 0.00%) 251.06
quake 39 ( 0.00%) 4238 ( 0.00%) 108.67
cuseeme 15 ( 0.00%) 1579 ( 0.00%) 105.27
other 2347481 ( 8.31%) 1468275137 ( 6.87%) 625.47
icmp 424228 ( 1.50%) 38756138 ( 0.18%) 91.36
ipip 335 ( 0.00%) 39842 ( 0.00%) 118.93
ipsec 5429 ( 0.02%) 1197580 ( 0.01%) 220.59
ip6 944 ( 0.00%) 119293 ( 0.00%) 126.37
other 849 ( 0.00%) 92622 ( 0.00%) 109.10
frag 48770 ( 0.17%) 52448091 ( 0.25%) 1075.42
ip6 83199 ( 0.29%) 71324924 ( 0.33%) 857.28
tcp6 67739 ( 0.24%) 68803747 ( 0.32%) 1015.72
http(s) 643 ( 0.00%) 710527 ( 0.00%) 1105.02
http(c) 19373 ( 0.07%) 1816320 ( 0.01%) 93.76
smtp 342 ( 0.00%) 177061 ( 0.00%) 517.72
ftp 19 ( 0.00%) 1812 ( 0.00%) 95.37
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 2067 ( 0.01%) 508438 ( 0.00%) 245.98
dns 113 ( 0.00%) 8362 ( 0.00%) 74.00
bgp 402 ( 0.00%) 36526 ( 0.00%) 90.86
other 44750 ( 0.16%) 65542097 ( 0.31%) 1464.63
udp6 10096 ( 0.04%) 1718906 ( 0.01%) 170.26
dns 10054 ( 0.04%) 1714694 ( 0.01%) 170.55
other 42 ( 0.00%) 4212 ( 0.00%) 100.29
icmp6 5308 ( 0.02%) 776044 ( 0.00%) 146.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 22147 ( 0.00%) 851.81
tcpdump file: 200810241400.dump.gz (661.81 MB)