Traffic Trace Info
DumpFile: 200810251400.dump
FileSize: 1182.26MB
Id: 200810251400
StartTime: Sat Oct 25 14:00:00 2008
EndTime: Sat Oct 25 14:15:01 2008
TotalTime: 900.65 seconds
TotalCapSize: 922.01MB CapLen: 96 bytes
# of packets: 17055245 (11181.71MB)
AvgRate: 104.14Mbps stddev:16.38M
IP flow (unique src/dst pair) Information
# of flows: 527572 (avg. 32.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.6% 1.4% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 289016
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.9% 6.2% 4.6% 3.0% 2.8% 2.8% 2.7% 2.7% 2.7%
# of IPv6 addresses: 760
Top 10 bandwidth usage (bytes/total in %):
93.1% 93.1% 2.4% 2.4% 2.2% 2.0% 0.4% 0.3% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810251400.pktlen.png)
detailed numbers
[ 32- 63]: 4343083
[ 64- 127]: 3698601
[ 128- 255]: 700210
[ 256- 511]: 510543
[ 512- 1023]: 580374
[ 1024- 2047]: 7222434
Protocol Breakdown
![[protocol breakdown chart]](200810251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17055245 (100.00%) 11724877726 (100.00%) 687.46
ip 16971026 ( 99.51%) 11644355029 ( 99.31%) 686.13
tcp 13842066 ( 81.16%) 10488622344 ( 89.46%) 757.74
http(s) 5386995 ( 31.59%) 7082231215 ( 60.40%) 1314.69
http(c) 3349037 ( 19.64%) 321785289 ( 2.74%) 96.08
squid 625639 ( 3.67%) 363002900 ( 3.10%) 580.21
smtp 386319 ( 2.27%) 64434960 ( 0.55%) 166.79
nntp 32 ( 0.00%) 4165 ( 0.00%) 130.16
ftp 151478 ( 0.89%) 135842090 ( 1.16%) 896.78
pop3 27480 ( 0.16%) 15911668 ( 0.14%) 579.03
imap 5733 ( 0.03%) 1816144 ( 0.02%) 316.79
telnet 37191 ( 0.22%) 2772572 ( 0.02%) 74.55
ssh 320070 ( 1.88%) 67778539 ( 0.58%) 211.76
dns 4911 ( 0.03%) 733467 ( 0.01%) 149.35
bgp 155 ( 0.00%) 47881 ( 0.00%) 308.91
napster 84 ( 0.00%) 17268 ( 0.00%) 205.57
realaud 16 ( 0.00%) 2091 ( 0.00%) 130.69
rtsp 831817 ( 4.88%) 812957995 ( 6.93%) 977.33
icecast 12300 ( 0.07%) 783185 ( 0.01%) 63.67
hotline 16 ( 0.00%) 2967 ( 0.00%) 185.44
other 2702759 ( 15.85%) 1618495908 ( 13.80%) 598.83
udp 2682035 ( 15.73%) 1116059011 ( 9.52%) 416.12
dns 840884 ( 4.93%) 170748947 ( 1.46%) 203.06
realaud 4334 ( 0.03%) 265050 ( 0.00%) 61.16
halflif 19 ( 0.00%) 2853 ( 0.00%) 150.16
starcra 24 ( 0.00%) 4415 ( 0.00%) 183.96
everque 60 ( 0.00%) 9396 ( 0.00%) 156.60
unreal 494 ( 0.00%) 142444 ( 0.00%) 288.35
quake 15 ( 0.00%) 1314 ( 0.00%) 87.60
cuseeme 6 ( 0.00%) 927 ( 0.00%) 154.50
other 1836155 ( 10.77%) 944857780 ( 8.06%) 514.58
icmp 441842 ( 2.59%) 39007168 ( 0.33%) 88.28
ipip 354 ( 0.00%) 42764 ( 0.00%) 120.80
ipsec 3273 ( 0.02%) 440566 ( 0.00%) 134.61
ip6 786 ( 0.00%) 106162 ( 0.00%) 135.07
other 670 ( 0.00%) 77014 ( 0.00%) 114.95
frag 33088 ( 0.19%) 35412117 ( 0.30%) 1070.24
ip6 84219 ( 0.49%) 80522697 ( 0.69%) 956.11
tcp6 73483 ( 0.43%) 78890173 ( 0.67%) 1073.58
http(s) 139 ( 0.00%) 129916 ( 0.00%) 934.65
http(c) 19450 ( 0.11%) 1839229 ( 0.02%) 94.56
smtp 55 ( 0.00%) 9307 ( 0.00%) 169.22
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 3157 ( 0.02%) 1873551 ( 0.02%) 593.46
bgp 362 ( 0.00%) 30601 ( 0.00%) 84.53
other 50287 ( 0.29%) 75004527 ( 0.64%) 1491.53
udp6 6049 ( 0.04%) 989059 ( 0.01%) 163.51
dns 6026 ( 0.04%) 986521 ( 0.01%) 163.71
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 4597 ( 0.03%) 591404 ( 0.01%) 128.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 47981 ( 0.00%) 799.68
tcpdump file: 200810251400.dump.gz (416.12 MB)