Traffic Trace Info
DumpFile: 200810261400.dump
FileSize: 922.04MB
Id: 200810261400
StartTime: Sun Oct 26 14:00:00 2008
EndTime: Sun Oct 26 14:15:00 2008
TotalTime: 899.77 seconds
TotalCapSize: 722.16MB CapLen: 96 bytes
# of packets: 13099024 (8512.99MB)
AvgRate: 79.36Mbps stddev:16.10M
IP flow (unique src/dst pair) Information
# of flows: 550547 (avg. 23.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.1% 2.9% 2.6% 1.9% 1.5% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 279423
Top 10 bandwidth usage (bytes/total in %):
14.3% 10.7% 9.1% 6.2% 4.6% 4.5% 3.4% 3.1% 3.0% 3.0%
# of IPv6 addresses: 745
Top 10 bandwidth usage (bytes/total in %):
33.1% 30.4% 27.0% 26.8% 5.9% 5.2% 4.8% 3.9% 3.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810261400.pktlen.png)
detailed numbers
[ 32- 63]: 3759189
[ 64- 127]: 2639636
[ 128- 255]: 588346
[ 256- 511]: 323420
[ 512- 1023]: 242395
[ 1024- 2047]: 5546038
Protocol Breakdown
![[protocol breakdown chart]](200810261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13099024 (100.00%) 8926516928 (100.00%) 681.46
ip 13063004 ( 99.73%) 8921154265 ( 99.94%) 682.93
tcp 11217948 ( 85.64%) 8623765130 ( 96.61%) 768.75
http(s) 4354607 ( 33.24%) 5880171101 ( 65.87%) 1350.33
http(c) 2196770 ( 16.77%) 293809943 ( 3.29%) 133.75
squid 191060 ( 1.46%) 71819523 ( 0.80%) 375.90
smtp 426416 ( 3.26%) 68311784 ( 0.77%) 160.20
nntp 35 ( 0.00%) 3140 ( 0.00%) 89.71
ftp 221041 ( 1.69%) 48529195 ( 0.54%) 219.55
pop3 27443 ( 0.21%) 20024948 ( 0.22%) 729.69
imap 7300 ( 0.06%) 2652331 ( 0.03%) 363.33
telnet 33838 ( 0.26%) 2506370 ( 0.03%) 74.07
ssh 5115 ( 0.04%) 3401288 ( 0.04%) 664.96
dns 15263 ( 0.12%) 1213210 ( 0.01%) 79.49
bgp 127 ( 0.00%) 34655 ( 0.00%) 272.87
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 17 ( 0.00%) 2145 ( 0.00%) 126.18
rtsp 248047 ( 1.89%) 244400183 ( 2.74%) 985.30
icecast 2482 ( 0.02%) 153691 ( 0.00%) 61.92
other 3488381 ( 26.63%) 1986731257 ( 22.26%) 569.53
udp 1108994 ( 8.47%) 230254589 ( 2.58%) 207.62
dns 851809 ( 6.50%) 168407720 ( 1.89%) 197.71
realaud 1814 ( 0.01%) 109734 ( 0.00%) 60.49
halflif 19 ( 0.00%) 1511 ( 0.00%) 79.53
starcra 15 ( 0.00%) 2392 ( 0.00%) 159.47
everque 51 ( 0.00%) 8180 ( 0.00%) 160.39
unreal 32 ( 0.00%) 8848 ( 0.00%) 276.50
quake 13 ( 0.00%) 1084 ( 0.00%) 83.38
cuseeme 9 ( 0.00%) 882 ( 0.00%) 98.00
other 255187 ( 1.95%) 61674090 ( 0.69%) 241.68
icmp 729989 ( 5.57%) 66284564 ( 0.74%) 90.80
ipip 307 ( 0.00%) 38706 ( 0.00%) 126.08
ipsec 4197 ( 0.03%) 622174 ( 0.01%) 148.24
ip6 895 ( 0.01%) 113684 ( 0.00%) 127.02
other 674 ( 0.01%) 75418 ( 0.00%) 111.90
frag 32731 ( 0.25%) 34541028 ( 0.39%) 1055.30
ip6 36020 ( 0.27%) 5362663 ( 0.06%) 148.88
tcp6 25398 ( 0.19%) 3728587 ( 0.04%) 146.81
http(s) 1005 ( 0.01%) 1438586 ( 0.02%) 1431.43
http(c) 19605 ( 0.15%) 1840429 ( 0.02%) 93.88
smtp 109 ( 0.00%) 19429 ( 0.00%) 178.25
ftp 19 ( 0.00%) 1833 ( 0.00%) 96.47
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 106 ( 0.00%) 17452 ( 0.00%) 164.64
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 384 ( 0.00%) 33504 ( 0.00%) 87.25
other 4130 ( 0.03%) 373677 ( 0.00%) 90.48
udp6 6172 ( 0.05%) 1052311 ( 0.01%) 170.50
dns 6151 ( 0.05%) 1050001 ( 0.01%) 170.70
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 4420 ( 0.03%) 577685 ( 0.01%) 130.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200810261400.dump.gz (314.85 MB)