Traffic Trace Info
DumpFile: 200810271400.dump
FileSize: 1688.32MB
Id: 200810271400
StartTime: Mon Oct 27 14:00:01 2008
EndTime: Mon Oct 27 14:15:00 2008
TotalTime: 899.42 seconds
TotalCapSize: 1314.17MB CapLen: 96 bytes
# of packets: 24519507 (17361.20MB)
AvgRate: 161.89Mbps stddev:18.14M
IP flow (unique src/dst pair) Information
# of flows: 667909 (avg. 36.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.4% 1.9% 1.9% 1.7% 1.6% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 344757
Top 10 bandwidth usage (bytes/total in %):
10.0% 6.8% 4.1% 3.9% 3.8% 3.6% 2.8% 2.6% 2.5% 2.3%
# of IPv6 addresses: 859
Top 10 bandwidth usage (bytes/total in %):
98.2% 98.2% 0.6% 0.6% 0.1% 0.1% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810271400.pktlen.png)
detailed numbers
[ 32- 63]: 6722482
[ 64- 127]: 4255820
[ 128- 255]: 838460
[ 256- 511]: 582915
[ 512- 1023]: 798332
[ 1024- 2047]: 11321498
Protocol Breakdown
![[protocol breakdown chart]](200810271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24519507 (100.00%) 18204537881 (100.00%) 742.45
ip 24262115 ( 98.95%) 17916574400 ( 98.42%) 738.46
tcp 20700943 ( 84.43%) 16623533992 ( 91.32%) 803.03
http(s) 8773917 ( 35.78%) 11642360101 ( 63.95%) 1326.93
http(c) 6118635 ( 24.95%) 1454377158 ( 7.99%) 237.70
squid 332819 ( 1.36%) 135637958 ( 0.75%) 407.54
smtp 915812 ( 3.74%) 244153189 ( 1.34%) 266.60
nntp 19 ( 0.00%) 1594 ( 0.00%) 83.89
ftp 127758 ( 0.52%) 16545856 ( 0.09%) 129.51
pop3 47709 ( 0.19%) 19572633 ( 0.11%) 410.25
imap 8990 ( 0.04%) 1155374 ( 0.01%) 128.52
telnet 2074 ( 0.01%) 170040 ( 0.00%) 81.99
ssh 34439 ( 0.14%) 5912099 ( 0.03%) 171.67
dns 10188 ( 0.04%) 901990 ( 0.00%) 88.53
bgp 132 ( 0.00%) 40393 ( 0.00%) 306.01
napster 64 ( 0.00%) 9479 ( 0.00%) 148.11
realaud 17 ( 0.00%) 1477 ( 0.00%) 86.88
rtsp 706659 ( 2.88%) 684393697 ( 3.76%) 968.49
icecast 14739 ( 0.06%) 7955458 ( 0.04%) 539.76
other 3606970 ( 14.71%) 2410345376 ( 13.24%) 668.25
udp 3014661 ( 12.29%) 1237500646 ( 6.80%) 410.49
dns 1081654 ( 4.41%) 199880195 ( 1.10%) 184.79
realaud 13 ( 0.00%) 1378 ( 0.00%) 106.00
halflif 32 ( 0.00%) 3981 ( 0.00%) 124.41
starcra 61 ( 0.00%) 11596 ( 0.00%) 190.10
everque 151 ( 0.00%) 14263 ( 0.00%) 94.46
unreal 42 ( 0.00%) 11684 ( 0.00%) 278.19
quake 19 ( 0.00%) 1698 ( 0.00%) 89.37
cuseeme 11 ( 0.00%) 1280 ( 0.00%) 116.36
other 1932637 ( 7.88%) 1037554293 ( 5.70%) 536.86
icmp 519374 ( 2.12%) 50165847 ( 0.28%) 96.59
ipip 303 ( 0.00%) 37210 ( 0.00%) 122.81
ipsec 22435 ( 0.09%) 4765410 ( 0.03%) 212.41
ip6 921 ( 0.00%) 119275 ( 0.00%) 129.51
other 3478 ( 0.01%) 452020 ( 0.00%) 129.97
frag 27795 ( 0.11%) 27585969 ( 0.15%) 992.48
ip6 257392 ( 1.05%) 287963481 ( 1.58%) 1118.77
tcp6 241306 ( 0.98%) 285328969 ( 1.57%) 1182.44
http(s) 250 ( 0.00%) 297974 ( 0.00%) 1191.90
http(c) 19348 ( 0.08%) 1815386 ( 0.01%) 93.83
smtp 480 ( 0.00%) 223080 ( 0.00%) 464.75
ftp 441 ( 0.00%) 51405 ( 0.00%) 116.56
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 568 ( 0.00%) 104836 ( 0.00%) 184.57
dns 20 ( 0.00%) 3004 ( 0.00%) 150.20
bgp 389 ( 0.00%) 34837 ( 0.00%) 89.56
other 219780 ( 0.90%) 282795843 ( 1.55%) 1286.72
udp6 11281 ( 0.05%) 1990044 ( 0.01%) 176.41
dns 11269 ( 0.05%) 1988721 ( 0.01%) 176.48
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4753 ( 0.02%) 623102 ( 0.00%) 131.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 17286 ( 0.00%) 785.73
tcpdump file: 200810271400.dump.gz (587.35 MB)