Traffic Trace Info
DumpFile: 200810281400.dump
FileSize: 1952.12MB
Id: 200810281400
StartTime: Tue Oct 28 14:00:01 2008
EndTime: Tue Oct 28 14:15:01 2008
TotalTime: 900.09 seconds
TotalCapSize: 1528.53MB CapLen: 96 bytes
# of packets: 27759872 (20378.62MB)
AvgRate: 189.94Mbps stddev:35.34M
IP flow (unique src/dst pair) Information
# of flows: 702869 (avg. 39.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.5% 2.2% 1.7% 1.6% 1.5% 1.3% 1.1% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 387497
Top 10 bandwidth usage (bytes/total in %):
6.0% 5.6% 5.4% 4.6% 3.5% 3.4% 3.2% 3.1% 2.8% 2.5%
# of IPv6 addresses: 870
Top 10 bandwidth usage (bytes/total in %):
30.2% 29.9% 21.5% 19.8% 7.8% 7.8% 4.9% 2.6% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200810281400.pktlen.png)
detailed numbers
[ 32- 63]: 6882884
[ 64- 127]: 5316241
[ 128- 255]: 1012862
[ 256- 511]: 548926
[ 512- 1023]: 612412
[ 1024- 2047]: 13386547
Protocol Breakdown
![[protocol breakdown chart]](200810281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27759872 (100.00%) 21368528812 (100.00%) 769.76
ip 27694650 ( 99.77%) 21360340135 ( 99.96%) 771.28
tcp 25009940 ( 90.09%) 20746241514 ( 97.09%) 829.52
http(s) 11233187 ( 40.47%) 15082359976 ( 70.58%) 1342.66
http(c) 6525340 ( 23.51%) 883762249 ( 4.14%) 135.44
squid 386035 ( 1.39%) 176602334 ( 0.83%) 457.48
smtp 491286 ( 1.77%) 114812952 ( 0.54%) 233.70
nntp 25 ( 0.00%) 1957 ( 0.00%) 78.28
ftp 31748 ( 0.11%) 7802753 ( 0.04%) 245.77
pop3 36307 ( 0.13%) 19216228 ( 0.09%) 529.27
imap 8734 ( 0.03%) 2519117 ( 0.01%) 288.43
telnet 14955 ( 0.05%) 1175972 ( 0.01%) 78.63
ssh 82032 ( 0.30%) 44118419 ( 0.21%) 537.82
dns 71104 ( 0.26%) 4715418 ( 0.02%) 66.32
bgp 143 ( 0.00%) 50665 ( 0.00%) 354.30
napster 10 ( 0.00%) 648 ( 0.00%) 64.80
realaud 418 ( 0.00%) 27320 ( 0.00%) 65.36
rtsp 596399 ( 2.15%) 581555076 ( 2.72%) 975.11
icecast 4223 ( 0.02%) 303453 ( 0.00%) 71.86
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 5527987 ( 19.91%) 3827216551 ( 17.91%) 692.33
udp 1834391 ( 6.61%) 513681312 ( 2.40%) 280.03
dns 969952 ( 3.49%) 189539092 ( 0.89%) 195.41
realaud 123 ( 0.00%) 9591 ( 0.00%) 77.98
halflif 19 ( 0.00%) 1999 ( 0.00%) 105.21
starcra 43 ( 0.00%) 8083 ( 0.00%) 187.98
everque 178 ( 0.00%) 30869 ( 0.00%) 173.42
unreal 47 ( 0.00%) 11496 ( 0.00%) 244.60
quake 30 ( 0.00%) 3623 ( 0.00%) 120.77
cuseeme 5 ( 0.00%) 432 ( 0.00%) 86.40
other 863218 ( 3.11%) 322969430 ( 1.51%) 374.15
icmp 532315 ( 1.92%) 52405114 ( 0.25%) 98.45
ipip 305 ( 0.00%) 34330 ( 0.00%) 112.56
ipsec 8307 ( 0.03%) 1242322 ( 0.01%) 149.55
ip6 924 ( 0.00%) 116930 ( 0.00%) 126.55
other 308468 ( 1.11%) 46618613 ( 0.22%) 151.13
frag 32021 ( 0.12%) 34028981 ( 0.16%) 1062.71
ip6 65222 ( 0.23%) 8188677 ( 0.04%) 125.55
tcp6 50258 ( 0.18%) 5802634 ( 0.03%) 115.46
http(s) 1170 ( 0.00%) 1051491 ( 0.00%) 898.71
http(c) 19351 ( 0.07%) 1904767 ( 0.01%) 98.43
smtp 585 ( 0.00%) 187761 ( 0.00%) 320.96
ftp 64 ( 0.00%) 5939 ( 0.00%) 92.80
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 229 ( 0.00%) 69246 ( 0.00%) 302.38
bgp 365 ( 0.00%) 30348 ( 0.00%) 83.15
other 28464 ( 0.10%) 2550478 ( 0.01%) 89.60
udp6 9290 ( 0.03%) 1683087 ( 0.01%) 181.17
dns 9199 ( 0.03%) 1674229 ( 0.01%) 182.00
other 91 ( 0.00%) 8858 ( 0.00%) 97.34
icmp6 5643 ( 0.02%) 698740 ( 0.00%) 123.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200810281400.dump.gz (654.21 MB)