Traffic Trace Info
DumpFile: 200811011400.dump
FileSize: 1536.72MB
Id: 200811011400
StartTime: Sat Nov 1 14:00:00 2008
EndTime: Sat Nov 1 14:15:01 2008
TotalTime: 900.06 seconds
TotalCapSize: 1198.33MB CapLen: 96 bytes
# of packets: 22176308 (14896.45MB)
AvgRate: 138.84Mbps stddev:15.27M
IP flow (unique src/dst pair) Information
# of flows: 484950 (avg. 45.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.9% 2.0% 1.4% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 268098
Top 10 bandwidth usage (bytes/total in %):
19.9% 14.9% 4.3% 4.2% 4.2% 4.1% 4.0% 3.7% 2.2% 2.0%
# of IPv6 addresses: 729
Top 10 bandwidth usage (bytes/total in %):
72.2% 72.2% 9.7% 9.0% 7.0% 3.5% 2.2% 2.2% 1.3% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811011400.pktlen.png)
detailed numbers
[ 32- 63]: 6525528
[ 64- 127]: 4040427
[ 128- 255]: 828181
[ 256- 511]: 695424
[ 512- 1023]: 448058
[ 1024- 2047]: 9638690
Protocol Breakdown
![[protocol breakdown chart]](200811011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22176308 (100.00%) 15620055524 (100.00%) 704.36
ip 22122318 ( 99.76%) 15602092356 ( 99.88%) 705.26
tcp 19151186 ( 86.36%) 14599244613 ( 93.46%) 762.32
http(s) 8715273 ( 39.30%) 11833202090 ( 75.76%) 1357.75
http(c) 5416704 ( 24.43%) 460008314 ( 2.94%) 84.92
squid 1185860 ( 5.35%) 262543880 ( 1.68%) 221.40
smtp 489424 ( 2.21%) 89968700 ( 0.58%) 183.83
nntp 22 ( 0.00%) 2106 ( 0.00%) 95.73
ftp 164412 ( 0.74%) 109304229 ( 0.70%) 664.82
pop3 21169 ( 0.10%) 13241268 ( 0.08%) 625.50
imap 3068 ( 0.01%) 522471 ( 0.00%) 170.30
telnet 2819 ( 0.01%) 285223 ( 0.00%) 101.18
ssh 37385 ( 0.17%) 7062388 ( 0.05%) 188.91
dns 5044 ( 0.02%) 556812 ( 0.00%) 110.39
bgp 141 ( 0.00%) 48285 ( 0.00%) 342.45
napster 20 ( 0.00%) 2305 ( 0.00%) 115.25
realaud 7 ( 0.00%) 855 ( 0.00%) 122.14
rtsp 406392 ( 1.83%) 421441299 ( 2.70%) 1037.03
icecast 8243 ( 0.04%) 529219 ( 0.00%) 64.20
other 2695203 ( 12.15%) 1400525169 ( 8.97%) 519.64
udp 2478437 ( 11.18%) 954882500 ( 6.11%) 385.28
dns 983197 ( 4.43%) 180149492 ( 1.15%) 183.23
realaud 1834 ( 0.01%) 110151 ( 0.00%) 60.06
halflif 20 ( 0.00%) 1848 ( 0.00%) 92.40
starcra 68 ( 0.00%) 6620 ( 0.00%) 97.35
everque 50 ( 0.00%) 8049 ( 0.00%) 160.98
unreal 30 ( 0.00%) 10246 ( 0.00%) 341.53
quake 15 ( 0.00%) 1599 ( 0.00%) 106.60
cuseeme 8 ( 0.00%) 665 ( 0.00%) 83.12
other 1493015 ( 6.73%) 774553034 ( 4.96%) 518.78
icmp 486574 ( 2.19%) 47105474 ( 0.30%) 96.81
ipip 302 ( 0.00%) 35932 ( 0.00%) 118.98
ipsec 4207 ( 0.02%) 627042 ( 0.00%) 149.05
ip6 943 ( 0.00%) 123320 ( 0.00%) 130.77
other 669 ( 0.00%) 73475 ( 0.00%) 109.83
frag 28445 ( 0.13%) 26484923 ( 0.17%) 931.09
ip6 53990 ( 0.24%) 17963168 ( 0.12%) 332.71
tcp6 34814 ( 0.16%) 15341552 ( 0.10%) 440.67
http(s) 10053 ( 0.05%) 12974242 ( 0.08%) 1290.58
http(c) 18919 ( 0.09%) 1775182 ( 0.01%) 93.83
smtp 182 ( 0.00%) 46683 ( 0.00%) 256.50
ftp 2262 ( 0.01%) 234671 ( 0.00%) 103.74
pop3 40 ( 0.00%) 3223 ( 0.00%) 80.58
ssh 94 ( 0.00%) 12036 ( 0.00%) 128.04
dns 7 ( 0.00%) 602 ( 0.00%) 86.00
bgp 410 ( 0.00%) 39059 ( 0.00%) 95.27
other 2847 ( 0.01%) 255854 ( 0.00%) 89.87
udp6 6291 ( 0.03%) 1018155 ( 0.01%) 161.84
dns 6258 ( 0.03%) 1014525 ( 0.01%) 162.12
other 33 ( 0.00%) 3630 ( 0.00%) 110.00
icmp6 12849 ( 0.06%) 1594207 ( 0.01%) 124.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5174 ( 0.00%) 862.33
tcpdump file: 200811011400.dump.gz (543.05 MB)