Traffic Trace Info
DumpFile: 200811021400.dump
FileSize: 1234.87MB
Id: 200811021400
StartTime: Sun Nov 2 14:00:01 2008
EndTime: Sun Nov 2 14:15:00 2008
TotalTime: 899.60 seconds
TotalCapSize: 965.78MB CapLen: 96 bytes
# of packets: 17634397 (10904.70MB)
AvgRate: 101.68Mbps stddev:16.16M
IP flow (unique src/dst pair) Information
# of flows: 761419 (avg. 23.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.9% 2.7% 2.6% 2.1% 2.0% 1.6% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 468531
Top 10 bandwidth usage (bytes/total in %):
9.3% 9.1% 5.9% 5.6% 5.1% 3.9% 3.3% 3.1% 2.9% 2.9%
# of IPv6 addresses: 719
Top 10 bandwidth usage (bytes/total in %):
29.1% 26.8% 19.8% 19.7% 19.5% 10.4% 6.0% 6.0% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811021400.pktlen.png)
detailed numbers
[ 32- 63]: 5776469
[ 64- 127]: 3219913
[ 128- 255]: 657085
[ 256- 511]: 703146
[ 512- 1023]: 297567
[ 1024- 2047]: 6980217
Protocol Breakdown
![[protocol breakdown chart]](200811021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17634397 (100.00%) 11434404868 (100.00%) 648.41
ip 17576642 ( 99.67%) 11428332720 ( 99.95%) 650.20
tcp 15359652 ( 87.10%) 10922035564 ( 95.52%) 711.09
http(s) 6245170 ( 35.41%) 8549946841 ( 74.77%) 1369.05
http(c) 3570479 ( 20.25%) 291517192 ( 2.55%) 81.65
squid 1567003 ( 8.89%) 383404318 ( 3.35%) 244.67
smtp 431717 ( 2.45%) 193364378 ( 1.69%) 447.90
nntp 18 ( 0.00%) 1550 ( 0.00%) 86.11
ftp 130249 ( 0.74%) 109889114 ( 0.96%) 843.68
pop3 35561 ( 0.20%) 31996940 ( 0.28%) 899.78
imap 2116 ( 0.01%) 949601 ( 0.01%) 448.77
telnet 919 ( 0.01%) 81868 ( 0.00%) 89.08
ssh 124840 ( 0.71%) 22767604 ( 0.20%) 182.37
dns 4128 ( 0.02%) 434419 ( 0.00%) 105.24
bgp 133 ( 0.00%) 36055 ( 0.00%) 271.09
napster 16 ( 0.00%) 1433 ( 0.00%) 89.56
rtsp 21386 ( 0.12%) 23804779 ( 0.21%) 1113.10
icecast 21282 ( 0.12%) 1319628 ( 0.01%) 62.01
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 3204632 ( 18.17%) 1312519662 ( 11.48%) 409.57
udp 1572509 ( 8.92%) 446026141 ( 3.90%) 283.64
dns 798167 ( 4.53%) 151114585 ( 1.32%) 189.33
realaud 3287 ( 0.02%) 197996 ( 0.00%) 60.24
halflif 11 ( 0.00%) 977 ( 0.00%) 88.82
starcra 19 ( 0.00%) 3912 ( 0.00%) 205.89
everque 38 ( 0.00%) 6363 ( 0.00%) 167.45
unreal 39 ( 0.00%) 9861 ( 0.00%) 252.85
quake 18 ( 0.00%) 1683 ( 0.00%) 93.50
cuseeme 8 ( 0.00%) 637 ( 0.00%) 79.62
other 770871 ( 4.37%) 294643177 ( 2.58%) 382.22
icmp 639065 ( 3.62%) 59575970 ( 0.52%) 93.22
ipip 303 ( 0.00%) 36178 ( 0.00%) 119.40
ipsec 3266 ( 0.02%) 439372 ( 0.00%) 134.53
ip6 850 ( 0.00%) 108382 ( 0.00%) 127.51
other 997 ( 0.01%) 111113 ( 0.00%) 111.45
frag 24877 ( 0.14%) 25193774 ( 0.22%) 1012.73
ip6 57755 ( 0.33%) 6072148 ( 0.05%) 105.14
tcp6 40271 ( 0.23%) 3628298 ( 0.03%) 90.10
http(s) 11 ( 0.00%) 2568 ( 0.00%) 233.45
http(c) 19297 ( 0.11%) 1826804 ( 0.02%) 94.67
smtp 246 ( 0.00%) 69068 ( 0.00%) 280.76
ftp 2079 ( 0.01%) 214478 ( 0.00%) 103.16
pop3 58 ( 0.00%) 4721 ( 0.00%) 81.40
ssh 97 ( 0.00%) 24790 ( 0.00%) 255.57
dns 7 ( 0.00%) 602 ( 0.00%) 86.00
bgp 398 ( 0.00%) 35742 ( 0.00%) 89.80
other 18078 ( 0.10%) 1449525 ( 0.01%) 80.18
udp6 5498 ( 0.03%) 928839 ( 0.01%) 168.94
dns 5483 ( 0.03%) 927170 ( 0.01%) 169.10
other 15 ( 0.00%) 1669 ( 0.00%) 111.27
icmp6 11931 ( 0.07%) 1487654 ( 0.01%) 124.69
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 24 ( 0.00%) 23141 ( 0.00%) 964.21
tcpdump file: 200811021400.dump.gz (421.34 MB)