Traffic Trace Info
DumpFile: 200811031400.dump
FileSize: 1307.93MB
Id: 200811031400
StartTime: Mon Nov 3 14:00:00 2008
EndTime: Mon Nov 3 14:15:00 2008
TotalTime: 900.17 seconds
TotalCapSize: 1023.26MB CapLen: 96 bytes
# of packets: 18655188 (13575.83MB)
AvgRate: 126.51Mbps stddev:24.69M
IP flow (unique src/dst pair) Information
# of flows: 602829 (avg. 30.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.2% 2.7% 2.3% 1.5% 1.4% 1.2% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 319839
Top 10 bandwidth usage (bytes/total in %):
14.6% 12.6% 5.0% 4.9% 4.9% 4.3% 4.3% 2.9% 2.8% 2.4%
# of IPv6 addresses: 753
Top 10 bandwidth usage (bytes/total in %):
37.1% 34.0% 26.3% 13.4% 4.8% 3.9% 2.8% 2.6% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811031400.pktlen.png)
detailed numbers
[ 32- 63]: 3982163
[ 64- 127]: 4065751
[ 128- 255]: 722191
[ 256- 511]: 507437
[ 512- 1023]: 441654
[ 1024- 2047]: 8935992
Protocol Breakdown
![[protocol breakdown chart]](200811031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18655188 (100.00%) 14235291668 (100.00%) 763.07
ip 18614864 ( 99.78%) 14230557931 ( 99.97%) 764.47
tcp 15814803 ( 84.77%) 13364205660 ( 93.88%) 845.04
http(s) 6703379 ( 35.93%) 9053752991 ( 63.60%) 1350.63
http(c) 3633837 ( 19.48%) 463737018 ( 3.26%) 127.62
squid 726845 ( 3.90%) 314563380 ( 2.21%) 432.78
smtp 477804 ( 2.56%) 112529491 ( 0.79%) 235.51
ftp 90905 ( 0.49%) 55657480 ( 0.39%) 612.26
pop3 31566 ( 0.17%) 17497813 ( 0.12%) 554.32
imap 7008 ( 0.04%) 1672433 ( 0.01%) 238.65
telnet 2013 ( 0.01%) 411877 ( 0.00%) 204.61
ssh 717208 ( 3.84%) 711316391 ( 5.00%) 991.79
dns 5186 ( 0.03%) 1247258 ( 0.01%) 240.50
bgp 143 ( 0.00%) 47864 ( 0.00%) 334.71
napster 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 105 ( 0.00%) 30044 ( 0.00%) 286.13
rtsp 80334 ( 0.43%) 70967274 ( 0.50%) 883.40
icecast 4971 ( 0.03%) 323584 ( 0.00%) 65.09
hotline 21 ( 0.00%) 5545 ( 0.00%) 264.05
other 3333474 ( 17.87%) 2560444977 ( 17.99%) 768.10
udp 2348271 ( 12.59%) 824883253 ( 5.79%) 351.27
dns 937522 ( 5.03%) 180692640 ( 1.27%) 192.73
realaud 4343 ( 0.02%) 267182 ( 0.00%) 61.52
halflif 12 ( 0.00%) 1317 ( 0.00%) 109.75
starcra 30 ( 0.00%) 3900 ( 0.00%) 130.00
everque 35 ( 0.00%) 6212 ( 0.00%) 177.49
unreal 35 ( 0.00%) 11184 ( 0.00%) 319.54
quake 17 ( 0.00%) 1817 ( 0.00%) 106.88
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 1406242 ( 7.54%) 643876465 ( 4.52%) 457.87
icmp 446259 ( 2.39%) 40724134 ( 0.29%) 91.26
ipip 323 ( 0.00%) 38444 ( 0.00%) 119.02
ipsec 3284 ( 0.02%) 442568 ( 0.00%) 134.76
ip6 1245 ( 0.01%) 190424 ( 0.00%) 152.95
other 679 ( 0.00%) 73448 ( 0.00%) 108.17
frag 23034 ( 0.12%) 22468896 ( 0.16%) 975.47
ip6 40322 ( 0.22%) 4733617 ( 0.03%) 117.40
tcp6 20850 ( 0.11%) 1969651 ( 0.01%) 94.47
http(c) 19021 ( 0.10%) 1785641 ( 0.01%) 93.88
smtp 139 ( 0.00%) 32041 ( 0.00%) 230.51
ftp 19 ( 0.00%) 1749 ( 0.00%) 92.05
pop3 114 ( 0.00%) 9066 ( 0.00%) 79.53
ssh 76 ( 0.00%) 8696 ( 0.00%) 114.42
dns 9 ( 0.00%) 774 ( 0.00%) 86.00
bgp 362 ( 0.00%) 30677 ( 0.00%) 84.74
other 1110 ( 0.01%) 101007 ( 0.00%) 91.00
udp6 6707 ( 0.04%) 1164123 ( 0.01%) 173.57
dns 6678 ( 0.04%) 1160941 ( 0.01%) 173.85
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 28 ( 0.00%) 3080 ( 0.00%) 110.00
icmp6 12728 ( 0.07%) 1589922 ( 0.01%) 124.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5705 ( 0.00%) 950.83
tcpdump file: 200811031400.dump.gz (454.96 MB)