Traffic Trace Info
DumpFile: 200811041400.dump
FileSize: 1819.67MB
Id: 200811041400
StartTime: Tue Nov 4 14:00:01 2008
EndTime: Tue Nov 4 14:15:00 2008
TotalTime: 899.18 seconds
TotalCapSize: 1422.07MB CapLen: 96 bytes
# of packets: 26056574 (18490.50MB)
AvgRate: 172.51Mbps stddev:17.97M
IP flow (unique src/dst pair) Information
# of flows: 637015 (avg. 40.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.8% 6.4% 1.6% 1.3% 1.2% 1.1% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 375185
Top 10 bandwidth usage (bytes/total in %):
14.8% 14.8% 9.2% 8.5% 7.6% 6.6% 3.6% 2.1% 1.9% 1.8%
# of IPv6 addresses: 847
Top 10 bandwidth usage (bytes/total in %):
54.1% 53.7% 15.0% 15.0% 9.0% 8.3% 6.4% 3.2% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811041400.pktlen.png)
detailed numbers
[ 32- 63]: 7376135
[ 64- 127]: 4462176
[ 128- 255]: 868538
[ 256- 511]: 579486
[ 512- 1023]: 625536
[ 1024- 2047]: 12144703
Protocol Breakdown
![[protocol breakdown chart]](200811041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26056574 (100.00%) 19388694840 (100.00%) 744.10
ip 25991727 ( 99.75%) 19369077804 ( 99.90%) 745.20
tcp 22574157 ( 86.64%) 18279277330 ( 94.28%) 809.74
http(s) 8139050 ( 31.24%) 10877883957 ( 56.10%) 1336.51
http(c) 5358358 ( 20.56%) 785074232 ( 4.05%) 146.51
squid 613929 ( 2.36%) 287227877 ( 1.48%) 467.85
smtp 643499 ( 2.47%) 261802923 ( 1.35%) 406.84
nntp 71 ( 0.00%) 6568 ( 0.00%) 92.51
ftp 67237 ( 0.26%) 23801525 ( 0.12%) 353.99
pop3 29900 ( 0.11%) 13549710 ( 0.07%) 453.17
imap 7180 ( 0.03%) 872742 ( 0.00%) 121.55
telnet 10815 ( 0.04%) 945335 ( 0.00%) 87.41
ssh 2018148 ( 7.75%) 2870985851 ( 14.81%) 1422.58
dns 4553 ( 0.02%) 509535 ( 0.00%) 111.91
bgp 160 ( 0.00%) 59965 ( 0.00%) 374.78
napster 161 ( 0.00%) 45795 ( 0.00%) 284.44
realaud 27 ( 0.00%) 1764 ( 0.00%) 65.33
rtsp 105084 ( 0.40%) 8432073 ( 0.04%) 80.24
icecast 6804 ( 0.03%) 434533 ( 0.00%) 63.86
other 5569172 ( 21.37%) 3147642405 ( 16.23%) 565.19
udp 2757231 ( 10.58%) 1020033630 ( 5.26%) 369.95
dns 952533 ( 3.66%) 178525880 ( 0.92%) 187.42
realaud 2756 ( 0.01%) 182036 ( 0.00%) 66.05
halflif 19 ( 0.00%) 2545 ( 0.00%) 133.95
starcra 28 ( 0.00%) 4093 ( 0.00%) 146.18
everque 72 ( 0.00%) 10146 ( 0.00%) 140.92
unreal 69 ( 0.00%) 18575 ( 0.00%) 269.20
quake 22 ( 0.00%) 1904 ( 0.00%) 86.55
cuseeme 3 ( 0.00%) 277 ( 0.00%) 92.33
other 1801708 ( 6.91%) 841274705 ( 4.34%) 466.93
icmp 646872 ( 2.48%) 66084043 ( 0.34%) 102.16
ipip 302 ( 0.00%) 34720 ( 0.00%) 114.97
ipsec 58 ( 0.00%) 11516 ( 0.00%) 198.55
ip6 1515 ( 0.01%) 241325 ( 0.00%) 159.29
other 11592 ( 0.04%) 3395240 ( 0.02%) 292.90
frag 24111 ( 0.09%) 24471672 ( 0.13%) 1014.96
ip6 64845 ( 0.25%) 19616916 ( 0.10%) 302.52
tcp6 42451 ( 0.16%) 16258711 ( 0.08%) 383.00
http(s) 216 ( 0.00%) 191512 ( 0.00%) 886.63
http(c) 19404 ( 0.07%) 1821068 ( 0.01%) 93.85
smtp 412 ( 0.00%) 195118 ( 0.00%) 473.59
ftp 1681 ( 0.01%) 171438 ( 0.00%) 101.99
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 560 ( 0.00%) 96192 ( 0.00%) 171.77
bgp 419 ( 0.00%) 39468 ( 0.00%) 94.20
other 19726 ( 0.08%) 13741065 ( 0.07%) 696.60
udp6 9530 ( 0.04%) 1748259 ( 0.01%) 183.45
dns 9456 ( 0.04%) 1742039 ( 0.01%) 184.23
other 74 ( 0.00%) 6220 ( 0.00%) 84.05
icmp6 12819 ( 0.05%) 1593201 ( 0.01%) 124.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 12665 ( 0.00%) 844.33
tcpdump file: 200811041400.dump.gz (627.53 MB)