Traffic Trace Info
DumpFile: 200811051400.dump
FileSize: 1442.24MB
Id: 200811051400
StartTime: Wed Nov 5 14:00:00 2008
EndTime: Wed Nov 5 14:15:01 2008
TotalTime: 900.82 seconds
TotalCapSize: 1124.79MB CapLen: 96 bytes
# of packets: 20803373 (13306.02MB)
AvgRate: 123.91Mbps stddev:15.72M
IP flow (unique src/dst pair) Information
# of flows: 572465 (avg. 36.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 2.2% 1.7% 1.5% 1.4% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 329318
Top 10 bandwidth usage (bytes/total in %):
10.7% 5.3% 5.2% 3.0% 3.0% 2.7% 2.6% 2.5% 2.4% 2.3%
# of IPv6 addresses: 828
Top 10 bandwidth usage (bytes/total in %):
65.8% 56.0% 11.2% 10.3% 9.3% 8.1% 4.0% 2.0% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811051400.pktlen.png)
detailed numbers
[ 32- 63]: 6082467
[ 64- 127]: 4091364
[ 128- 255]: 875241
[ 256- 511]: 513070
[ 512- 1023]: 731252
[ 1024- 2047]: 8509979
Protocol Breakdown
![[protocol breakdown chart]](200811051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20803373 (100.00%) 13952378271 (100.00%) 670.68
ip 20742303 ( 99.71%) 13936572737 ( 99.89%) 671.89
tcp 17400256 ( 83.64%) 12744982912 ( 91.35%) 732.46
http(s) 6507888 ( 31.28%) 8811358582 ( 63.15%) 1353.95
http(c) 5279435 ( 25.38%) 775014292 ( 5.55%) 146.80
squid 459421 ( 2.21%) 282094954 ( 2.02%) 614.02
smtp 589011 ( 2.83%) 373192643 ( 2.67%) 633.59
nntp 27 ( 0.00%) 3307 ( 0.00%) 122.48
ftp 38407 ( 0.18%) 15531119 ( 0.11%) 404.38
pop3 45682 ( 0.22%) 14332102 ( 0.10%) 313.74
imap 8364 ( 0.04%) 1228405 ( 0.01%) 146.87
telnet 5320 ( 0.03%) 847089 ( 0.01%) 159.23
ssh 69182 ( 0.33%) 20649466 ( 0.15%) 298.48
dns 4646 ( 0.02%) 628939 ( 0.00%) 135.37
bgp 158 ( 0.00%) 52524 ( 0.00%) 332.43
napster 12 ( 0.00%) 821 ( 0.00%) 68.42
realaud 9 ( 0.00%) 546 ( 0.00%) 60.67
rtsp 222943 ( 1.07%) 100685589 ( 0.72%) 451.62
icecast 21462 ( 0.10%) 8682683 ( 0.06%) 404.56
hotline 5 ( 0.00%) 1188 ( 0.00%) 237.60
other 4148283 ( 19.94%) 2340678603 ( 16.78%) 564.25
udp 2729864 ( 13.12%) 1129254164 ( 8.09%) 413.67
dns 923223 ( 4.44%) 192978568 ( 1.38%) 209.03
realaud 5298 ( 0.03%) 362886 ( 0.00%) 68.49
halflif 12 ( 0.00%) 1076 ( 0.00%) 89.67
starcra 34 ( 0.00%) 5438 ( 0.00%) 159.94
everque 2077 ( 0.01%) 340380 ( 0.00%) 163.88
unreal 45 ( 0.00%) 14434 ( 0.00%) 320.76
quake 13 ( 0.00%) 1208 ( 0.00%) 92.92
cuseeme 7 ( 0.00%) 924 ( 0.00%) 132.00
other 1799125 ( 8.65%) 935528643 ( 6.71%) 519.99
icmp 608855 ( 2.93%) 61692618 ( 0.44%) 101.33
ipip 318 ( 0.00%) 38554 ( 0.00%) 121.24
ipsec 10 ( 0.00%) 1268 ( 0.00%) 126.80
ip6 1691 ( 0.01%) 450928 ( 0.00%) 266.66
other 1309 ( 0.01%) 152293 ( 0.00%) 116.34
frag 32808 ( 0.16%) 31124323 ( 0.22%) 948.68
ip6 61068 ( 0.29%) 15805414 ( 0.11%) 258.82
tcp6 39595 ( 0.19%) 12771097 ( 0.09%) 322.54
http(s) 15534 ( 0.07%) 8998878 ( 0.06%) 579.30
http(c) 19709 ( 0.09%) 1848327 ( 0.01%) 93.78
smtp 492 ( 0.00%) 187460 ( 0.00%) 381.02
ftp 36 ( 0.00%) 3332 ( 0.00%) 92.56
ssh 156 ( 0.00%) 46584 ( 0.00%) 298.62
dns 23 ( 0.00%) 3519 ( 0.00%) 153.00
bgp 413 ( 0.00%) 39395 ( 0.00%) 95.39
other 3232 ( 0.02%) 1643602 ( 0.01%) 508.54
udp6 8574 ( 0.04%) 1440091 ( 0.01%) 167.96
dns 8536 ( 0.04%) 1435911 ( 0.01%) 168.22
other 38 ( 0.00%) 4180 ( 0.00%) 110.00
icmp6 12867 ( 0.06%) 1590026 ( 0.01%) 123.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200811051400.dump.gz (503.73 MB)