Traffic Trace Info
DumpFile: 200811061400.dump
FileSize: 1389.51MB
Id: 200811061400
StartTime: Thu Nov 6 14:00:01 2008
EndTime: Thu Nov 6 14:15:00 2008
TotalTime: 899.17 seconds
TotalCapSize: 1082.43MB CapLen: 96 bytes
# of packets: 20124229 (12734.63MB)
AvgRate: 118.81Mbps stddev:12.44M
IP flow (unique src/dst pair) Information
# of flows: 531282 (avg. 37.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.9% 1.6% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 296142
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.8% 4.8% 3.2% 3.2% 3.2% 3.1% 3.0% 2.9% 2.8%
# of IPv6 addresses: 819
Top 10 bandwidth usage (bytes/total in %):
50.8% 44.9% 31.4% 31.4% 5.3% 5.2% 4.8% 3.4% 1.9% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811061400.pktlen.png)
detailed numbers
[ 32- 63]: 5408068
[ 64- 127]: 4373646
[ 128- 255]: 1087593
[ 256- 511]: 492493
[ 512- 1023]: 527332
[ 1024- 2047]: 8235097
Protocol Breakdown
![[protocol breakdown chart]](200811061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20124229 (100.00%) 13353223693 (100.00%) 663.54
ip 20050235 ( 99.63%) 13319126099 ( 99.74%) 664.29
tcp 16219627 ( 80.60%) 11889885714 ( 89.04%) 733.06
http(s) 6596633 ( 32.78%) 8892873042 ( 66.60%) 1348.09
http(c) 4668980 ( 23.20%) 561983387 ( 4.21%) 120.37
squid 528170 ( 2.62%) 299161917 ( 2.24%) 566.41
smtp 536931 ( 2.67%) 168667504 ( 1.26%) 314.13
ftp 60047 ( 0.30%) 22207660 ( 0.17%) 369.84
pop3 24378 ( 0.12%) 9945624 ( 0.07%) 407.98
imap 9012 ( 0.04%) 1581890 ( 0.01%) 175.53
telnet 3443 ( 0.02%) 594768 ( 0.00%) 172.75
ssh 366077 ( 1.82%) 53383432 ( 0.40%) 145.83
dns 5289 ( 0.03%) 586831 ( 0.00%) 110.95
bgp 140 ( 0.00%) 50316 ( 0.00%) 359.40
napster 163 ( 0.00%) 172069 ( 0.00%) 1055.64
realaud 5 ( 0.00%) 306 ( 0.00%) 61.20
rtsp 121285 ( 0.60%) 30512209 ( 0.23%) 251.57
icecast 6067 ( 0.03%) 457874 ( 0.00%) 75.47
hotline 34 ( 0.00%) 4547 ( 0.00%) 133.74
other 3292969 ( 16.36%) 1847702098 ( 13.84%) 561.11
udp 3351724 ( 16.66%) 1377558522 ( 10.32%) 411.00
dns 1212049 ( 6.02%) 228827761 ( 1.71%) 188.79
realaud 53 ( 0.00%) 4275 ( 0.00%) 80.66
halflif 270 ( 0.00%) 42884 ( 0.00%) 158.83
starcra 14 ( 0.00%) 2419 ( 0.00%) 172.79
everque 74 ( 0.00%) 12008 ( 0.00%) 162.27
unreal 42 ( 0.00%) 11443 ( 0.00%) 272.45
quake 16 ( 0.00%) 2113 ( 0.00%) 132.06
cuseeme 4 ( 0.00%) 384 ( 0.00%) 96.00
other 2138616 ( 10.63%) 1148101293 ( 8.60%) 536.84
icmp 475298 ( 2.36%) 51218457 ( 0.38%) 107.76
ipip 290 ( 0.00%) 35444 ( 0.00%) 122.22
ipsec 186 ( 0.00%) 11812 ( 0.00%) 63.51
ip6 1205 ( 0.01%) 160692 ( 0.00%) 133.35
other 1905 ( 0.01%) 255458 ( 0.00%) 134.10
frag 29768 ( 0.15%) 30809995 ( 0.23%) 1035.00
ip6 73994 ( 0.37%) 34097594 ( 0.26%) 460.82
tcp6 52515 ( 0.26%) 30942248 ( 0.23%) 589.21
http(s) 7327 ( 0.04%) 11036059 ( 0.08%) 1506.22
http(c) 19166 ( 0.10%) 1801469 ( 0.01%) 93.99
smtp 620 ( 0.00%) 229854 ( 0.00%) 370.73
ftp 19 ( 0.00%) 1761 ( 0.00%) 92.68
ssh 1772 ( 0.01%) 387304 ( 0.00%) 218.57
bgp 406 ( 0.00%) 38561 ( 0.00%) 94.98
other 23205 ( 0.12%) 17447240 ( 0.13%) 751.87
udp6 9805 ( 0.05%) 1693756 ( 0.01%) 172.74
dns 9761 ( 0.05%) 1685948 ( 0.01%) 172.72
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
other 42 ( 0.00%) 7594 ( 0.00%) 180.81
icmp6 11622 ( 0.06%) 1443842 ( 0.01%) 124.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 13668 ( 0.00%) 621.27
tcpdump file: 200811061400.dump.gz (501.79 MB)