Traffic Trace Info
DumpFile: 200811071400.dump
FileSize: 1376.66MB
Id: 200811071400
StartTime: Fri Nov 7 14:00:01 2008
EndTime: Fri Nov 7 14:15:00 2008
TotalTime: 899.71 seconds
TotalCapSize: 1077.46MB CapLen: 96 bytes
# of packets: 19607668 (13352.93MB)
AvgRate: 124.51Mbps stddev:14.62M
IP flow (unique src/dst pair) Information
# of flows: 483576 (avg. 40.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 279716
Top 10 bandwidth usage (bytes/total in %):
6.8% 5.8% 5.4% 5.2% 5.0% 2.8% 2.3% 2.2% 2.0% 1.9%
# of IPv6 addresses: 813
Top 10 bandwidth usage (bytes/total in %):
26.4% 24.3% 15.6% 9.7% 9.5% 9.4% 8.5% 8.5% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811071400.pktlen.png)
detailed numbers
[ 32- 63]: 4104291
[ 64- 127]: 4783730
[ 128- 255]: 935910
[ 256- 511]: 518086
[ 512- 1023]: 639227
[ 1024- 2047]: 8626424
Protocol Breakdown
![[protocol breakdown chart]](200811071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19607668 (100.00%) 14001564817 (100.00%) 714.09
ip 19562958 ( 99.77%) 13994852217 ( 99.95%) 715.38
tcp 16640191 ( 84.87%) 12886508435 ( 92.04%) 774.42
http(s) 6982541 ( 35.61%) 9352934489 ( 66.80%) 1339.47
http(c) 4302330 ( 21.94%) 516251713 ( 3.69%) 119.99
squid 425689 ( 2.17%) 222842495 ( 1.59%) 523.49
smtp 445946 ( 2.27%) 174845885 ( 1.25%) 392.08
ftp 48059 ( 0.25%) 18057992 ( 0.13%) 375.75
pop3 24711 ( 0.13%) 10187407 ( 0.07%) 412.26
imap 5827 ( 0.03%) 929072 ( 0.01%) 159.44
telnet 1539 ( 0.01%) 254155 ( 0.00%) 165.14
ssh 1321211 ( 6.74%) 207519193 ( 1.48%) 157.07
dns 6307 ( 0.03%) 709468 ( 0.01%) 112.49
bgp 154 ( 0.00%) 63396 ( 0.00%) 411.66
napster 16 ( 0.00%) 2235 ( 0.00%) 139.69
realaud 5 ( 0.00%) 307 ( 0.00%) 61.40
rtsp 548488 ( 2.80%) 620249400 ( 4.43%) 1130.83
icecast 4442 ( 0.02%) 329424 ( 0.00%) 74.16
other 2522925 ( 12.87%) 1761331744 ( 12.58%) 698.13
udp 2625203 ( 13.39%) 1080703969 ( 7.72%) 411.66
dns 959126 ( 4.89%) 191309681 ( 1.37%) 199.46
realaud 3195 ( 0.02%) 209325 ( 0.00%) 65.52
halflif 31 ( 0.00%) 4278 ( 0.00%) 138.00
starcra 27 ( 0.00%) 3395 ( 0.00%) 125.74
everque 154 ( 0.00%) 28277 ( 0.00%) 183.62
unreal 38 ( 0.00%) 11678 ( 0.00%) 307.32
quake 24 ( 0.00%) 2982 ( 0.00%) 124.25
cuseeme 6 ( 0.00%) 1149 ( 0.00%) 191.50
other 1661287 ( 8.47%) 888953883 ( 6.35%) 535.10
icmp 295235 ( 1.51%) 27357422 ( 0.20%) 92.66
ipip 273 ( 0.00%) 31914 ( 0.00%) 116.90
ip6 1060 ( 0.01%) 132032 ( 0.00%) 124.56
other 996 ( 0.01%) 118445 ( 0.00%) 118.92
frag 27727 ( 0.14%) 26697161 ( 0.19%) 962.86
ip6 44710 ( 0.23%) 6712600 ( 0.05%) 150.14
tcp6 24824 ( 0.13%) 3792078 ( 0.03%) 152.76
http(s) 438 ( 0.00%) 638697 ( 0.00%) 1458.21
http(c) 19316 ( 0.10%) 1819794 ( 0.01%) 94.21
smtp 739 ( 0.00%) 259586 ( 0.00%) 351.27
ftp 35 ( 0.00%) 3328 ( 0.00%) 95.09
ssh 1889 ( 0.01%) 337846 ( 0.00%) 178.85
dns 21 ( 0.00%) 2920 ( 0.00%) 139.05
bgp 412 ( 0.00%) 38801 ( 0.00%) 94.18
other 1974 ( 0.01%) 691106 ( 0.00%) 350.10
udp6 8907 ( 0.05%) 1568646 ( 0.01%) 176.11
dns 8893 ( 0.05%) 1567112 ( 0.01%) 176.22
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 10947 ( 0.06%) 1347397 ( 0.01%) 123.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 399 ( 0.00%) 199.50
tcpdump file: 200811071400.dump.gz (496.65 MB)