Traffic Trace Info
DumpFile: 200811081400.dump
FileSize: 1785.66MB
Id: 200811081400
StartTime: Sat Nov 8 14:00:01 2008
EndTime: Sat Nov 8 14:15:01 2008
TotalTime: 899.95 seconds
TotalCapSize: 1391.86MB CapLen: 96 bytes
# of packets: 25807123 (23315.10MB)
AvgRate: 217.29Mbps stddev:17.20M
IP flow (unique src/dst pair) Information
# of flows: 553366 (avg. 46.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.1% 2.9% 2.8% 2.4% 2.1% 1.9% 1.7% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 356031
Top 10 bandwidth usage (bytes/total in %):
28.7% 27.2% 6.7% 5.5% 5.3% 4.9% 4.0% 3.9% 2.8% 2.7%
# of IPv6 addresses: 779
Top 10 bandwidth usage (bytes/total in %):
53.5% 40.1% 18.2% 16.9% 13.3% 4.4% 3.4% 3.4% 2.2% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811081400.pktlen.png)
detailed numbers
[ 32- 63]: 4075465
[ 64- 127]: 3661619
[ 128- 255]: 798470
[ 256- 511]: 966361
[ 512- 1023]: 957983
[ 1024- 2047]: 15347225
Protocol Breakdown
![[protocol breakdown chart]](200811081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25807123 (100.00%) 24447658141 (100.00%) 947.32
ip 25762058 ( 99.83%) 24438029488 ( 99.96%) 948.61
tcp 21922716 ( 84.95%) 23128291128 ( 94.60%) 1054.99
http(s) 10911245 ( 42.28%) 15110343446 ( 61.81%) 1384.84
http(c) 3348251 ( 12.97%) 351767564 ( 1.44%) 105.06
squid 651812 ( 2.53%) 250170844 ( 1.02%) 383.81
smtp 388742 ( 1.51%) 95723625 ( 0.39%) 246.24
ftp 60496 ( 0.23%) 32628577 ( 0.13%) 539.35
pop3 16507 ( 0.06%) 9455373 ( 0.04%) 572.81
imap 4028 ( 0.02%) 1087658 ( 0.00%) 270.02
telnet 7769 ( 0.03%) 668787 ( 0.00%) 86.08
ssh 29749 ( 0.12%) 6124547 ( 0.03%) 205.87
dns 7722 ( 0.03%) 2501656 ( 0.01%) 323.96
bgp 181 ( 0.00%) 89609 ( 0.00%) 495.08
napster 93 ( 0.00%) 17913 ( 0.00%) 192.61
realaud 45 ( 0.00%) 6728 ( 0.00%) 149.51
rtsp 3837173 ( 14.87%) 5318854725 ( 21.76%) 1386.14
icecast 7225 ( 0.03%) 451984 ( 0.00%) 62.56
other 2651675 ( 10.27%) 1948397912 ( 7.97%) 734.78
udp 3473764 ( 13.46%) 1269384135 ( 5.19%) 365.42
dns 830151 ( 3.22%) 160119989 ( 0.65%) 192.88
realaud 3669 ( 0.01%) 222775 ( 0.00%) 60.72
halflif 21 ( 0.00%) 2211 ( 0.00%) 105.29
starcra 27 ( 0.00%) 6826 ( 0.00%) 252.81
everque 46 ( 0.00%) 8588 ( 0.00%) 186.70
unreal 34 ( 0.00%) 12637 ( 0.00%) 371.68
quake 15 ( 0.00%) 1610 ( 0.00%) 107.33
cuseeme 5 ( 0.00%) 649 ( 0.00%) 129.80
other 2639356 ( 10.23%) 1108948480 ( 4.54%) 420.16
icmp 246825 ( 0.96%) 23259186 ( 0.10%) 94.23
ipip 288 ( 0.00%) 35608 ( 0.00%) 123.64
ip6 1003 ( 0.00%) 122951 ( 0.00%) 122.58
other 117462 ( 0.46%) 16936480 ( 0.07%) 144.19
frag 23778 ( 0.09%) 22514291 ( 0.09%) 946.85
ip6 45065 ( 0.17%) 9628653 ( 0.04%) 213.66
tcp6 32908 ( 0.13%) 7769402 ( 0.03%) 236.09
http(s) 118 ( 0.00%) 162072 ( 0.00%) 1373.49
http(c) 19336 ( 0.07%) 1816865 ( 0.01%) 93.96
smtp 267 ( 0.00%) 99270 ( 0.00%) 371.80
ftp 43 ( 0.00%) 3870 ( 0.00%) 90.00
pop3 72 ( 0.00%) 5981 ( 0.00%) 83.07
ssh 1895 ( 0.01%) 338938 ( 0.00%) 178.86
dns 11 ( 0.00%) 1480 ( 0.00%) 134.55
bgp 418 ( 0.00%) 41060 ( 0.00%) 98.23
other 10748 ( 0.04%) 5299866 ( 0.02%) 493.10
udp6 6482 ( 0.03%) 1069700 ( 0.00%) 165.03
dns 6439 ( 0.02%) 1065707 ( 0.00%) 165.51
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 42 ( 0.00%) 3887 ( 0.00%) 92.55
icmp6 5625 ( 0.02%) 768733 ( 0.00%) 136.66
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 19 ( 0.00%) 16602 ( 0.00%) 873.79
tcpdump file: 200811081400.dump.gz (565.20 MB)