Traffic Trace Info
DumpFile: 200811091400.dump
FileSize: 936.35MB
Id: 200811091400
StartTime: Sun Nov 9 14:00:01 2008
EndTime: Sun Nov 9 14:15:00 2008
TotalTime: 899.32 seconds
TotalCapSize: 729.17MB CapLen: 96 bytes
# of packets: 13577442 (8303.13MB)
AvgRate: 77.46Mbps stddev:10.09M
IP flow (unique src/dst pair) Information
# of flows: 739306 (avg. 18.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.3% 1.7% 1.4% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 438125
Top 10 bandwidth usage (bytes/total in %):
16.1% 10.3% 6.0% 4.8% 3.6% 3.6% 3.2% 2.8% 2.3% 1.7%
# of IPv6 addresses: 697
Top 10 bandwidth usage (bytes/total in %):
72.1% 66.6% 12.3% 11.3% 5.4% 2.7% 2.3% 2.3% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811091400.pktlen.png)
detailed numbers
[ 32- 63]: 3971262
[ 64- 127]: 2927161
[ 128- 255]: 627953
[ 256- 511]: 349224
[ 512- 1023]: 323689
[ 1024- 2047]: 5378153
Protocol Breakdown
![[protocol breakdown chart]](200811091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13577442 (100.00%) 8706467860 (100.00%) 641.25
ip 13500646 ( 99.43%) 8692256456 ( 99.84%) 643.84
tcp 10672455 ( 78.60%) 7702474518 ( 88.47%) 721.72
http(s) 4517762 ( 33.27%) 5957042868 ( 68.42%) 1318.58
http(c) 2745185 ( 20.22%) 256225266 ( 2.94%) 93.34
squid 447198 ( 3.29%) 232195988 ( 2.67%) 519.22
smtp 230785 ( 1.70%) 44677562 ( 0.51%) 193.59
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 154269 ( 1.14%) 113495962 ( 1.30%) 735.70
pop3 13810 ( 0.10%) 6358636 ( 0.07%) 460.44
imap 3354 ( 0.02%) 850771 ( 0.01%) 253.66
telnet 7526 ( 0.06%) 557444 ( 0.01%) 74.07
ssh 6098 ( 0.04%) 864688 ( 0.01%) 141.80
dns 5312 ( 0.04%) 667237 ( 0.01%) 125.61
bgp 134 ( 0.00%) 39737 ( 0.00%) 296.54
napster 16 ( 0.00%) 1308 ( 0.00%) 81.75
realaud 20 ( 0.00%) 1576 ( 0.00%) 78.80
rtsp 55344 ( 0.41%) 67961420 ( 0.78%) 1227.98
icecast 4459 ( 0.03%) 282813 ( 0.00%) 63.43
other 2481179 ( 18.27%) 1021250988 ( 11.73%) 411.60
udp 2256080 ( 16.62%) 934822942 ( 10.74%) 414.36
dns 783056 ( 5.77%) 164878423 ( 1.89%) 210.56
realaud 3652 ( 0.03%) 219623 ( 0.00%) 60.14
halflif 25 ( 0.00%) 3314 ( 0.00%) 132.56
starcra 12 ( 0.00%) 2135 ( 0.00%) 177.92
everque 39 ( 0.00%) 6298 ( 0.00%) 161.49
unreal 38 ( 0.00%) 12434 ( 0.00%) 327.21
quake 10 ( 0.00%) 1164 ( 0.00%) 116.40
cuseeme 6 ( 0.00%) 540 ( 0.00%) 90.00
other 1469123 ( 10.82%) 769562677 ( 8.84%) 523.82
icmp 554799 ( 4.09%) 50749789 ( 0.58%) 91.47
ipip 309 ( 0.00%) 36584 ( 0.00%) 118.39
ip6 1008 ( 0.01%) 124064 ( 0.00%) 123.08
other 15995 ( 0.12%) 4048559 ( 0.05%) 253.11
frag 43468 ( 0.32%) 45344429 ( 0.52%) 1043.17
ip6 76796 ( 0.57%) 14211404 ( 0.16%) 185.05
tcp6 65590 ( 0.48%) 12622168 ( 0.14%) 192.44
http(c) 18849 ( 0.14%) 1769085 ( 0.02%) 93.86
smtp 343 ( 0.00%) 106695 ( 0.00%) 311.06
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 1900 ( 0.01%) 346696 ( 0.00%) 182.47
bgp 399 ( 0.00%) 36540 ( 0.00%) 91.58
other 44069 ( 0.32%) 10360548 ( 0.12%) 235.10
udp6 5784 ( 0.04%) 911025 ( 0.01%) 157.51
dns 5769 ( 0.04%) 909375 ( 0.01%) 157.63
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 5381 ( 0.04%) 665739 ( 0.01%) 123.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 8392 ( 0.00%) 762.91
tcpdump file: 200811091400.dump.gz (329.84 MB)