Traffic Trace Info
DumpFile: 200811101400.dump
FileSize: 1882.61MB
Id: 200811101400
StartTime: Mon Nov 10 14:00:00 2008
EndTime: Mon Nov 10 14:15:01 2008
TotalTime: 900.37 seconds
TotalCapSize: 1471.82MB CapLen: 96 bytes
# of packets: 26920816 (16609.05MB)
AvgRate: 154.75Mbps stddev:27.71M
IP flow (unique src/dst pair) Information
# of flows: 703232 (avg. 38.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 4.8% 2.9% 1.6% 1.6% 1.5% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 361511
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.2% 7.2% 5.4% 4.9% 4.7% 4.0% 3.9% 3.6% 2.9%
# of IPv6 addresses: 851
Top 10 bandwidth usage (bytes/total in %):
25.6% 23.5% 14.0% 13.9% 5.4% 5.0% 5.0% 4.7% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811101400.pktlen.png)
detailed numbers
[ 32- 63]: 7599134
[ 64- 127]: 5841158
[ 128- 255]: 1127675
[ 256- 511]: 774922
[ 512- 1023]: 846587
[ 1024- 2047]: 10731340
Protocol Breakdown
![[protocol breakdown chart]](200811101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26920816 (100.00%) 17415847168 (100.00%) 646.93
ip 26870232 ( 99.81%) 17408891217 ( 99.96%) 647.89
tcp 23331615 ( 86.67%) 16229872113 ( 93.19%) 695.62
http(s) 7941121 ( 29.50%) 10593735085 ( 60.83%) 1334.04
http(c) 4217112 ( 15.66%) 501751682 ( 2.88%) 118.98
squid 1207952 ( 4.49%) 344989281 ( 1.98%) 285.60
smtp 476808 ( 1.77%) 160003500 ( 0.92%) 335.57
nntp 42 ( 0.00%) 6307 ( 0.00%) 150.17
ftp 61023 ( 0.23%) 14530416 ( 0.08%) 238.11
pop3 43091 ( 0.16%) 24755825 ( 0.14%) 574.50
imap 5927 ( 0.02%) 2044434 ( 0.01%) 344.94
telnet 77204 ( 0.29%) 6106347 ( 0.04%) 79.09
ssh 953485 ( 3.54%) 155053886 ( 0.89%) 162.62
dns 8396 ( 0.03%) 3781181 ( 0.02%) 450.36
bgp 141 ( 0.00%) 45588 ( 0.00%) 323.32
napster 227 ( 0.00%) 23395 ( 0.00%) 103.06
realaud 28 ( 0.00%) 3811 ( 0.00%) 136.11
rtsp 488780 ( 1.82%) 309554751 ( 1.78%) 633.32
icecast 343547 ( 1.28%) 509765103 ( 2.93%) 1483.83
hotline 10 ( 0.00%) 1360 ( 0.00%) 136.00
other 7506720 ( 27.88%) 3603720101 ( 20.69%) 480.07
udp 2646934 ( 9.83%) 1065345233 ( 6.12%) 402.48
dns 957533 ( 3.56%) 214591895 ( 1.23%) 224.11
realaud 4097 ( 0.02%) 254819 ( 0.00%) 62.20
halflif 26 ( 0.00%) 2644 ( 0.00%) 101.69
starcra 44 ( 0.00%) 7382 ( 0.00%) 167.77
everque 39 ( 0.00%) 6087 ( 0.00%) 156.08
unreal 34 ( 0.00%) 10687 ( 0.00%) 314.32
quake 21 ( 0.00%) 2174 ( 0.00%) 103.52
cuseeme 4 ( 0.00%) 692 ( 0.00%) 173.00
other 1684769 ( 6.26%) 849970937 ( 4.88%) 504.50
icmp 655129 ( 2.43%) 73254622 ( 0.42%) 111.82
ipip 322 ( 0.00%) 39560 ( 0.00%) 122.86
ip6 1305 ( 0.00%) 183253 ( 0.00%) 140.42
other 234927 ( 0.87%) 40196436 ( 0.23%) 171.10
frag 47380 ( 0.18%) 50591514 ( 0.29%) 1067.78
ip6 50584 ( 0.19%) 6955951 ( 0.04%) 137.51
tcp6 35481 ( 0.13%) 4609841 ( 0.03%) 129.92
http(s) 937 ( 0.00%) 1180648 ( 0.01%) 1260.03
http(c) 30546 ( 0.11%) 2786336 ( 0.02%) 91.22
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 214 ( 0.00%) 88301 ( 0.00%) 412.62
ftp 26 ( 0.00%) 2363 ( 0.00%) 90.88
pop3 78 ( 0.00%) 6354 ( 0.00%) 81.46
ssh 1944 ( 0.01%) 352608 ( 0.00%) 181.38
dns 15 ( 0.00%) 2292 ( 0.00%) 152.80
bgp 410 ( 0.00%) 38082 ( 0.00%) 92.88
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1308 ( 0.00%) 152635 ( 0.00%) 116.69
udp6 9656 ( 0.04%) 1669976 ( 0.01%) 172.95
dns 9647 ( 0.04%) 1668986 ( 0.01%) 173.01
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 5410 ( 0.02%) 667364 ( 0.00%) 123.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7 ( 0.00%) 4690 ( 0.00%) 670.00
tcpdump file: 200811101400.dump.gz (658.53 MB)