Traffic Trace Info
DumpFile: 200811111400.dump
FileSize: 1443.13MB
Id: 200811111400
StartTime: Tue Nov 11 14:00:00 2008
EndTime: Tue Nov 11 14:15:01 2008
TotalTime: 900.34 seconds
TotalCapSize: 1126.98MB CapLen: 96 bytes
# of packets: 20717964 (13776.88MB)
AvgRate: 128.36Mbps stddev:13.55M
IP flow (unique src/dst pair) Information
# of flows: 634269 (avg. 32.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.3% 3.2% 1.9% 1.7% 1.6% 1.3% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 323884
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.9% 6.4% 5.9% 4.8% 4.6% 4.6% 4.1% 4.1% 3.3%
# of IPv6 addresses: 840
Top 10 bandwidth usage (bytes/total in %):
35.0% 33.8% 18.6% 17.8% 6.9% 3.6% 3.6% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811111400.pktlen.png)
detailed numbers
[ 32- 63]: 5286822
[ 64- 127]: 4616231
[ 128- 255]: 827079
[ 256- 511]: 550195
[ 512- 1023]: 558452
[ 1024- 2047]: 8879185
Protocol Breakdown
![[protocol breakdown chart]](200811111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20717964 (100.00%) 14446107783 (100.00%) 697.27
ip 20674116 ( 99.79%) 14436955499 ( 99.94%) 698.31
tcp 17637627 ( 85.13%) 13659915771 ( 94.56%) 774.48
http(s) 7411488 ( 35.77%) 9957546550 ( 68.93%) 1343.53
http(c) 4836979 ( 23.35%) 591785380 ( 4.10%) 122.35
squid 545815 ( 2.63%) 266756680 ( 1.85%) 488.73
smtp 573361 ( 2.77%) 201894092 ( 1.40%) 352.12
nntp 32 ( 0.00%) 4441 ( 0.00%) 138.78
ftp 130134 ( 0.63%) 92290111 ( 0.64%) 709.19
pop3 26079 ( 0.13%) 6000770 ( 0.04%) 230.10
imap 6186 ( 0.03%) 1052523 ( 0.01%) 170.15
telnet 2585 ( 0.01%) 601783 ( 0.00%) 232.80
ssh 11958 ( 0.06%) 2896197 ( 0.02%) 242.20
dns 10080 ( 0.05%) 4021737 ( 0.03%) 398.98
bgp 131 ( 0.00%) 46231 ( 0.00%) 352.91
napster 124 ( 0.00%) 11822 ( 0.00%) 95.34
realaud 128 ( 0.00%) 18218 ( 0.00%) 142.33
rtsp 273273 ( 1.32%) 151279464 ( 1.05%) 553.58
icecast 7677 ( 0.04%) 475320 ( 0.00%) 61.91
hotline 23 ( 0.00%) 8559 ( 0.00%) 372.13
other 3801572 ( 18.35%) 2383225773 ( 16.50%) 626.91
udp 2214338 ( 10.69%) 659309137 ( 4.56%) 297.75
dns 1106170 ( 5.34%) 228937506 ( 1.58%) 206.96
realaud 1496 ( 0.01%) 90396 ( 0.00%) 60.43
halflif 24 ( 0.00%) 2317 ( 0.00%) 96.54
starcra 36 ( 0.00%) 6741 ( 0.00%) 187.25
everque 290 ( 0.00%) 30911 ( 0.00%) 106.59
unreal 39 ( 0.00%) 12150 ( 0.00%) 311.54
quake 28 ( 0.00%) 4162 ( 0.00%) 148.64
cuseeme 8 ( 0.00%) 1008 ( 0.00%) 126.00
other 1105982 ( 5.34%) 429930143 ( 2.98%) 388.73
icmp 384565 ( 1.86%) 35105714 ( 0.24%) 91.29
ipip 325 ( 0.00%) 41520 ( 0.00%) 127.75
ip6 1582 ( 0.01%) 231363 ( 0.00%) 146.25
other 435679 ( 2.10%) 82351994 ( 0.57%) 189.02
frag 45613 ( 0.22%) 47366321 ( 0.33%) 1038.44
ip6 43848 ( 0.21%) 9152284 ( 0.06%) 208.73
tcp6 24769 ( 0.12%) 3316798 ( 0.02%) 133.91
http(s) 203 ( 0.00%) 286074 ( 0.00%) 1409.23
http(c) 19483 ( 0.09%) 1876015 ( 0.01%) 96.29
smtp 1272 ( 0.01%) 607022 ( 0.00%) 477.22
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
pop3 32 ( 0.00%) 2768 ( 0.00%) 86.50
ssh 1968 ( 0.01%) 352196 ( 0.00%) 178.96
bgp 408 ( 0.00%) 36799 ( 0.00%) 90.19
other 1367 ( 0.01%) 152616 ( 0.00%) 111.64
udp6 9580 ( 0.05%) 1760117 ( 0.01%) 183.73
dns 9494 ( 0.05%) 1752871 ( 0.01%) 184.63
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 85 ( 0.00%) 7142 ( 0.00%) 84.02
icmp6 6470 ( 0.03%) 968599 ( 0.01%) 149.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2999 ( 0.01%) 3102690 ( 0.02%) 1034.57
tcpdump file: 200811111400.dump.gz (517.04 MB)