Traffic Trace Info
DumpFile: 200811121400.dump
FileSize: 1462.14MB
Id: 200811121400
StartTime: Wed Nov 12 14:00:00 2008
EndTime: Wed Nov 12 14:15:00 2008
TotalTime: 899.97 seconds
TotalCapSize: 1143.28MB CapLen: 96 bytes
# of packets: 20896230 (14223.96MB)
AvgRate: 132.60Mbps stddev:18.29M
IP flow (unique src/dst pair) Information
# of flows: 517360 (avg. 40.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.8% 1.8% 1.6% 1.4% 1.3% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 303733
Top 10 bandwidth usage (bytes/total in %):
8.7% 6.0% 5.7% 5.3% 3.9% 3.7% 3.5% 2.5% 2.3% 2.3%
# of IPv6 addresses: 923
Top 10 bandwidth usage (bytes/total in %):
91.8% 91.8% 3.1% 3.1% 2.4% 1.5% 0.8% 0.8% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811121400.pktlen.png)
detailed numbers
[ 32- 63]: 5813224
[ 64- 127]: 4039390
[ 128- 255]: 604239
[ 256- 511]: 528156
[ 512- 1023]: 678833
[ 1024- 2047]: 9232388
Protocol Breakdown
![[protocol breakdown chart]](200811121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20896230 (100.00%) 14914900022 (100.00%) 713.76
ip 20690956 ( 99.02%) 14701075094 ( 98.57%) 710.51
tcp 18209743 ( 87.14%) 13911731277 ( 93.27%) 763.97
http(s) 6572635 ( 31.45%) 8656976445 ( 58.04%) 1317.12
http(c) 4587976 ( 21.96%) 540463843 ( 3.62%) 117.80
squid 1043862 ( 5.00%) 506303111 ( 3.39%) 485.03
smtp 219008 ( 1.05%) 66043170 ( 0.44%) 301.56
ftp 30040 ( 0.14%) 2964929 ( 0.02%) 98.70
pop3 21933 ( 0.10%) 6189203 ( 0.04%) 282.19
imap 5949 ( 0.03%) 1116086 ( 0.01%) 187.61
telnet 252 ( 0.00%) 18397 ( 0.00%) 73.00
ssh 17220 ( 0.08%) 4039875 ( 0.03%) 234.60
dns 5106 ( 0.02%) 531403 ( 0.00%) 104.07
bgp 141 ( 0.00%) 49404 ( 0.00%) 350.38
napster 121 ( 0.00%) 10907 ( 0.00%) 90.14
realaud 78 ( 0.00%) 6620 ( 0.00%) 84.87
rtsp 344283 ( 1.65%) 74305098 ( 0.50%) 215.83
icecast 15674 ( 0.08%) 965738 ( 0.01%) 61.61
hotline 22 ( 0.00%) 2423 ( 0.00%) 110.14
other 5345430 ( 25.58%) 4051743845 ( 27.17%) 757.98
udp 1987195 ( 9.51%) 743525352 ( 4.99%) 374.16
dns 744639 ( 3.56%) 183090995 ( 1.23%) 245.88
realaud 6451 ( 0.03%) 429139 ( 0.00%) 66.52
halflif 14 ( 0.00%) 1331 ( 0.00%) 95.07
starcra 15 ( 0.00%) 1526 ( 0.00%) 101.73
everque 643 ( 0.00%) 476577 ( 0.00%) 741.18
unreal 43 ( 0.00%) 10368 ( 0.00%) 241.12
quake 15 ( 0.00%) 1644 ( 0.00%) 109.60
other 1234054 ( 5.91%) 557616348 ( 3.74%) 451.86
icmp 431404 ( 2.06%) 37851235 ( 0.25%) 87.74
ipip 297 ( 0.00%) 35504 ( 0.00%) 119.54
ip6 1064 ( 0.01%) 128691 ( 0.00%) 120.95
other 61253 ( 0.29%) 7803035 ( 0.05%) 127.39
frag 48124 ( 0.23%) 55846382 ( 0.37%) 1160.47
ip6 205274 ( 0.98%) 213824928 ( 1.43%) 1041.66
tcp6 181321 ( 0.87%) 204559028 ( 1.37%) 1128.16
http(s) 441 ( 0.00%) 511111 ( 0.00%) 1158.98
http(c) 19310 ( 0.09%) 1817612 ( 0.01%) 94.13
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 40 ( 0.00%) 14786 ( 0.00%) 369.65
ftp 57 ( 0.00%) 5720 ( 0.00%) 100.35
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 2244 ( 0.01%) 421032 ( 0.00%) 187.63
bgp 413 ( 0.00%) 39202 ( 0.00%) 94.92
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 158780 ( 0.76%) 201746493 ( 1.35%) 1270.60
udp6 10861 ( 0.05%) 1660568 ( 0.01%) 152.89
dns 10826 ( 0.05%) 1656725 ( 0.01%) 153.03
everque 1 ( 0.00%) 95 ( 0.00%) 95.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 33 ( 0.00%) 3630 ( 0.00%) 110.00
icmp6 6687 ( 0.03%) 1008374 ( 0.01%) 150.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6375 ( 0.03%) 6592878 ( 0.04%) 1034.18
tcpdump file: 200811121400.dump.gz (516.77 MB)