Traffic Trace Info
DumpFile: 200811131400.dump
FileSize: 1722.80MB
Id: 200811131400
StartTime: Thu Nov 13 14:00:01 2008
EndTime: Thu Nov 13 14:15:01 2008
TotalTime: 900.28 seconds
TotalCapSize: 1349.48MB CapLen: 96 bytes
# of packets: 24464774 (16967.12MB)
AvgRate: 158.11Mbps stddev:15.44M
IP flow (unique src/dst pair) Information
# of flows: 547749 (avg. 44.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.5% 1.4% 1.4% 1.4% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 304276
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.7% 7.5% 4.7% 4.0% 2.9% 2.5% 2.0% 2.0% 2.0%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
23.2% 20.8% 19.1% 14.9% 7.6% 7.4% 6.7% 5.7% 5.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811131400.pktlen.png)
detailed numbers
[ 32- 63]: 5973794
[ 64- 127]: 5485572
[ 128- 255]: 879579
[ 256- 511]: 502530
[ 512- 1023]: 607655
[ 1024- 2047]: 11015644
Protocol Breakdown
![[protocol breakdown chart]](200811131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24464774 (100.00%) 17791309878 (100.00%) 727.22
ip 24417997 ( 99.81%) 17782817058 ( 99.95%) 728.27
tcp 21189102 ( 86.61%) 16808460511 ( 94.48%) 793.26
http(s) 10295448 ( 42.08%) 14046534724 ( 78.95%) 1364.34
http(c) 6253163 ( 25.56%) 662113279 ( 3.72%) 105.88
squid 434981 ( 1.78%) 317085367 ( 1.78%) 728.96
smtp 479908 ( 1.96%) 166858294 ( 0.94%) 347.69
nntp 26 ( 0.00%) 2002 ( 0.00%) 77.00
ftp 42558 ( 0.17%) 13174710 ( 0.07%) 309.57
pop3 21916 ( 0.09%) 6429456 ( 0.04%) 293.37
imap 4648 ( 0.02%) 1597355 ( 0.01%) 343.67
telnet 942 ( 0.00%) 168468 ( 0.00%) 178.84
ssh 21165 ( 0.09%) 12243371 ( 0.07%) 578.47
dns 7502 ( 0.03%) 827064 ( 0.00%) 110.25
bgp 166 ( 0.00%) 52970 ( 0.00%) 319.10
napster 858 ( 0.00%) 605478 ( 0.00%) 705.69
realaud 83 ( 0.00%) 16395 ( 0.00%) 197.53
rtsp 182478 ( 0.75%) 172533682 ( 0.97%) 945.50
icecast 18077 ( 0.07%) 12998861 ( 0.07%) 719.08
hotline 9 ( 0.00%) 927 ( 0.00%) 103.00
other 3425170 ( 14.00%) 1395217868 ( 7.84%) 407.34
udp 2321168 ( 9.49%) 847906857 ( 4.77%) 365.29
dns 844922 ( 3.45%) 177594354 ( 1.00%) 210.19
realaud 5 ( 0.00%) 679 ( 0.00%) 135.80
halflif 20 ( 0.00%) 3148 ( 0.00%) 157.40
starcra 58 ( 0.00%) 9644 ( 0.00%) 166.28
everque 150 ( 0.00%) 21004 ( 0.00%) 140.03
unreal 32 ( 0.00%) 7668 ( 0.00%) 239.62
quake 16 ( 0.00%) 2325 ( 0.00%) 145.31
cuseeme 4 ( 0.00%) 361 ( 0.00%) 90.25
other 1445734 ( 5.91%) 668182715 ( 3.76%) 462.18
icmp 671678 ( 2.75%) 73212929 ( 0.41%) 109.00
ipip 268 ( 0.00%) 31840 ( 0.00%) 118.81
ip6 1458 ( 0.01%) 203439 ( 0.00%) 139.53
other 234323 ( 0.96%) 53001482 ( 0.30%) 226.19
frag 92538 ( 0.38%) 79041029 ( 0.44%) 854.15
ip6 46777 ( 0.19%) 8492820 ( 0.05%) 181.56
tcp6 25148 ( 0.10%) 3556864 ( 0.02%) 141.44
http(s) 946 ( 0.00%) 1197574 ( 0.01%) 1265.93
http(c) 19890 ( 0.08%) 1885518 ( 0.01%) 94.80
smtp 211 ( 0.00%) 50298 ( 0.00%) 238.38
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 108 ( 0.00%) 17720 ( 0.00%) 164.07
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 410 ( 0.00%) 38029 ( 0.00%) 92.75
other 3510 ( 0.01%) 361109 ( 0.00%) 102.88
udp6 14052 ( 0.06%) 2682112 ( 0.02%) 190.87
dns 14031 ( 0.06%) 2679739 ( 0.02%) 190.99
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 19 ( 0.00%) 2148 ( 0.00%) 113.05
icmp6 6601 ( 0.03%) 985560 ( 0.01%) 149.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 946 ( 0.00%) 1264204 ( 0.01%) 1336.37
tcpdump file: 200811131400.dump.gz (619.62 MB)