Traffic Trace Info
DumpFile: 200811141400.dump
FileSize: 1818.87MB
Id: 200811141400
StartTime: Fri Nov 14 14:00:00 2008
EndTime: Fri Nov 14 14:15:01 2008
TotalTime: 900.70 seconds
TotalCapSize: 1420.53MB CapLen: 96 bytes
# of packets: 26105237 (17246.03MB)
AvgRate: 160.62Mbps stddev:29.23M
IP flow (unique src/dst pair) Information
# of flows: 644869 (avg. 40.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.6% 1.5% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 376036
Top 10 bandwidth usage (bytes/total in %):
13.3% 13.2% 12.2% 4.6% 2.4% 2.4% 2.3% 2.0% 1.7% 1.6%
# of IPv6 addresses: 972
Top 10 bandwidth usage (bytes/total in %):
23.0% 21.1% 11.1% 8.7% 8.5% 8.2% 8.2% 8.0% 7.1% 7.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811141400.pktlen.png)
detailed numbers
[ 32- 63]: 7602961
[ 64- 127]: 4816477
[ 128- 255]: 956931
[ 256- 511]: 975641
[ 512- 1023]: 647829
[ 1024- 2047]: 11105398
Protocol Breakdown
![[protocol breakdown chart]](200811141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26105237 (100.00%) 18083774552 (100.00%) 692.73
ip 26051623 ( 99.79%) 18076076029 ( 99.96%) 693.86
tcp 22927142 ( 87.83%) 17211764764 ( 95.18%) 750.72
http(s) 10212482 ( 39.12%) 13959720085 ( 77.19%) 1366.93
http(c) 7105936 ( 27.22%) 874733834 ( 4.84%) 123.10
squid 795677 ( 3.05%) 475529820 ( 2.63%) 597.64
smtp 396258 ( 1.52%) 177087597 ( 0.98%) 446.90
ftp 97871 ( 0.37%) 51088062 ( 0.28%) 521.99
pop3 25464 ( 0.10%) 6643310 ( 0.04%) 260.89
imap 4312 ( 0.02%) 866511 ( 0.00%) 200.95
telnet 17246 ( 0.07%) 1308368 ( 0.01%) 75.87
ssh 207426 ( 0.79%) 43095259 ( 0.24%) 207.76
dns 8566 ( 0.03%) 1355949 ( 0.01%) 158.29
bgp 165 ( 0.00%) 68384 ( 0.00%) 414.45
napster 2203 ( 0.01%) 1782005 ( 0.01%) 808.90
realaud 26 ( 0.00%) 3489 ( 0.00%) 134.19
rtsp 161873 ( 0.62%) 98113164 ( 0.54%) 606.11
icecast 11878 ( 0.05%) 8922347 ( 0.05%) 751.17
hotline 7 ( 0.00%) 769 ( 0.00%) 109.86
other 3879665 ( 14.86%) 1511440591 ( 8.36%) 389.58
udp 2241700 ( 8.59%) 763079415 ( 4.22%) 340.40
dns 922287 ( 3.53%) 195205106 ( 1.08%) 211.65
realaud 6412 ( 0.02%) 431997 ( 0.00%) 67.37
halflif 41 ( 0.00%) 6302 ( 0.00%) 153.71
starcra 48 ( 0.00%) 8045 ( 0.00%) 167.60
everque 232 ( 0.00%) 26712 ( 0.00%) 115.14
unreal 41 ( 0.00%) 12523 ( 0.00%) 305.44
quake 25 ( 0.00%) 2764 ( 0.00%) 110.56
cuseeme 14 ( 0.00%) 2271 ( 0.00%) 162.21
other 1312494 ( 5.03%) 567282114 ( 3.14%) 432.22
icmp 798824 ( 3.06%) 89593391 ( 0.50%) 112.16
ipip 325 ( 0.00%) 39646 ( 0.00%) 121.99
ip6 1059 ( 0.00%) 128017 ( 0.00%) 120.88
other 82573 ( 0.32%) 11470796 ( 0.06%) 138.92
frag 32289 ( 0.12%) 33641280 ( 0.19%) 1041.88
ip6 53614 ( 0.21%) 7698523 ( 0.04%) 143.59
tcp6 29141 ( 0.11%) 3671719 ( 0.02%) 126.00
http(s) 520 ( 0.00%) 708571 ( 0.00%) 1362.64
http(c) 24916 ( 0.10%) 2433677 ( 0.01%) 97.68
smtp 448 ( 0.00%) 151412 ( 0.00%) 337.97
ftp 40 ( 0.00%) 3660 ( 0.00%) 91.50
pop3 31 ( 0.00%) 2686 ( 0.00%) 86.65
ssh 96 ( 0.00%) 16176 ( 0.00%) 168.50
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 418 ( 0.00%) 41089 ( 0.00%) 98.30
other 2665 ( 0.01%) 313813 ( 0.00%) 117.75
udp6 17692 ( 0.07%) 2981002 ( 0.02%) 168.49
dns 17653 ( 0.07%) 2976485 ( 0.02%) 168.61
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 34 ( 0.00%) 3997 ( 0.00%) 117.56
icmp6 6719 ( 0.03%) 1017963 ( 0.01%) 151.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 31 ( 0.00%) 23623 ( 0.00%) 762.03
tcpdump file: 200811141400.dump.gz (666.42 MB)