Traffic Trace Info
DumpFile: 200811151400.dump
FileSize: 1316.46MB
Id: 200811151400
StartTime: Sat Nov 15 14:00:00 2008
EndTime: Sat Nov 15 14:15:00 2008
TotalTime: 900.00 seconds
TotalCapSize: 1028.02MB CapLen: 96 bytes
# of packets: 18902787 (12671.19MB)
AvgRate: 118.10Mbps stddev:13.40M
IP flow (unique src/dst pair) Information
# of flows: 746800 (avg. 25.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.5% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 497612
Top 10 bandwidth usage (bytes/total in %):
13.8% 8.3% 7.8% 5.2% 4.9% 4.9% 2.9% 2.3% 2.3% 2.2%
# of IPv6 addresses: 869
Top 10 bandwidth usage (bytes/total in %):
39.0% 35.8% 11.5% 9.0% 7.0% 7.0% 5.4% 4.1% 4.0% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811151400.pktlen.png)
detailed numbers
[ 32- 63]: 4496727
[ 64- 127]: 4416355
[ 128- 255]: 837996
[ 256- 511]: 497554
[ 512- 1023]: 439458
[ 1024- 2047]: 8214697
Protocol Breakdown
![[protocol breakdown chart]](200811151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18902787 (100.00%) 13286709179 (100.00%) 702.90
ip 18865738 ( 99.80%) 13282151449 ( 99.97%) 704.04
tcp 15813836 ( 83.66%) 12288132429 ( 92.48%) 777.05
http(s) 7050906 ( 37.30%) 9683807607 ( 72.88%) 1373.41
http(c) 4077838 ( 21.57%) 477348711 ( 3.59%) 117.06
squid 536147 ( 2.84%) 258387447 ( 1.94%) 481.93
smtp 261651 ( 1.38%) 51744006 ( 0.39%) 197.76
nntp 40 ( 0.00%) 4417 ( 0.00%) 110.42
ftp 55694 ( 0.29%) 15489884 ( 0.12%) 278.12
pop3 18948 ( 0.10%) 6954445 ( 0.05%) 367.03
imap 1323 ( 0.01%) 206767 ( 0.00%) 156.29
telnet 17137 ( 0.09%) 1276445 ( 0.01%) 74.48
ssh 19170 ( 0.10%) 2892037 ( 0.02%) 150.86
dns 5549 ( 0.03%) 634462 ( 0.00%) 114.34
bgp 137 ( 0.00%) 48045 ( 0.00%) 350.69
napster 6 ( 0.00%) 414 ( 0.00%) 69.00
realaud 44 ( 0.00%) 4693 ( 0.00%) 106.66
rtsp 101759 ( 0.54%) 63278272 ( 0.48%) 621.84
icecast 155782 ( 0.82%) 171132869 ( 1.29%) 1098.54
other 3511704 ( 18.58%) 1554921848 ( 11.70%) 442.78
udp 2224503 ( 11.77%) 906891039 ( 6.83%) 407.68
dns 735947 ( 3.89%) 167991599 ( 1.26%) 228.27
realaud 834 ( 0.00%) 55760 ( 0.00%) 66.86
halflif 71 ( 0.00%) 7534 ( 0.00%) 106.11
starcra 29 ( 0.00%) 5171 ( 0.00%) 178.31
everque 83 ( 0.00%) 12228 ( 0.00%) 147.33
unreal 48 ( 0.00%) 15784 ( 0.00%) 328.83
quake 11 ( 0.00%) 1014 ( 0.00%) 92.18
cuseeme 1 ( 0.00%) 91 ( 0.00%) 91.00
other 1487022 ( 7.87%) 738606067 ( 5.56%) 496.70
icmp 550225 ( 2.91%) 50344800 ( 0.38%) 91.50
ipip 319 ( 0.00%) 40098 ( 0.00%) 125.70
ip6 980 ( 0.01%) 118752 ( 0.00%) 121.18
other 275875 ( 1.46%) 36624331 ( 0.28%) 132.76
frag 115857 ( 0.61%) 99602709 ( 0.75%) 859.70
ip6 37049 ( 0.20%) 4557730 ( 0.03%) 123.02
tcp6 21397 ( 0.11%) 2384758 ( 0.02%) 111.45
http(s) 215 ( 0.00%) 318870 ( 0.00%) 1483.12
http(c) 19299 ( 0.10%) 1811655 ( 0.01%) 93.87
smtp 175 ( 0.00%) 61752 ( 0.00%) 352.87
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 104 ( 0.00%) 14268 ( 0.00%) 137.19
dns 4 ( 0.00%) 390 ( 0.00%) 97.50
bgp 413 ( 0.00%) 40011 ( 0.00%) 96.88
other 1154 ( 0.01%) 134962 ( 0.00%) 116.95
udp6 9954 ( 0.05%) 1432182 ( 0.01%) 143.88
dns 9920 ( 0.05%) 1428456 ( 0.01%) 144.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 32 ( 0.00%) 3520 ( 0.00%) 110.00
icmp6 5665 ( 0.03%) 736454 ( 0.01%) 130.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200811151400.dump.gz (474.46 MB)