Traffic Trace Info
DumpFile: 200811161400.dump
FileSize: 1058.23MB
Id: 200811161400
StartTime: Sun Nov 16 14:00:01 2008
EndTime: Sun Nov 16 14:15:00 2008
TotalTime: 899.22 seconds
TotalCapSize: 825.52MB CapLen: 96 bytes
# of packets: 15250199 (11157.01MB)
AvgRate: 104.07Mbps stddev:13.84M
IP flow (unique src/dst pair) Information
# of flows: 591541 (avg. 25.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.0% 2.8% 2.5% 1.9% 1.9% 1.7% 1.4% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 344069
Top 10 bandwidth usage (bytes/total in %):
12.7% 11.5% 8.1% 8.1% 4.3% 4.2% 3.8% 3.3% 3.1% 3.0%
# of IPv6 addresses: 882
Top 10 bandwidth usage (bytes/total in %):
39.2% 36.1% 17.5% 11.2% 9.3% 4.8% 4.0% 2.6% 2.4% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811161400.pktlen.png)
detailed numbers
[ 32- 63]: 3506951
[ 64- 127]: 2960849
[ 128- 255]: 725593
[ 256- 511]: 429669
[ 512- 1023]: 307466
[ 1024- 2047]: 7319671
Protocol Breakdown
![[protocol breakdown chart]](200811161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15250199 (100.00%) 11698973230 (100.00%) 767.14
ip 15211210 ( 99.74%) 11694480599 ( 99.96%) 768.81
tcp 12926483 ( 84.76%) 10928105322 ( 93.41%) 845.40
http(s) 5592347 ( 36.67%) 7705241189 ( 65.86%) 1377.82
http(c) 2980575 ( 19.54%) 310376104 ( 2.65%) 104.13
squid 568543 ( 3.73%) 263590818 ( 2.25%) 463.63
smtp 189363 ( 1.24%) 60896558 ( 0.52%) 321.59
ftp 119935 ( 0.79%) 112489259 ( 0.96%) 937.92
pop3 12747 ( 0.08%) 5507989 ( 0.05%) 432.10
imap 4426 ( 0.03%) 1401174 ( 0.01%) 316.58
telnet 1292 ( 0.01%) 163130 ( 0.00%) 126.26
ssh 79266 ( 0.52%) 29729914 ( 0.25%) 375.07
dns 2880 ( 0.02%) 324790 ( 0.00%) 112.77
bgp 157 ( 0.00%) 62163 ( 0.00%) 395.94
napster 8 ( 0.00%) 1016 ( 0.00%) 127.00
realaud 66 ( 0.00%) 4026 ( 0.00%) 61.00
rtsp 56020 ( 0.37%) 49866022 ( 0.43%) 890.15
icecast 3278 ( 0.02%) 223626 ( 0.00%) 68.22
other 3315558 ( 21.74%) 2388226224 ( 20.41%) 720.31
udp 1874913 ( 12.29%) 723807754 ( 6.19%) 386.05
dns 616576 ( 4.04%) 123956120 ( 1.06%) 201.04
realaud 13 ( 0.00%) 1965 ( 0.00%) 151.15
halflif 42 ( 0.00%) 3774 ( 0.00%) 89.86
starcra 26 ( 0.00%) 4695 ( 0.00%) 180.58
everque 86 ( 0.00%) 14968 ( 0.00%) 174.05
unreal 39 ( 0.00%) 11185 ( 0.00%) 286.79
quake 10 ( 0.00%) 826 ( 0.00%) 82.60
cuseeme 14 ( 0.00%) 1605 ( 0.00%) 114.64
other 1258012 ( 8.25%) 599731898 ( 5.13%) 476.73
icmp 380598 ( 2.50%) 34916409 ( 0.30%) 91.74
ipip 325 ( 0.00%) 39870 ( 0.00%) 122.68
ip6 1054 ( 0.01%) 128077 ( 0.00%) 121.52
other 27837 ( 0.18%) 7483167 ( 0.06%) 268.82
frag 19791 ( 0.13%) 19769313 ( 0.17%) 998.90
ip6 38989 ( 0.26%) 4492631 ( 0.04%) 115.23
tcp6 21510 ( 0.14%) 2139425 ( 0.02%) 99.46
http(c) 19429 ( 0.13%) 1823472 ( 0.02%) 93.85
smtp 332 ( 0.00%) 109139 ( 0.00%) 328.73
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 83 ( 0.00%) 9750 ( 0.00%) 117.47
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 418 ( 0.00%) 39511 ( 0.00%) 94.52
other 1208 ( 0.01%) 154068 ( 0.00%) 127.54
udp6 11679 ( 0.08%) 1575245 ( 0.01%) 134.88
dns 11634 ( 0.08%) 1570293 ( 0.01%) 134.97
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 44 ( 0.00%) 4840 ( 0.00%) 110.00
icmp6 5760 ( 0.04%) 764726 ( 0.01%) 132.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 9155 ( 0.00%) 915.50
tcpdump file: 200811161400.dump.gz (365.13 MB)