Traffic Trace Info
DumpFile: 200811171400.dump
FileSize: 1487.84MB
Id: 200811171400
StartTime: Mon Nov 17 14:00:00 2008
EndTime: Mon Nov 17 14:15:01 2008
TotalTime: 900.27 seconds
TotalCapSize: 1162.09MB CapLen: 96 bytes
# of packets: 21347776 (13845.40MB)
AvgRate: 129.01Mbps stddev:13.70M
IP flow (unique src/dst pair) Information
# of flows: 793254 (avg. 26.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.2% 1.9% 1.7% 1.3% 1.2% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 477804
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.1% 9.4% 4.7% 4.1% 3.7% 2.9% 2.5% 2.4% 2.3%
# of IPv6 addresses: 995
Top 10 bandwidth usage (bytes/total in %):
59.7% 59.7% 16.4% 15.7% 4.2% 3.1% 1.7% 1.6% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811171400.pktlen.png)
detailed numbers
[ 32- 63]: 6178594
[ 64- 127]: 4182201
[ 128- 255]: 953832
[ 256- 511]: 563399
[ 512- 1023]: 577271
[ 1024- 2047]: 8892479
Protocol Breakdown
![[protocol breakdown chart]](200811171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21347776 (100.00%) 14517951128 (100.00%) 680.07
ip 21289262 ( 99.73%) 14502931421 ( 99.90%) 681.23
tcp 18294378 ( 85.70%) 13884356712 ( 95.64%) 758.94
http(s) 8245623 ( 38.63%) 11100944615 ( 76.46%) 1346.28
http(c) 5364753 ( 25.13%) 644418054 ( 4.44%) 120.12
squid 426066 ( 2.00%) 201784540 ( 1.39%) 473.60
smtp 261071 ( 1.22%) 112626895 ( 0.78%) 431.40
ftp 49064 ( 0.23%) 10196935 ( 0.07%) 207.83
pop3 19772 ( 0.09%) 6902409 ( 0.05%) 349.10
imap 5431 ( 0.03%) 674820 ( 0.00%) 124.25
telnet 21325 ( 0.10%) 1871309 ( 0.01%) 87.75
ssh 51564 ( 0.24%) 7739000 ( 0.05%) 150.09
dns 3893 ( 0.02%) 420589 ( 0.00%) 108.04
bgp 145 ( 0.00%) 47906 ( 0.00%) 330.39
napster 7 ( 0.00%) 996 ( 0.00%) 142.29
rtsp 271324 ( 1.27%) 73064121 ( 0.50%) 269.29
icecast 628 ( 0.00%) 47433 ( 0.00%) 75.53
hotline 20 ( 0.00%) 2380 ( 0.00%) 119.00
other 3573691 ( 16.74%) 1723614650 ( 11.87%) 482.31
udp 2080143 ( 9.74%) 532697161 ( 3.67%) 256.09
dns 963553 ( 4.51%) 181955593 ( 1.25%) 188.84
realaud 463 ( 0.00%) 32330 ( 0.00%) 69.83
halflif 24 ( 0.00%) 3504 ( 0.00%) 146.00
starcra 85 ( 0.00%) 14183 ( 0.00%) 166.86
everque 968 ( 0.00%) 137845 ( 0.00%) 142.40
unreal 53 ( 0.00%) 11171 ( 0.00%) 210.77
quake 20 ( 0.00%) 2186 ( 0.00%) 109.30
cuseeme 12 ( 0.00%) 2237 ( 0.00%) 186.42
other 1114934 ( 5.22%) 350516018 ( 2.41%) 314.38
icmp 820563 ( 3.84%) 70717496 ( 0.49%) 86.18
igmp 1 ( 0.00%) 83 ( 0.00%) 83.00
ipip 313 ( 0.00%) 39068 ( 0.00%) 124.82
ip6 1682 ( 0.01%) 252071 ( 0.00%) 149.86
other 92182 ( 0.43%) 14868830 ( 0.10%) 161.30
frag 19102 ( 0.09%) 18896665 ( 0.13%) 989.25
ip6 58514 ( 0.27%) 15019707 ( 0.10%) 256.69
tcp6 38480 ( 0.18%) 12142712 ( 0.08%) 315.56
http(s) 7062 ( 0.03%) 9045668 ( 0.06%) 1280.89
http(c) 28930 ( 0.14%) 2710448 ( 0.02%) 93.69
smtp 328 ( 0.00%) 100176 ( 0.00%) 305.41
ftp 47 ( 0.00%) 4310 ( 0.00%) 91.70
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 259 ( 0.00%) 65230 ( 0.00%) 251.85
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 408 ( 0.00%) 37477 ( 0.00%) 91.86
other 1406 ( 0.01%) 175918 ( 0.00%) 125.12
udp6 13583 ( 0.06%) 2007211 ( 0.01%) 147.77
dns 13554 ( 0.06%) 2004003 ( 0.01%) 147.85
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 26 ( 0.00%) 2860 ( 0.00%) 110.00
icmp6 6403 ( 0.03%) 849977 ( 0.01%) 132.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17 ( 0.00%) 15591 ( 0.00%) 917.12
tcpdump file: 200811171400.dump.gz (523.21 MB)