Traffic Trace Info
DumpFile: 200811181400.dump
FileSize: 1775.39MB
Id: 200811181400
StartTime: Tue Nov 18 14:00:01 2008
EndTime: Tue Nov 18 14:15:01 2008
TotalTime: 900.10 seconds
TotalCapSize: 1385.22MB CapLen: 96 bytes
# of packets: 25569119 (18924.19MB)
AvgRate: 176.37Mbps stddev:23.90M
IP flow (unique src/dst pair) Information
# of flows: 672183 (avg. 38.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.9% 2.8% 2.1% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 402402
Top 10 bandwidth usage (bytes/total in %):
14.9% 6.4% 5.1% 4.4% 4.3% 4.0% 3.2% 2.9% 2.8% 2.8%
# of IPv6 addresses: 1018
Top 10 bandwidth usage (bytes/total in %):
29.0% 26.6% 11.3% 10.7% 6.7% 6.4% 5.4% 5.3% 5.3% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811181400.pktlen.png)
detailed numbers
[ 32- 63]: 6180576
[ 64- 127]: 4929030
[ 128- 255]: 780428
[ 256- 511]: 578133
[ 512- 1023]: 609783
[ 1024- 2047]: 12491169
Protocol Breakdown
![[protocol breakdown chart]](200811181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25569119 (100.00%) 19843453544 (100.00%) 776.07
ip 25526872 ( 99.83%) 19837388574 ( 99.97%) 777.12
tcp 21700518 ( 84.87%) 18452451290 ( 92.99%) 850.32
http(s) 10373181 ( 40.57%) 14202101166 ( 71.57%) 1369.12
http(c) 5850166 ( 22.88%) 745076998 ( 3.75%) 127.36
squid 429588 ( 1.68%) 142528749 ( 0.72%) 331.78
smtp 333528 ( 1.30%) 165515128 ( 0.83%) 496.26
ftp 70301 ( 0.27%) 10685851 ( 0.05%) 152.00
pop3 29633 ( 0.12%) 10483439 ( 0.05%) 353.78
imap 2952 ( 0.01%) 454538 ( 0.00%) 153.98
telnet 456 ( 0.00%) 39456 ( 0.00%) 86.53
ssh 167086 ( 0.65%) 125245836 ( 0.63%) 749.59
dns 4111 ( 0.02%) 416837 ( 0.00%) 101.40
bgp 166 ( 0.00%) 68542 ( 0.00%) 412.90
napster 25 ( 0.00%) 2530 ( 0.00%) 101.20
realaud 13 ( 0.00%) 1239 ( 0.00%) 95.31
rtsp 271546 ( 1.06%) 178387286 ( 0.90%) 656.93
icecast 4156 ( 0.02%) 4032474 ( 0.02%) 970.28
other 4163603 ( 16.28%) 2867410801 ( 14.45%) 688.68
udp 2858119 ( 11.18%) 1297745675 ( 6.54%) 454.06
dns 797764 ( 3.12%) 173794611 ( 0.88%) 217.85
realaud 1826 ( 0.01%) 110925 ( 0.00%) 60.75
halflif 24 ( 0.00%) 3594 ( 0.00%) 149.75
starcra 94 ( 0.00%) 16029 ( 0.00%) 170.52
everque 189 ( 0.00%) 52890 ( 0.00%) 279.84
unreal 66 ( 0.00%) 16504 ( 0.00%) 250.06
quake 25 ( 0.00%) 3838 ( 0.00%) 153.52
cuseeme 9 ( 0.00%) 1254 ( 0.00%) 139.33
other 2057986 ( 8.05%) 1123706497 ( 5.66%) 546.02
icmp 821220 ( 3.21%) 67813028 ( 0.34%) 82.58
ipip 290 ( 0.00%) 36832 ( 0.00%) 127.01
ipsec 12 ( 0.00%) 2080 ( 0.00%) 173.33
ip6 1066 ( 0.00%) 129591 ( 0.00%) 121.57
other 145647 ( 0.57%) 19210078 ( 0.10%) 131.89
frag 202747 ( 0.79%) 157724893 ( 0.79%) 777.94
ip6 42247 ( 0.17%) 6064970 ( 0.03%) 143.56
tcp6 22718 ( 0.09%) 3249560 ( 0.02%) 143.04
http(s) 720 ( 0.00%) 971956 ( 0.00%) 1349.94
http(c) 19533 ( 0.08%) 1838762 ( 0.01%) 94.14
smtp 559 ( 0.00%) 227789 ( 0.00%) 407.49
ftp 39 ( 0.00%) 3574 ( 0.00%) 91.64
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 137 ( 0.00%) 31326 ( 0.00%) 228.66
bgp 412 ( 0.00%) 38779 ( 0.00%) 94.12
other 1285 ( 0.01%) 134524 ( 0.00%) 104.69
udp6 13431 ( 0.05%) 1976269 ( 0.01%) 147.14
dns 13401 ( 0.05%) 1972969 ( 0.01%) 147.23
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 29 ( 0.00%) 3190 ( 0.00%) 110.00
icmp6 6061 ( 0.02%) 829849 ( 0.00%) 136.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5076 ( 0.00%) 846.00
tcpdump file: 200811181400.dump.gz (605.76 MB)