Traffic Trace Info
DumpFile: 200811191400.dump
FileSize: 1371.72MB
Id: 200811191400
StartTime: Wed Nov 19 14:00:00 2008
EndTime: Wed Nov 19 14:15:01 2008
TotalTime: 900.94 seconds
TotalCapSize: 1071.53MB CapLen: 96 bytes
# of packets: 19672329 (13701.49MB)
AvgRate: 127.59Mbps stddev:17.35M
IP flow (unique src/dst pair) Information
# of flows: 519449 (avg. 37.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.7% 1.4% 1.2% 1.2% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 299318
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.8% 7.4% 7.0% 5.7% 2.8% 2.7% 2.5% 2.3% 2.2%
# of IPv6 addresses: 1035
Top 10 bandwidth usage (bytes/total in %):
83.5% 83.5% 13.8% 4.7% 4.6% 4.5% 0.7% 0.7% 0.4% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811191400.pktlen.png)
detailed numbers
[ 32- 63]: 4272210
[ 64- 127]: 4779779
[ 128- 255]: 751440
[ 256- 511]: 459387
[ 512- 1023]: 460806
[ 1024- 2047]: 8948707
Protocol Breakdown
![[protocol breakdown chart]](200811191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19672329 (100.00%) 14367051718 (100.00%) 730.32
ip 19456430 ( 98.90%) 14121293818 ( 98.29%) 725.79
tcp 16382896 ( 83.28%) 13421424230 ( 93.42%) 819.23
http(s) 7331597 ( 37.27%) 9916351708 ( 69.02%) 1352.55
http(c) 4134339 ( 21.02%) 551666236 ( 3.84%) 133.44
squid 591703 ( 3.01%) 381305042 ( 2.65%) 644.42
smtp 291625 ( 1.48%) 127851786 ( 0.89%) 438.41
ftp 58203 ( 0.30%) 21736725 ( 0.15%) 373.46
pop3 18517 ( 0.09%) 4421878 ( 0.03%) 238.80
imap 38397 ( 0.20%) 3030313 ( 0.02%) 78.92
telnet 2825 ( 0.01%) 536673 ( 0.00%) 189.97
ssh 65632 ( 0.33%) 24215974 ( 0.17%) 368.97
dns 4744 ( 0.02%) 476322 ( 0.00%) 100.41
bgp 412 ( 0.00%) 263806 ( 0.00%) 640.31
napster 47 ( 0.00%) 7877 ( 0.00%) 167.60
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 210146 ( 1.07%) 133404259 ( 0.93%) 634.82
icecast 23761 ( 0.12%) 23184443 ( 0.16%) 975.74
other 3610947 ( 18.36%) 2232971128 ( 15.54%) 618.39
udp 2466479 ( 12.54%) 636414694 ( 4.43%) 258.03
dns 825452 ( 4.20%) 174444646 ( 1.21%) 211.33
realaud 24 ( 0.00%) 3823 ( 0.00%) 159.29
halflif 17 ( 0.00%) 1999 ( 0.00%) 117.59
starcra 47 ( 0.00%) 9365 ( 0.00%) 199.26
everque 83 ( 0.00%) 12838 ( 0.00%) 154.67
unreal 127 ( 0.00%) 41978 ( 0.00%) 330.54
quake 22 ( 0.00%) 2702 ( 0.00%) 122.82
cuseeme 8 ( 0.00%) 1016 ( 0.00%) 127.00
other 1639220 ( 8.33%) 461743666 ( 3.21%) 281.68
icmp 452061 ( 2.30%) 42739011 ( 0.30%) 94.54
ipip 305 ( 0.00%) 38324 ( 0.00%) 125.65
ipsec 8 ( 0.00%) 1264 ( 0.00%) 158.00
ip6 1017 ( 0.01%) 125783 ( 0.00%) 123.68
other 153664 ( 0.78%) 20550512 ( 0.14%) 133.74
frag 29877 ( 0.15%) 28888872 ( 0.20%) 966.93
ip6 215899 ( 1.10%) 245757900 ( 1.71%) 1138.30
tcp6 196821 ( 1.00%) 242909745 ( 1.69%) 1234.17
http(s) 531 ( 0.00%) 753140 ( 0.01%) 1418.34
http(c) 19518 ( 0.10%) 1830098 ( 0.01%) 93.76
smtp 26544 ( 0.13%) 33931010 ( 0.24%) 1278.29
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 292 ( 0.00%) 41832 ( 0.00%) 143.26
dns 31 ( 0.00%) 7550 ( 0.00%) 243.55
bgp 409 ( 0.00%) 40774 ( 0.00%) 99.69
other 149427 ( 0.76%) 206299183 ( 1.44%) 1380.60
udp6 13310 ( 0.07%) 2037778 ( 0.01%) 153.10
dns 13254 ( 0.07%) 2031589 ( 0.01%) 153.28
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 55 ( 0.00%) 6079 ( 0.00%) 110.53
icmp6 5700 ( 0.03%) 760579 ( 0.01%) 133.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 45718 ( 0.00%) 1203.11
tcpdump file: 200811191400.dump.gz (482.39 MB)