Traffic Trace Info
DumpFile: 200811211400.dump
FileSize: 1611.94MB
Id: 200811211400
StartTime: Fri Nov 21 14:00:01 2008
EndTime: Fri Nov 21 14:15:01 2008
TotalTime: 900.14 seconds
TotalCapSize: 1258.89MB CapLen: 96 bytes
# of packets: 23136906 (16950.91MB)
AvgRate: 157.93Mbps stddev:19.15M
IP flow (unique src/dst pair) Information
# of flows: 494772 (avg. 46.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.9% 1.7% 1.7% 1.5% 1.5% 1.5% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 277993
Top 10 bandwidth usage (bytes/total in %):
12.4% 10.3% 5.4% 5.2% 5.1% 5.1% 5.0% 4.6% 4.0% 4.0%
# of IPv6 addresses: 1031
Top 10 bandwidth usage (bytes/total in %):
34.2% 31.5% 11.8% 9.4% 5.2% 4.5% 3.5% 3.4% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811211400.pktlen.png)
detailed numbers
[ 32- 63]: 4716972
[ 64- 127]: 5430407
[ 128- 255]: 719863
[ 256- 511]: 441342
[ 512- 1023]: 725763
[ 1024- 2047]: 11102559
Protocol Breakdown
![[protocol breakdown chart]](200811211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23136906 (100.00%) 17774314400 (100.00%) 768.22
ip 23095654 ( 99.82%) 17769227652 ( 99.97%) 769.38
tcp 19386022 ( 83.79%) 16696235744 ( 93.93%) 861.25
http(s) 7691993 ( 33.25%) 10417968364 ( 58.61%) 1354.39
http(c) 4396625 ( 19.00%) 415928798 ( 2.34%) 94.60
squid 508086 ( 2.20%) 319658431 ( 1.80%) 629.14
smtp 216373 ( 0.94%) 106726444 ( 0.60%) 493.25
nntp 83454 ( 0.36%) 88579907 ( 0.50%) 1061.42
ftp 47531 ( 0.21%) 8426233 ( 0.05%) 177.28
pop3 25514 ( 0.11%) 9294372 ( 0.05%) 364.29
imap 5552 ( 0.02%) 994828 ( 0.01%) 179.18
telnet 826 ( 0.00%) 66571 ( 0.00%) 80.59
ssh 230885 ( 1.00%) 110682339 ( 0.62%) 479.38
dns 3833 ( 0.02%) 424925 ( 0.00%) 110.86
bgp 146 ( 0.00%) 45935 ( 0.00%) 314.62
napster 15 ( 0.00%) 1598 ( 0.00%) 106.53
realaud 22 ( 0.00%) 3017 ( 0.00%) 137.14
rtsp 160963 ( 0.70%) 194803743 ( 1.10%) 1210.24
icecast 1128 ( 0.00%) 386385 ( 0.00%) 342.54
hotline 167 ( 0.00%) 155030 ( 0.00%) 928.32
other 6012908 ( 25.99%) 5022088764 ( 28.25%) 835.22
udp 2414132 ( 10.43%) 941813535 ( 5.30%) 390.13
dns 674636 ( 2.92%) 148102609 ( 0.83%) 219.53
realaud 1877 ( 0.01%) 114458 ( 0.00%) 60.98
halflif 36 ( 0.00%) 4554 ( 0.00%) 126.50
starcra 32 ( 0.00%) 4633 ( 0.00%) 144.78
everque 152 ( 0.00%) 20071 ( 0.00%) 132.05
unreal 76 ( 0.00%) 23672 ( 0.00%) 311.47
quake 11 ( 0.00%) 1641 ( 0.00%) 149.18
cuseeme 9 ( 0.00%) 1349 ( 0.00%) 149.89
other 1737228 ( 7.51%) 793506441 ( 4.46%) 456.77
icmp 816526 ( 3.53%) 66222651 ( 0.37%) 81.10
ipip 329 ( 0.00%) 41960 ( 0.00%) 127.54
ipsec 4 ( 0.00%) 792 ( 0.00%) 198.00
ip6 1068 ( 0.00%) 136535 ( 0.00%) 127.84
other 477573 ( 2.06%) 64776435 ( 0.36%) 135.64
frag 20141 ( 0.09%) 19764331 ( 0.11%) 981.30
ip6 41252 ( 0.18%) 5086748 ( 0.03%) 123.31
tcp6 22229 ( 0.10%) 2396381 ( 0.01%) 107.80
http(s) 17 ( 0.00%) 9201 ( 0.00%) 541.24
http(c) 19428 ( 0.08%) 1841896 ( 0.01%) 94.81
smtp 832 ( 0.00%) 335341 ( 0.00%) 403.05
ftp 59 ( 0.00%) 5354 ( 0.00%) 90.75
pop3 33 ( 0.00%) 2850 ( 0.00%) 86.36
ssh 165 ( 0.00%) 25726 ( 0.00%) 155.92
bgp 408 ( 0.00%) 37549 ( 0.00%) 92.03
other 1287 ( 0.01%) 138464 ( 0.00%) 107.59
udp6 12318 ( 0.05%) 1809647 ( 0.01%) 146.91
dns 12268 ( 0.05%) 1804142 ( 0.01%) 147.06
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 231 ( 0.00%) 115.50
other 46 ( 0.00%) 5060 ( 0.00%) 110.00
icmp6 6672 ( 0.03%) 874325 ( 0.00%) 131.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2315 ( 0.00%) 771.67
tcpdump file: 200811211400.dump.gz (551.90 MB)