Traffic Trace Info
DumpFile: 200811221400.dump
FileSize: 1286.21MB
Id: 200811221400
StartTime: Sat Nov 22 14:00:01 2008
EndTime: Sat Nov 22 14:15:00 2008
TotalTime: 899.48 seconds
TotalCapSize: 1010.22MB CapLen: 96 bytes
# of packets: 18086610 (13305.99MB)
AvgRate: 124.11Mbps stddev:15.80M
IP flow (unique src/dst pair) Information
# of flows: 601345 (avg. 30.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.8% 2.4% 2.3% 2.1% 2.1% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 334564
Top 10 bandwidth usage (bytes/total in %):
13.3% 5.9% 5.8% 4.3% 4.1% 4.1% 3.6% 2.9% 2.8% 2.6%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
38.0% 35.3% 11.8% 11.1% 5.3% 5.1% 3.5% 2.3% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811221400.pktlen.png)
detailed numbers
[ 32- 63]: 2996545
[ 64- 127]: 4505853
[ 128- 255]: 854927
[ 256- 511]: 477340
[ 512- 1023]: 508314
[ 1024- 2047]: 8743631
Protocol Breakdown
![[protocol breakdown chart]](200811221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18086610 (100.00%) 13952341657 (100.00%) 771.42
ip 18047768 ( 99.79%) 13947731212 ( 99.97%) 772.82
tcp 15204622 ( 84.07%) 13060350729 ( 93.61%) 858.97
http(s) 6524715 ( 36.07%) 8727702901 ( 62.55%) 1337.64
http(c) 2967854 ( 16.41%) 286266770 ( 2.05%) 96.46
squid 553947 ( 3.06%) 287550227 ( 2.06%) 519.09
smtp 233125 ( 1.29%) 74892692 ( 0.54%) 321.26
nntp 25 ( 0.00%) 3154 ( 0.00%) 126.16
ftp 196856 ( 1.09%) 154723177 ( 1.11%) 785.97
pop3 15060 ( 0.08%) 4894702 ( 0.04%) 325.01
imap 3391 ( 0.02%) 610174 ( 0.00%) 179.94
telnet 2889 ( 0.02%) 275671 ( 0.00%) 95.42
ssh 99935 ( 0.55%) 17193415 ( 0.12%) 172.05
dns 3504 ( 0.02%) 371858 ( 0.00%) 106.12
bgp 149 ( 0.00%) 53318 ( 0.00%) 357.84
napster 31 ( 0.00%) 3834 ( 0.00%) 123.68
realaud 7 ( 0.00%) 631 ( 0.00%) 90.14
rtsp 224177 ( 1.24%) 181311070 ( 1.30%) 808.79
icecast 3562 ( 0.02%) 2539806 ( 0.02%) 713.03
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 4375391 ( 24.19%) 3321957087 ( 23.81%) 759.24
udp 1963335 ( 10.86%) 793196901 ( 5.69%) 404.00
dns 648033 ( 3.58%) 132683035 ( 0.95%) 204.75
realaud 2741 ( 0.02%) 165436 ( 0.00%) 60.36
halflif 26 ( 0.00%) 3960 ( 0.00%) 152.31
starcra 68 ( 0.00%) 10747 ( 0.00%) 158.04
everque 262 ( 0.00%) 34175 ( 0.00%) 130.44
unreal 55 ( 0.00%) 20165 ( 0.00%) 366.64
quake 16 ( 0.00%) 1410 ( 0.00%) 88.12
cuseeme 6 ( 0.00%) 835 ( 0.00%) 139.17
other 1311955 ( 7.25%) 660241544 ( 4.73%) 503.25
icmp 552101 ( 3.05%) 48118667 ( 0.34%) 87.16
ipip 329 ( 0.00%) 40010 ( 0.00%) 121.61
ipsec 14 ( 0.00%) 2372 ( 0.00%) 169.43
ip6 1077 ( 0.01%) 132831 ( 0.00%) 123.33
other 326290 ( 1.80%) 45889702 ( 0.33%) 140.64
frag 25966 ( 0.14%) 23917595 ( 0.17%) 921.11
ip6 38842 ( 0.21%) 4610445 ( 0.03%) 118.70
tcp6 21785 ( 0.12%) 2277083 ( 0.02%) 104.53
http(c) 19286 ( 0.11%) 1814247 ( 0.01%) 94.07
smtp 561 ( 0.00%) 202031 ( 0.00%) 360.13
ftp 74 ( 0.00%) 6805 ( 0.00%) 91.96
pop3 33 ( 0.00%) 2914 ( 0.00%) 88.30
ssh 151 ( 0.00%) 62634 ( 0.00%) 414.79
bgp 415 ( 0.00%) 40235 ( 0.00%) 96.95
other 1265 ( 0.01%) 148217 ( 0.00%) 117.17
udp6 10273 ( 0.06%) 1452067 ( 0.01%) 141.35
dns 10221 ( 0.06%) 1446287 ( 0.01%) 141.50
everque 3 ( 0.00%) 353 ( 0.00%) 117.67
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 47 ( 0.00%) 5203 ( 0.00%) 110.70
icmp6 6748 ( 0.04%) 870450 ( 0.01%) 128.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 6765 ( 0.00%) 1127.50
tcpdump file: 200811221400.dump.gz (442.49 MB)