Traffic Trace Info
DumpFile: 200811241400.dump
FileSize: 1221.36MB
Id: 200811241400
StartTime: Mon Nov 24 14:00:01 2008
EndTime: Mon Nov 24 14:15:00 2008
TotalTime: 899.21 seconds
TotalCapSize: 954.61MB CapLen: 96 bytes
# of packets: 17480958 (10464.00MB)
AvgRate: 97.64Mbps stddev:14.71M
IP flow (unique src/dst pair) Information
# of flows: 664744 (avg. 26.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 2.3% 1.9% 1.6% 1.3% 1.1% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 423221
Top 10 bandwidth usage (bytes/total in %):
19.1% 12.2% 8.2% 8.2% 7.8% 3.5% 3.2% 2.9% 2.4% 1.9%
# of IPv6 addresses: 965
Top 10 bandwidth usage (bytes/total in %):
34.9% 33.0% 11.8% 10.3% 8.4% 8.3% 5.4% 5.3% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811241400.pktlen.png)
detailed numbers
[ 32- 63]: 3925194
[ 64- 127]: 4454279
[ 128- 255]: 748600
[ 256- 511]: 434880
[ 512- 1023]: 1799021
[ 1024- 2047]: 6118984
Protocol Breakdown
![[protocol breakdown chart]](200811241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17480958 (100.00%) 10972298079 (100.00%) 627.67
ip 17442105 ( 99.78%) 10967382988 ( 99.96%) 628.79
tcp 14741613 ( 84.33%) 10440122183 ( 95.15%) 708.21
http(s) 7092348 ( 40.57%) 8556326894 ( 77.98%) 1206.42
http(c) 3729598 ( 21.34%) 309984683 ( 2.83%) 83.11
squid 549998 ( 3.15%) 348407903 ( 3.18%) 633.47
smtp 215220 ( 1.23%) 91839511 ( 0.84%) 426.72
nntp 21 ( 0.00%) 1733 ( 0.00%) 82.52
ftp 46931 ( 0.27%) 12616771 ( 0.11%) 268.84
pop3 14646 ( 0.08%) 6149045 ( 0.06%) 419.84
imap 2778 ( 0.02%) 779829 ( 0.01%) 280.72
telnet 60908 ( 0.35%) 4615255 ( 0.04%) 75.77
ssh 625744 ( 3.58%) 111172618 ( 1.01%) 177.66
dns 3938 ( 0.02%) 629464 ( 0.01%) 159.84
bgp 147 ( 0.00%) 41994 ( 0.00%) 285.67
napster 13 ( 0.00%) 1875 ( 0.00%) 144.23
realaud 15 ( 0.00%) 930 ( 0.00%) 62.00
rtsp 42956 ( 0.25%) 56539931 ( 0.52%) 1316.23
icecast 3171 ( 0.02%) 195797 ( 0.00%) 61.75
other 2353177 ( 13.46%) 940817710 ( 8.57%) 399.81
udp 1482973 ( 8.48%) 390999145 ( 3.56%) 263.66
dns 709664 ( 4.06%) 149241044 ( 1.36%) 210.30
realaud 1683 ( 0.01%) 112101 ( 0.00%) 66.61
halflif 181 ( 0.00%) 20459 ( 0.00%) 113.03
starcra 37 ( 0.00%) 6769 ( 0.00%) 182.95
everque 160 ( 0.00%) 32296 ( 0.00%) 201.85
unreal 55 ( 0.00%) 16781 ( 0.00%) 305.11
quake 28 ( 0.00%) 3657 ( 0.00%) 130.61
cuseeme 6 ( 0.00%) 1074 ( 0.00%) 179.00
other 771077 ( 4.41%) 241490188 ( 2.20%) 313.19
icmp 725437 ( 4.15%) 62205284 ( 0.57%) 85.75
ipip 287 ( 0.00%) 33926 ( 0.00%) 118.21
ipsec 14 ( 0.00%) 2372 ( 0.00%) 169.43
ip6 1694 ( 0.01%) 253219 ( 0.00%) 149.48
other 490087 ( 2.80%) 73766859 ( 0.67%) 150.52
frag 21078 ( 0.12%) 21488443 ( 0.20%) 1019.47
ip6 38853 ( 0.22%) 4915091 ( 0.04%) 126.50
tcp6 21453 ( 0.12%) 2558843 ( 0.02%) 119.28
http(s) 389 ( 0.00%) 475804 ( 0.00%) 1223.15
http(c) 19025 ( 0.11%) 1797223 ( 0.02%) 94.47
smtp 207 ( 0.00%) 87053 ( 0.00%) 420.55
ftp 54 ( 0.00%) 4985 ( 0.00%) 92.31
pop3 24 ( 0.00%) 1983 ( 0.00%) 82.62
ssh 111 ( 0.00%) 17226 ( 0.00%) 155.19
bgp 410 ( 0.00%) 37235 ( 0.00%) 90.82
other 1233 ( 0.01%) 137334 ( 0.00%) 111.38
udp6 10665 ( 0.06%) 1489915 ( 0.01%) 139.70
dns 10607 ( 0.06%) 1483535 ( 0.01%) 139.86
other 58 ( 0.00%) 6380 ( 0.00%) 110.00
icmp6 6702 ( 0.04%) 859938 ( 0.01%) 128.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 2315 ( 0.00%) 771.67
tcpdump file: 200811241400.dump.gz (424.49 MB)