Traffic Trace Info
DumpFile: 200811261400.dump
FileSize: 1560.02MB
Id: 200811261400
StartTime: Wed Nov 26 14:00:01 2008
EndTime: Wed Nov 26 14:15:01 2008
TotalTime: 900.01 seconds
TotalCapSize: 1224.67MB CapLen: 96 bytes
# of packets: 21976399 (15061.49MB)
AvgRate: 140.39Mbps stddev:15.00M
IP flow (unique src/dst pair) Information
# of flows: 641231 (avg. 34.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.6% 1.6% 1.3% 1.3% 1.3% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 366730
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.1% 5.9% 5.3% 3.6% 3.3% 3.3% 2.8% 2.7% 2.6%
# of IPv6 addresses: 1060
Top 10 bandwidth usage (bytes/total in %):
97.0% 96.9% 0.8% 0.8% 0.3% 0.3% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811261400.pktlen.png)
detailed numbers
[ 32- 63]: 4873991
[ 64- 127]: 5267651
[ 128- 255]: 904335
[ 256- 511]: 605043
[ 512- 1023]: 574172
[ 1024- 2047]: 9751207
Protocol Breakdown
![[protocol breakdown chart]](200811261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21976399 (100.00%) 15793113836 (100.00%) 718.64
ip 21794560 ( 99.17%) 15584563271 ( 98.68%) 715.07
tcp 19271017 ( 87.69%) 14908367610 ( 94.40%) 773.62
http(s) 7179124 ( 32.67%) 9615444091 ( 60.88%) 1339.36
http(c) 4780165 ( 21.75%) 488560288 ( 3.09%) 102.21
squid 477948 ( 2.17%) 326584029 ( 2.07%) 683.30
smtp 280601 ( 1.28%) 91196751 ( 0.58%) 325.01
nntp 45 ( 0.00%) 4411 ( 0.00%) 98.02
ftp 41062 ( 0.19%) 7876831 ( 0.05%) 191.83
pop3 24137 ( 0.11%) 4970060 ( 0.03%) 205.91
imap 12077 ( 0.05%) 10873710 ( 0.07%) 900.37
telnet 3012 ( 0.01%) 412507 ( 0.00%) 136.95
ssh 596972 ( 2.72%) 72714786 ( 0.46%) 121.81
dns 47023 ( 0.21%) 49617502 ( 0.31%) 1055.18
bgp 145 ( 0.00%) 55343 ( 0.00%) 381.68
napster 19 ( 0.00%) 1584 ( 0.00%) 83.37
realaud 28 ( 0.00%) 2167 ( 0.00%) 77.39
rtsp 173709 ( 0.79%) 160397360 ( 1.02%) 923.37
icecast 9538 ( 0.04%) 7952065 ( 0.05%) 833.72
hotline 8 ( 0.00%) 1418 ( 0.00%) 177.25
other 5645404 ( 25.69%) 4071702707 ( 25.78%) 721.24
udp 1959031 ( 8.91%) 613052085 ( 3.88%) 312.94
dns 937268 ( 4.26%) 210856896 ( 1.34%) 224.97
realaud 13 ( 0.00%) 1004 ( 0.00%) 77.23
halflif 30 ( 0.00%) 2873 ( 0.00%) 95.77
starcra 53 ( 0.00%) 9992 ( 0.00%) 188.53
everque 72 ( 0.00%) 10367 ( 0.00%) 143.99
unreal 61 ( 0.00%) 21634 ( 0.00%) 354.66
quake 15 ( 0.00%) 3738 ( 0.00%) 249.20
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 1021171 ( 4.65%) 401953651 ( 2.55%) 393.62
icmp 360514 ( 1.64%) 36625959 ( 0.23%) 101.59
ipip 321 ( 0.00%) 40296 ( 0.00%) 125.53
ipsec 12 ( 0.00%) 2056 ( 0.00%) 171.33
ip6 1053 ( 0.00%) 130168 ( 0.00%) 123.62
other 202612 ( 0.92%) 26345097 ( 0.17%) 130.03
frag 48423 ( 0.22%) 53412078 ( 0.34%) 1103.03
ip6 181839 ( 0.83%) 208550565 ( 1.32%) 1146.90
tcp6 162813 ( 0.74%) 205726454 ( 1.30%) 1263.58
http(s) 407 ( 0.00%) 531457 ( 0.00%) 1305.79
http(c) 19774 ( 0.09%) 1862211 ( 0.01%) 94.17
smtp 856 ( 0.00%) 280564 ( 0.00%) 327.76
ftp 27 ( 0.00%) 2435 ( 0.00%) 90.19
pop3 57 ( 0.00%) 4833 ( 0.00%) 84.79
ssh 145 ( 0.00%) 33782 ( 0.00%) 232.98
bgp 419 ( 0.00%) 40407 ( 0.00%) 96.44
other 141128 ( 0.64%) 202970765 ( 1.29%) 1438.20
udp6 12853 ( 0.06%) 1891459 ( 0.01%) 147.16
dns 12822 ( 0.06%) 1888029 ( 0.01%) 147.25
realaud 2 ( 0.00%) 231 ( 0.00%) 115.50
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 28 ( 0.00%) 3080 ( 0.00%) 110.00
icmp6 6143 ( 0.03%) 928572 ( 0.01%) 151.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200811261400.dump.gz (547.47 MB)