Traffic Trace Info
DumpFile: 200811271400.dump
FileSize: 2314.95MB
Id: 200811271400
StartTime: Thu Nov 27 14:00:01 2008
EndTime: Thu Nov 27 14:15:01 2008
TotalTime: 899.39 seconds
TotalCapSize: 1806.00MB CapLen: 96 bytes
# of packets: 33353364 (23191.02MB)
AvgRate: 216.30Mbps stddev:18.02M
IP flow (unique src/dst pair) Information
# of flows: 580377 (avg. 57.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.9% 1.3% 1.1% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 340886
Top 10 bandwidth usage (bytes/total in %):
21.9% 15.5% 5.3% 3.5% 3.4% 3.2% 3.1% 2.7% 2.6% 1.9%
# of IPv6 addresses: 976
Top 10 bandwidth usage (bytes/total in %):
32.9% 30.3% 10.8% 7.8% 6.4% 6.4% 5.2% 3.8% 3.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811271400.pktlen.png)
detailed numbers
[ 32- 63]: 8832284
[ 64- 127]: 6789481
[ 128- 255]: 1076956
[ 256- 511]: 729704
[ 512- 1023]: 816228
[ 1024- 2047]: 15108711
Protocol Breakdown
![[protocol breakdown chart]](200811271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33353364 (100.00%) 24317544934 (100.00%) 729.09
ip 33313037 ( 99.88%) 24312158021 ( 99.98%) 729.81
tcp 29108380 ( 87.27%) 22943811377 ( 94.35%) 788.22
http(s) 12202700 ( 36.59%) 16855830272 ( 69.32%) 1381.32
http(c) 7968027 ( 23.89%) 706691269 ( 2.91%) 88.69
squid 414192 ( 1.24%) 213198643 ( 0.88%) 514.73
smtp 285059 ( 0.85%) 155346434 ( 0.64%) 544.96
nntp 43 ( 0.00%) 5422 ( 0.00%) 126.09
ftp 201443 ( 0.60%) 153010306 ( 0.63%) 759.57
pop3 24515 ( 0.07%) 9242166 ( 0.04%) 377.00
imap 4968 ( 0.01%) 1284061 ( 0.01%) 258.47
telnet 3050 ( 0.01%) 432390 ( 0.00%) 141.77
ssh 560138 ( 1.68%) 81848299 ( 0.34%) 146.12
dns 17433 ( 0.05%) 5332866 ( 0.02%) 305.91
bgp 144 ( 0.00%) 55344 ( 0.00%) 384.33
napster 365 ( 0.00%) 250031 ( 0.00%) 685.02
realaud 5 ( 0.00%) 355 ( 0.00%) 71.00
rtsp 250646 ( 0.75%) 45026193 ( 0.19%) 179.64
icecast 949 ( 0.00%) 110319 ( 0.00%) 116.25
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 7174700 ( 21.51%) 4716146823 ( 19.39%) 657.33
udp 2676630 ( 8.03%) 1019259387 ( 4.19%) 380.80
dns 987322 ( 2.96%) 208928768 ( 0.86%) 211.61
realaud 2903 ( 0.01%) 240622 ( 0.00%) 82.89
halflif 23 ( 0.00%) 2037 ( 0.00%) 88.57
starcra 33 ( 0.00%) 5872 ( 0.00%) 177.94
everque 86 ( 0.00%) 12284 ( 0.00%) 142.84
unreal 50 ( 0.00%) 13763 ( 0.00%) 275.26
quake 16 ( 0.00%) 1645 ( 0.00%) 102.81
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 1684409 ( 5.05%) 807679764 ( 3.32%) 479.50
icmp 673022 ( 2.02%) 56998086 ( 0.23%) 84.69
ipip 320 ( 0.00%) 38772 ( 0.00%) 121.16
ipsec 416647 ( 1.25%) 221320314 ( 0.91%) 531.19
ip6 7087 ( 0.02%) 7342591 ( 0.03%) 1036.06
other 430951 ( 1.29%) 63387494 ( 0.26%) 147.09
frag 52475 ( 0.16%) 55620055 ( 0.23%) 1059.93
ip6 40327 ( 0.12%) 5386913 ( 0.02%) 133.58
tcp6 22906 ( 0.07%) 2841552 ( 0.01%) 124.05
http(s) 398 ( 0.00%) 539843 ( 0.00%) 1356.39
http(c) 19668 ( 0.06%) 1844183 ( 0.01%) 93.77
smtp 597 ( 0.00%) 178962 ( 0.00%) 299.77
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 385 ( 0.00%) 83390 ( 0.00%) 216.60
bgp 412 ( 0.00%) 39331 ( 0.00%) 95.46
other 1380 ( 0.00%) 149931 ( 0.00%) 108.65
udp6 11939 ( 0.04%) 1723474 ( 0.01%) 144.36
dns 11903 ( 0.04%) 1719514 ( 0.01%) 144.46
other 36 ( 0.00%) 3960 ( 0.00%) 110.00
icmp6 5450 ( 0.02%) 815552 ( 0.00%) 149.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 2255 ( 0.00%) 1127.50
tcpdump file: 200811271400.dump.gz (812.20 MB)