Traffic Trace Info
DumpFile: 200811281400.dump
FileSize: 1996.23MB
Id: 200811281400
StartTime: Fri Nov 28 14:00:00 2008
EndTime: Fri Nov 28 14:15:00 2008
TotalTime: 899.91 seconds
TotalCapSize: 1557.46MB CapLen: 96 bytes
# of packets: 28754274 (20789.39MB)
AvgRate: 193.82Mbps stddev:15.15M
IP flow (unique src/dst pair) Information
# of flows: 674329 (avg. 42.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 3.3% 2.4% 2.1% 1.4% 1.4% 1.3% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 434893
Top 10 bandwidth usage (bytes/total in %):
18.1% 16.0% 8.3% 6.0% 4.5% 3.5% 3.4% 3.4% 2.5% 2.1%
# of IPv6 addresses: 979
Top 10 bandwidth usage (bytes/total in %):
30.2% 28.1% 18.2% 18.1% 9.3% 6.5% 4.2% 3.5% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811281400.pktlen.png)
detailed numbers
[ 32- 63]: 7885843
[ 64- 127]: 5216491
[ 128- 255]: 728995
[ 256- 511]: 602716
[ 512- 1023]: 749753
[ 1024- 2047]: 13570476
Protocol Breakdown
![[protocol breakdown chart]](200811281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28754274 (100.00%) 21799253941 (100.00%) 758.12
ip 28701671 ( 99.82%) 21793425967 ( 99.97%) 759.31
tcp 26081660 ( 90.71%) 21090414093 ( 96.75%) 808.63
http(s) 10300194 ( 35.82%) 14206002693 ( 65.17%) 1379.20
http(c) 7635479 ( 26.55%) 932385437 ( 4.28%) 122.11
squid 508943 ( 1.77%) 291942932 ( 1.34%) 573.63
smtp 212607 ( 0.74%) 75790213 ( 0.35%) 356.48
ftp 380382 ( 1.32%) 496055164 ( 2.28%) 1304.10
pop3 21025 ( 0.07%) 4166137 ( 0.02%) 198.15
imap 69587 ( 0.24%) 5488949 ( 0.03%) 78.88
telnet 1550 ( 0.01%) 178355 ( 0.00%) 115.07
ssh 100937 ( 0.35%) 9732420 ( 0.04%) 96.42
dns 10083 ( 0.04%) 1239149 ( 0.01%) 122.89
bgp 154 ( 0.00%) 55307 ( 0.00%) 359.14
napster 147 ( 0.00%) 58135 ( 0.00%) 395.48
realaud 174 ( 0.00%) 20737 ( 0.00%) 119.18
rtsp 240006 ( 0.83%) 128116884 ( 0.59%) 533.81
icecast 25813 ( 0.09%) 20222046 ( 0.09%) 783.41
other 6574577 ( 22.86%) 4918959415 ( 22.56%) 748.18
udp 1792970 ( 6.24%) 608927138 ( 2.79%) 339.62
dns 833821 ( 2.90%) 182898641 ( 0.84%) 219.35
realaud 6706 ( 0.02%) 467074 ( 0.00%) 69.65
halflif 22 ( 0.00%) 2117 ( 0.00%) 96.23
starcra 88 ( 0.00%) 15240 ( 0.00%) 173.18
everque 80 ( 0.00%) 14964 ( 0.00%) 187.05
unreal 45 ( 0.00%) 11481 ( 0.00%) 255.13
quake 29 ( 0.00%) 3904 ( 0.00%) 134.62
cuseeme 2 ( 0.00%) 160 ( 0.00%) 80.00
other 950161 ( 3.30%) 422787877 ( 1.94%) 444.96
icmp 443786 ( 1.54%) 40391346 ( 0.19%) 91.02
ipip 304 ( 0.00%) 36764 ( 0.00%) 120.93
ipsec 4 ( 0.00%) 632 ( 0.00%) 158.00
ip6 1116 ( 0.00%) 135902 ( 0.00%) 121.78
other 381831 ( 1.33%) 53520092 ( 0.25%) 140.17
frag 45294 ( 0.16%) 50263881 ( 0.23%) 1109.72
ip6 52603 ( 0.18%) 5827974 ( 0.03%) 110.79
tcp6 36267 ( 0.13%) 3577548 ( 0.02%) 98.64
http(s) 298 ( 0.00%) 290977 ( 0.00%) 976.43
http(c) 33355 ( 0.12%) 2849887 ( 0.01%) 85.44
smtp 385 ( 0.00%) 130556 ( 0.00%) 339.11
ftp 37 ( 0.00%) 3394 ( 0.00%) 91.73
pop3 29 ( 0.00%) 2522 ( 0.00%) 86.97
ssh 325 ( 0.00%) 94506 ( 0.00%) 290.79
bgp 408 ( 0.00%) 37599 ( 0.00%) 92.15
other 1430 ( 0.00%) 168107 ( 0.00%) 117.56
udp6 11068 ( 0.04%) 1579358 ( 0.01%) 142.70
dns 11016 ( 0.04%) 1573644 ( 0.01%) 142.85
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 51 ( 0.00%) 5610 ( 0.00%) 110.00
icmp6 5232 ( 0.02%) 663108 ( 0.00%) 126.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 3880 ( 0.00%) 646.67
tcpdump file: 200811281400.dump.gz (694.20 MB)