Traffic Trace Info
DumpFile: 200811291400.dump
FileSize: 1493.34MB
Id: 200811291400
StartTime: Sat Nov 29 14:00:00 2008
EndTime: Sat Nov 29 14:15:00 2008
TotalTime: 900.13 seconds
TotalCapSize: 1162.71MB CapLen: 96 bytes
# of packets: 21667404 (14732.79MB)
AvgRate: 137.29Mbps stddev:13.41M
IP flow (unique src/dst pair) Information
# of flows: 596562 (avg. 36.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.0% 1.6% 1.6% 1.5% 1.5% 1.4% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 370173
Top 10 bandwidth usage (bytes/total in %):
23.2% 22.0% 5.4% 5.1% 4.7% 3.6% 2.4% 2.2% 2.1% 2.0%
# of IPv6 addresses: 933
Top 10 bandwidth usage (bytes/total in %):
60.8% 60.8% 12.5% 11.3% 10.6% 9.9% 3.2% 1.4% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811291400.pktlen.png)
detailed numbers
[ 32- 63]: 6733820
[ 64- 127]: 3703762
[ 128- 255]: 761122
[ 256- 511]: 431628
[ 512- 1023]: 375864
[ 1024- 2047]: 9661208
Protocol Breakdown
![[protocol breakdown chart]](200811291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21667404 (100.00%) 15448450630 (100.00%) 712.98
ip 21522186 ( 99.33%) 15432991638 ( 99.90%) 717.07
tcp 18891418 ( 87.19%) 14819829500 ( 95.93%) 784.47
http(s) 8201908 ( 37.85%) 11430950186 ( 73.99%) 1393.69
http(c) 5119221 ( 23.63%) 442085375 ( 2.86%) 86.36
squid 535358 ( 2.47%) 383975969 ( 2.49%) 717.23
smtp 200880 ( 0.93%) 70933998 ( 0.46%) 353.12
ftp 148077 ( 0.68%) 94657984 ( 0.61%) 639.25
pop3 30780 ( 0.14%) 7220958 ( 0.05%) 234.60
imap 4159 ( 0.02%) 800822 ( 0.01%) 192.55
telnet 1125 ( 0.01%) 125398 ( 0.00%) 111.46
ssh 114936 ( 0.53%) 16518891 ( 0.11%) 143.72
dns 9541 ( 0.04%) 1244160 ( 0.01%) 130.40
bgp 136 ( 0.00%) 39820 ( 0.00%) 292.79
napster 28 ( 0.00%) 5888 ( 0.00%) 210.29
realaud 22 ( 0.00%) 2793 ( 0.00%) 126.95
rtsp 100954 ( 0.47%) 64122076 ( 0.42%) 635.16
icecast 163543 ( 0.75%) 235681906 ( 1.53%) 1441.10
hotline 4 ( 0.00%) 276 ( 0.00%) 69.00
other 4260745 ( 19.66%) 2071462940 ( 13.41%) 486.17
udp 1783655 ( 8.23%) 531617730 ( 3.44%) 298.05
dns 770993 ( 3.56%) 155683948 ( 1.01%) 201.93
realaud 18083 ( 0.08%) 8273015 ( 0.05%) 457.50
halflif 31 ( 0.00%) 5485 ( 0.00%) 176.94
starcra 45 ( 0.00%) 8014 ( 0.00%) 178.09
everque 66 ( 0.00%) 10779 ( 0.00%) 163.32
unreal 55 ( 0.00%) 14023 ( 0.00%) 254.96
quake 6 ( 0.00%) 496 ( 0.00%) 82.67
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 992603 ( 4.58%) 365188347 ( 2.36%) 367.91
icmp 691117 ( 3.19%) 59973870 ( 0.39%) 86.78
ipip 301 ( 0.00%) 36534 ( 0.00%) 121.38
ipsec 10 ( 0.00%) 1580 ( 0.00%) 158.00
ip6 924 ( 0.00%) 114810 ( 0.00%) 124.25
other 154761 ( 0.71%) 21417614 ( 0.14%) 138.39
frag 39300 ( 0.18%) 43664842 ( 0.28%) 1111.06
ip6 145218 ( 0.67%) 15458992 ( 0.10%) 106.45
tcp6 122599 ( 0.57%) 11577384 ( 0.07%) 94.43
http(s) 56 ( 0.00%) 59556 ( 0.00%) 1063.50
http(c) 19203 ( 0.09%) 1806353 ( 0.01%) 94.07
squid 6 ( 0.00%) 994 ( 0.00%) 165.67
smtp 356 ( 0.00%) 112575 ( 0.00%) 316.22
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 101363 ( 0.47%) 9418229 ( 0.06%) 92.92
bgp 406 ( 0.00%) 37611 ( 0.00%) 92.64
other 1179 ( 0.01%) 139462 ( 0.00%) 118.29
udp6 10467 ( 0.05%) 1532283 ( 0.01%) 146.39
dns 10413 ( 0.05%) 1526350 ( 0.01%) 146.58
starcra 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 52 ( 0.00%) 5720 ( 0.00%) 110.00
icmp6 12110 ( 0.06%) 2334460 ( 0.02%) 192.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10785 ( 0.00%) 898.75
tcpdump file: 200811291400.dump.gz (518.80 MB)