Traffic Trace Info
DumpFile: 200811301400.dump
FileSize: 1426.97MB
Id: 200811301400
StartTime: Sun Nov 30 14:00:01 2008
EndTime: Sun Nov 30 14:15:00 2008
TotalTime: 899.69 seconds
TotalCapSize: 1111.07MB CapLen: 96 bytes
# of packets: 20701876 (14545.30MB)
AvgRate: 135.62Mbps stddev:16.12M
IP flow (unique src/dst pair) Information
# of flows: 558153 (avg. 37.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.6% 1.8% 1.7% 1.7% 1.6% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 355594
Top 10 bandwidth usage (bytes/total in %):
18.1% 17.1% 7.2% 6.0% 4.8% 3.9% 3.8% 3.7% 3.2% 2.7%
# of IPv6 addresses: 853
Top 10 bandwidth usage (bytes/total in %):
65.9% 52.2% 13.9% 13.7% 12.8% 3.6% 3.1% 1.7% 1.7% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200811301400.pktlen.png)
detailed numbers
[ 32- 63]: 5441726
[ 64- 127]: 4203399
[ 128- 255]: 614789
[ 256- 511]: 517475
[ 512- 1023]: 349918
[ 1024- 2047]: 9574569
Protocol Breakdown
![[protocol breakdown chart]](200811301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20701876 (100.00%) 15251852194 (100.00%) 736.74
ip 20568124 ( 99.35%) 15239266136 ( 99.92%) 740.92
tcp 17479749 ( 84.44%) 14147373752 ( 92.76%) 809.36
http(s) 6924925 ( 33.45%) 9679889991 ( 63.47%) 1397.83
http(c) 4225738 ( 20.41%) 322451218 ( 2.11%) 76.31
squid 657124 ( 3.17%) 334323351 ( 2.19%) 508.77
smtp 208997 ( 1.01%) 26838665 ( 0.18%) 128.42
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 213888 ( 1.03%) 103013443 ( 0.68%) 481.62
pop3 10658 ( 0.05%) 4763290 ( 0.03%) 446.92
imap 3287 ( 0.02%) 1368659 ( 0.01%) 416.39
telnet 3188 ( 0.02%) 221388 ( 0.00%) 69.44
ssh 184216 ( 0.89%) 17747654 ( 0.12%) 96.34
dns 8978 ( 0.04%) 1194262 ( 0.01%) 133.02
bgp 136 ( 0.00%) 38932 ( 0.00%) 286.26
napster 32 ( 0.00%) 4139 ( 0.00%) 129.34
realaud 8 ( 0.00%) 3757 ( 0.00%) 469.62
rtsp 66871 ( 0.32%) 69852231 ( 0.46%) 1044.58
icecast 25223 ( 0.12%) 23139111 ( 0.15%) 917.38
hotline 17 ( 0.00%) 1750 ( 0.00%) 102.94
other 4946462 ( 23.89%) 3562521851 ( 23.36%) 720.22
udp 2477371 ( 11.97%) 1029783094 ( 6.75%) 415.68
dns 596546 ( 2.88%) 131607821 ( 0.86%) 220.62
realaud 19894 ( 0.10%) 8381050 ( 0.05%) 421.29
halflif 20 ( 0.00%) 2157 ( 0.00%) 107.85
starcra 35 ( 0.00%) 5020 ( 0.00%) 143.43
everque 94 ( 0.00%) 15057 ( 0.00%) 160.18
unreal 57 ( 0.00%) 15648 ( 0.00%) 274.53
quake 20 ( 0.00%) 2409 ( 0.00%) 120.45
cuseeme 5 ( 0.00%) 543 ( 0.00%) 108.60
other 1859017 ( 8.98%) 887484987 ( 5.82%) 477.39
icmp 442817 ( 2.14%) 39438096 ( 0.26%) 89.06
ipip 340 ( 0.00%) 40447 ( 0.00%) 118.96
ipsec 10 ( 0.00%) 1580 ( 0.00%) 158.00
ip6 890 ( 0.00%) 111755 ( 0.00%) 125.57
other 166947 ( 0.81%) 22517412 ( 0.15%) 134.88
frag 38712 ( 0.19%) 43422283 ( 0.28%) 1121.68
ip6 133752 ( 0.65%) 12586058 ( 0.08%) 94.10
tcp6 119084 ( 0.58%) 10589008 ( 0.07%) 88.92
http(c) 114680 ( 0.55%) 10066885 ( 0.07%) 87.78
smtp 220 ( 0.00%) 106053 ( 0.00%) 482.06
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
ssh 112 ( 0.00%) 14060 ( 0.00%) 125.54
bgp 400 ( 0.00%) 36664 ( 0.00%) 91.66
other 3638 ( 0.02%) 362206 ( 0.00%) 99.56
udp6 8530 ( 0.04%) 1229424 ( 0.01%) 144.13
dns 8515 ( 0.04%) 1227782 ( 0.01%) 144.19
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 6074 ( 0.03%) 734228 ( 0.00%) 120.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34 ( 0.00%) 29318 ( 0.00%) 862.29
tcpdump file: 200811301400.dump.gz (495.11 MB)