Traffic Trace Info
DumpFile: 200812011400.dump
FileSize: 1728.98MB
Id: 200812011400
StartTime: Mon Dec 1 14:00:01 2008
EndTime: Mon Dec 1 14:15:00 2008
TotalTime: 899.87 seconds
TotalCapSize: 1352.84MB CapLen: 96 bytes
# of packets: 24650267 (16581.28MB)
AvgRate: 154.58Mbps stddev:16.00M
IP flow (unique src/dst pair) Information
# of flows: 689065 (avg. 35.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.7% 1.6% 1.4% 1.1% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 421893
Top 10 bandwidth usage (bytes/total in %):
15.1% 13.9% 8.4% 3.9% 3.7% 3.3% 3.2% 2.6% 1.9% 1.8%
# of IPv6 addresses: 987
Top 10 bandwidth usage (bytes/total in %):
28.3% 26.5% 22.6% 20.7% 7.3% 6.9% 6.8% 5.0% 3.3% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812011400.pktlen.png)
detailed numbers
[ 32- 63]: 6221790
[ 64- 127]: 5647459
[ 128- 255]: 912829
[ 256- 511]: 499381
[ 512- 1023]: 633456
[ 1024- 2047]: 10735352
Protocol Breakdown
![[protocol breakdown chart]](200812011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24650267 (100.00%) 17386735763 (100.00%) 705.34
ip 24592164 ( 99.76%) 17378888593 ( 99.95%) 706.68
tcp 21469077 ( 87.09%) 16699964569 ( 96.05%) 777.86
http(s) 8424363 ( 34.18%) 11447434385 ( 65.84%) 1358.85
http(c) 5696344 ( 23.11%) 750444342 ( 4.32%) 131.74
squid 449974 ( 1.83%) 280732371 ( 1.61%) 623.89
smtp 278274 ( 1.13%) 153123355 ( 0.88%) 550.26
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 890258 ( 3.61%) 680077300 ( 3.91%) 763.91
pop3 22579 ( 0.09%) 5476268 ( 0.03%) 242.54
imap 7529 ( 0.03%) 2654166 ( 0.02%) 352.53
telnet 3587 ( 0.01%) 482865 ( 0.00%) 134.62
ssh 804699 ( 3.26%) 189590956 ( 1.09%) 235.60
dns 10250 ( 0.04%) 1227390 ( 0.01%) 119.75
bgp 168 ( 0.00%) 68123 ( 0.00%) 405.49
rtsp 358122 ( 1.45%) 102197821 ( 0.59%) 285.37
icecast 26577 ( 0.11%) 23268079 ( 0.13%) 875.50
hotline 10 ( 0.00%) 1276 ( 0.00%) 127.60
other 4496337 ( 18.24%) 3063185428 ( 17.62%) 681.26
udp 2052413 ( 8.33%) 566369777 ( 3.26%) 275.95
dns 993012 ( 4.03%) 197651000 ( 1.14%) 199.04
realaud 18202 ( 0.07%) 8295313 ( 0.05%) 455.74
halflif 29 ( 0.00%) 3303 ( 0.00%) 113.90
starcra 93 ( 0.00%) 16923 ( 0.00%) 181.97
everque 82 ( 0.00%) 13087 ( 0.00%) 159.60
unreal 65 ( 0.00%) 25276 ( 0.00%) 388.86
quake 164 ( 0.00%) 104205 ( 0.00%) 635.40
cuseeme 4 ( 0.00%) 309 ( 0.00%) 77.25
other 1038620 ( 4.21%) 357518317 ( 2.06%) 344.22
icmp 722825 ( 2.93%) 58858931 ( 0.34%) 81.43
ipip 311 ( 0.00%) 37375 ( 0.00%) 120.18
ipsec 10 ( 0.00%) 1580 ( 0.00%) 158.00
ip6 1027 ( 0.00%) 126100 ( 0.00%) 122.78
other 346501 ( 1.41%) 53530261 ( 0.31%) 154.49
frag 46491 ( 0.19%) 51747585 ( 0.30%) 1113.07
ip6 58103 ( 0.24%) 7847170 ( 0.05%) 135.06
tcp6 40133 ( 0.16%) 5224634 ( 0.03%) 130.18
http(s) 10646 ( 0.04%) 2422316 ( 0.01%) 227.53
http(c) 26464 ( 0.11%) 2381214 ( 0.01%) 89.98
smtp 392 ( 0.00%) 128489 ( 0.00%) 327.78
ftp 36 ( 0.00%) 3410 ( 0.00%) 94.72
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 686 ( 0.00%) 81908 ( 0.00%) 119.40
bgp 401 ( 0.00%) 36299 ( 0.00%) 90.52
other 1478 ( 0.01%) 168394 ( 0.00%) 113.93
udp6 13107 ( 0.05%) 1979768 ( 0.01%) 151.05
dns 13091 ( 0.05%) 1978016 ( 0.01%) 151.10
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 4813 ( 0.02%) 623833 ( 0.00%) 129.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 14855 ( 0.00%) 742.75
tcpdump file: 200812011400.dump.gz (614.20 MB)