Traffic Trace Info
DumpFile: 200812031400.dump
FileSize: 1673.30MB
Id: 200812031400
StartTime: Wed Dec 3 14:00:01 2008
EndTime: Wed Dec 3 14:15:01 2008
TotalTime: 899.98 seconds
TotalCapSize: 1308.05MB CapLen: 96 bytes
# of packets: 23936512 (16752.74MB)
AvgRate: 156.16Mbps stddev:16.11M
IP flow (unique src/dst pair) Information
# of flows: 533361 (avg. 44.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.1% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 315438
Top 10 bandwidth usage (bytes/total in %):
13.4% 10.9% 7.0% 6.7% 4.6% 4.5% 4.0% 3.2% 2.4% 2.0%
# of IPv6 addresses: 1030
Top 10 bandwidth usage (bytes/total in %):
96.0% 96.0% 0.9% 0.8% 0.7% 0.5% 0.4% 0.4% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812031400.pktlen.png)
detailed numbers
[ 32- 63]: 5114955
[ 64- 127]: 5634475
[ 128- 255]: 832573
[ 256- 511]: 604428
[ 512- 1023]: 994480
[ 1024- 2047]: 10755601
Protocol Breakdown
![[protocol breakdown chart]](200812031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23936512 (100.00%) 17566524339 (100.00%) 733.88
ip 23767162 ( 99.29%) 17368013317 ( 98.87%) 730.76
tcp 19586942 ( 81.83%) 16082773389 ( 91.55%) 821.10
http(s) 8816070 ( 36.83%) 12123524558 ( 69.01%) 1375.16
http(c) 5386364 ( 22.50%) 540533795 ( 3.08%) 100.35
squid 470000 ( 1.96%) 352313561 ( 2.01%) 749.60
smtp 309130 ( 1.29%) 168731034 ( 0.96%) 545.83
ftp 150441 ( 0.63%) 116995838 ( 0.67%) 777.69
pop3 27957 ( 0.12%) 5633878 ( 0.03%) 201.52
imap 9342 ( 0.04%) 2867688 ( 0.02%) 306.97
telnet 4681 ( 0.02%) 469517 ( 0.00%) 100.30
ssh 44935 ( 0.19%) 7375211 ( 0.04%) 164.13
dns 13003 ( 0.05%) 1653384 ( 0.01%) 127.15
bgp 169 ( 0.00%) 70525 ( 0.00%) 417.31
napster 84 ( 0.00%) 11922 ( 0.00%) 141.93
realaud 953 ( 0.00%) 69476 ( 0.00%) 72.90
rtsp 401281 ( 1.68%) 189276578 ( 1.08%) 471.68
icecast 25193 ( 0.11%) 23067384 ( 0.13%) 915.63
other 3927337 ( 16.41%) 2550178920 ( 14.52%) 649.34
udp 2650459 ( 11.07%) 1008462734 ( 5.74%) 380.49
dns 898016 ( 3.75%) 208081834 ( 1.18%) 231.71
realaud 24842 ( 0.10%) 9777756 ( 0.06%) 393.60
halflif 27 ( 0.00%) 2878 ( 0.00%) 106.59
starcra 51 ( 0.00%) 9401 ( 0.00%) 184.33
everque 123 ( 0.00%) 25998 ( 0.00%) 211.37
unreal 54 ( 0.00%) 16749 ( 0.00%) 310.17
quake 22 ( 0.00%) 3249 ( 0.00%) 147.68
cuseeme 7 ( 0.00%) 1404 ( 0.00%) 200.57
other 1725076 ( 7.21%) 787580611 ( 4.48%) 456.55
icmp 869380 ( 3.63%) 68807374 ( 0.39%) 79.15
ipip 309 ( 0.00%) 37822 ( 0.00%) 122.40
ipsec 289837 ( 1.21%) 153711774 ( 0.88%) 530.34
ip6 917 ( 0.00%) 112965 ( 0.00%) 123.19
other 369318 ( 1.54%) 54107259 ( 0.31%) 146.51
frag 46146 ( 0.19%) 51511590 ( 0.29%) 1116.27
ip6 169350 ( 0.71%) 198511022 ( 1.13%) 1172.19
tcp6 150441 ( 0.63%) 195874493 ( 1.12%) 1302.00
http(s) 1284 ( 0.01%) 1637278 ( 0.01%) 1275.14
http(c) 19244 ( 0.08%) 1827523 ( 0.01%) 94.97
smtp 1768 ( 0.01%) 1511656 ( 0.01%) 855.01
ftp 67 ( 0.00%) 6235 ( 0.00%) 93.06
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 234 ( 0.00%) 65212 ( 0.00%) 278.68
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 405 ( 0.00%) 45569 ( 0.00%) 112.52
other 127402 ( 0.53%) 190777781 ( 1.09%) 1497.45
udp6 11342 ( 0.05%) 1740531 ( 0.01%) 153.46
dns 11323 ( 0.05%) 1738442 ( 0.01%) 153.53
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 16 ( 0.00%) 1760 ( 0.00%) 110.00
icmp6 7536 ( 0.03%) 891782 ( 0.01%) 118.34
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200812031400.dump.gz (570.07 MB)