Traffic Trace Info
DumpFile: 200812041400.dump
FileSize: 1610.83MB
Id: 200812041400
StartTime: Thu Dec 4 14:00:01 2008
EndTime: Thu Dec 4 14:15:01 2008
TotalTime: 900.06 seconds
TotalCapSize: 1256.55MB CapLen: 96 bytes
# of packets: 23217218 (15585.12MB)
AvgRate: 145.26Mbps stddev:15.91M
IP flow (unique src/dst pair) Information
# of flows: 756102 (avg. 30.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 1.9% 1.7% 1.7% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 435889
Top 10 bandwidth usage (bytes/total in %):
12.9% 9.2% 8.6% 8.1% 6.6% 3.8% 3.0% 2.7% 2.1% 2.0%
# of IPv6 addresses: 1075
Top 10 bandwidth usage (bytes/total in %):
32.9% 30.2% 8.7% 8.2% 6.6% 6.4% 4.9% 4.9% 3.4% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812041400.pktlen.png)
detailed numbers
[ 32- 63]: 5535326
[ 64- 127]: 5048286
[ 128- 255]: 1114145
[ 256- 511]: 603738
[ 512- 1023]: 1039173
[ 1024- 2047]: 9876550
Protocol Breakdown
![[protocol breakdown chart]](200812041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23217218 (100.00%) 16342182118 (100.00%) 703.88
ip 23173086 ( 99.81%) 16336782462 ( 99.97%) 704.99
tcp 19747231 ( 85.05%) 15380617478 ( 94.12%) 778.87
http(s) 8008762 ( 34.49%) 10697522546 ( 65.46%) 1335.73
http(c) 5858554 ( 25.23%) 656630581 ( 4.02%) 112.08
squid 728224 ( 3.14%) 479123343 ( 2.93%) 657.93
smtp 311477 ( 1.34%) 133766515 ( 0.82%) 429.46
nntp 126 ( 0.00%) 44891 ( 0.00%) 356.28
ftp 193112 ( 0.83%) 117334160 ( 0.72%) 607.60
pop3 19131 ( 0.08%) 4632318 ( 0.03%) 242.14
imap 13546 ( 0.06%) 7100497 ( 0.04%) 524.18
telnet 5406 ( 0.02%) 602801 ( 0.00%) 111.51
ssh 101691 ( 0.44%) 15673817 ( 0.10%) 154.13
dns 9408 ( 0.04%) 4886590 ( 0.03%) 519.41
bgp 167 ( 0.00%) 68003 ( 0.00%) 407.20
napster 8 ( 0.00%) 492 ( 0.00%) 61.50
realaud 9 ( 0.00%) 1093 ( 0.00%) 121.44
rtsp 160741 ( 0.69%) 117201341 ( 0.72%) 729.13
icecast 442 ( 0.00%) 31291 ( 0.00%) 70.79
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 4336381 ( 18.68%) 3145994439 ( 19.25%) 725.49
udp 2677888 ( 11.53%) 854115856 ( 5.23%) 318.95
dns 962243 ( 4.14%) 202537869 ( 1.24%) 210.49
realaud 2756 ( 0.01%) 167513 ( 0.00%) 60.78
halflif 36 ( 0.00%) 3796 ( 0.00%) 105.44
starcra 261 ( 0.00%) 22840 ( 0.00%) 87.51
everque 225 ( 0.00%) 35910 ( 0.00%) 159.60
unreal 42 ( 0.00%) 9008 ( 0.00%) 214.48
quake 19 ( 0.00%) 2172 ( 0.00%) 114.32
cuseeme 2 ( 0.00%) 463 ( 0.00%) 231.50
other 1712220 ( 7.37%) 651244179 ( 3.99%) 380.35
icmp 324771 ( 1.40%) 31919439 ( 0.20%) 98.28
ipip 299 ( 0.00%) 35650 ( 0.00%) 119.23
ipsec 4904 ( 0.02%) 2241240 ( 0.01%) 457.02
ip6 1257 ( 0.01%) 186398 ( 0.00%) 148.29
other 416736 ( 1.79%) 67666401 ( 0.41%) 162.37
frag 29729 ( 0.13%) 27615441 ( 0.17%) 928.91
ip6 44132 ( 0.19%) 5399656 ( 0.03%) 122.35
tcp6 25603 ( 0.11%) 2729799 ( 0.02%) 106.62
http(s) 211 ( 0.00%) 279342 ( 0.00%) 1323.90
http(c) 23076 ( 0.10%) 2165391 ( 0.01%) 93.84
smtp 285 ( 0.00%) 81869 ( 0.00%) 287.26
ftp 32 ( 0.00%) 2964 ( 0.00%) 92.62
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 351 ( 0.00%) 42477 ( 0.00%) 121.02
bgp 416 ( 0.00%) 39007 ( 0.00%) 93.77
other 1202 ( 0.01%) 116145 ( 0.00%) 96.63
udp6 12555 ( 0.05%) 1902571 ( 0.01%) 151.54
dns 12459 ( 0.05%) 1892877 ( 0.01%) 151.93
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 94 ( 0.00%) 9488 ( 0.00%) 100.94
icmp6 5932 ( 0.03%) 748414 ( 0.00%) 126.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 14792 ( 0.00%) 1232.67
tcpdump file: 200812041400.dump.gz (572.65 MB)