Traffic Trace Info
DumpFile: 200812051400.dump
FileSize: 1731.39MB
Id: 200812051400
StartTime: Fri Dec 5 14:00:00 2008
EndTime: Fri Dec 5 14:15:00 2008
TotalTime: 900.33 seconds
TotalCapSize: 1347.77MB CapLen: 96 bytes
# of packets: 25140268 (17501.13MB)
AvgRate: 163.08Mbps stddev:12.57M
IP flow (unique src/dst pair) Information
# of flows: 588335 (avg. 42.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.5% 2.4% 2.2% 2.0% 1.9% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 349878
Top 10 bandwidth usage (bytes/total in %):
16.6% 12.2% 7.3% 4.5% 3.8% 3.8% 3.5% 3.0% 2.6% 2.4%
# of IPv6 addresses: 1036
Top 10 bandwidth usage (bytes/total in %):
32.5% 30.5% 8.5% 8.3% 6.4% 5.0% 4.8% 3.5% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812051400.pktlen.png)
detailed numbers
[ 32- 63]: 6072172
[ 64- 127]: 5515114
[ 128- 255]: 794890
[ 256- 511]: 439161
[ 512- 1023]: 900108
[ 1024- 2047]: 11418823
Protocol Breakdown
![[protocol breakdown chart]](200812051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25140268 (100.00%) 18351262127 (100.00%) 729.95
ip 25100931 ( 99.84%) 18345975062 ( 99.97%) 730.89
tcp 21220739 ( 84.41%) 17046752245 ( 92.89%) 803.31
http(s) 8575017 ( 34.11%) 11599547418 ( 63.21%) 1352.71
http(c) 5869217 ( 23.35%) 665251172 ( 3.63%) 113.35
squid 207364 ( 0.82%) 131206230 ( 0.71%) 632.73
smtp 442184 ( 1.76%) 99415842 ( 0.54%) 224.83
nntp 70 ( 0.00%) 7568 ( 0.00%) 108.11
ftp 146728 ( 0.58%) 70305771 ( 0.38%) 479.16
pop3 18788 ( 0.07%) 5702945 ( 0.03%) 303.54
imap 6966 ( 0.03%) 2850344 ( 0.02%) 409.18
telnet 26685 ( 0.11%) 2044973 ( 0.01%) 76.63
ssh 327201 ( 1.30%) 49833120 ( 0.27%) 152.30
dns 12510 ( 0.05%) 3932152 ( 0.02%) 314.32
bgp 157 ( 0.00%) 57053 ( 0.00%) 363.39
napster 18 ( 0.00%) 1947 ( 0.00%) 108.17
rtsp 264754 ( 1.05%) 62953167 ( 0.34%) 237.78
icecast 1472 ( 0.01%) 809487 ( 0.00%) 549.92
other 5321586 ( 21.17%) 4352831736 ( 23.72%) 817.96
udp 2770036 ( 11.02%) 1150973945 ( 6.27%) 415.51
dns 896638 ( 3.57%) 129675179 ( 0.71%) 144.62
realaud 7934 ( 0.03%) 540795 ( 0.00%) 68.16
halflif 34 ( 0.00%) 3773 ( 0.00%) 110.97
starcra 52 ( 0.00%) 8889 ( 0.00%) 170.94
everque 1385 ( 0.01%) 252259 ( 0.00%) 182.14
unreal 57 ( 0.00%) 16685 ( 0.00%) 292.72
quake 1923 ( 0.01%) 169764 ( 0.00%) 88.28
cuseeme 10 ( 0.00%) 1034 ( 0.00%) 103.40
other 1861940 ( 7.41%) 1020274388 ( 5.56%) 547.96
icmp 568248 ( 2.26%) 47793981 ( 0.26%) 84.11
ipip 311 ( 0.00%) 37054 ( 0.00%) 119.14
ipsec 10 ( 0.00%) 1580 ( 0.00%) 158.00
ip6 893 ( 0.00%) 112516 ( 0.00%) 126.00
other 540694 ( 2.15%) 100303741 ( 0.55%) 185.51
frag 1821 ( 0.01%) 1442412 ( 0.01%) 792.10
ip6 39337 ( 0.16%) 5287065 ( 0.03%) 134.40
tcp6 21374 ( 0.09%) 2604939 ( 0.01%) 121.87
http(s) 146 ( 0.00%) 173491 ( 0.00%) 1188.29
http(c) 18654 ( 0.07%) 1761679 ( 0.01%) 94.44
smtp 549 ( 0.00%) 432665 ( 0.00%) 788.10
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 101 ( 0.00%) 12142 ( 0.00%) 120.22
bgp 407 ( 0.00%) 36743 ( 0.00%) 90.28
other 1451 ( 0.01%) 182307 ( 0.00%) 125.64
udp6 11670 ( 0.05%) 1825874 ( 0.01%) 156.46
dns 11654 ( 0.05%) 1824114 ( 0.01%) 156.52
everque 2 ( 0.00%) 222 ( 0.00%) 111.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 6256 ( 0.02%) 846600 ( 0.00%) 135.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7 ( 0.00%) 5572 ( 0.00%) 796.00
tcpdump file: 200812051400.dump.gz (605.38 MB)