Traffic Trace Info
DumpFile: 200812061400.dump
FileSize: 1107.32MB
Id: 200812061400
StartTime: Sat Dec 6 14:00:00 2008
EndTime: Sat Dec 6 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 865.93MB CapLen: 96 bytes
# of packets: 15818554 (10916.65MB)
AvgRate: 101.80Mbps stddev:13.67M
IP flow (unique src/dst pair) Information
# of flows: 648776 (avg. 24.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.3% 1.2% 1.2% 1.2% 1.2% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 415623
Top 10 bandwidth usage (bytes/total in %):
12.5% 10.2% 7.0% 6.5% 5.0% 3.3% 2.9% 2.6% 1.5% 1.5%
# of IPv6 addresses: 1043
Top 10 bandwidth usage (bytes/total in %):
30.3% 29.1% 25.8% 25.8% 7.1% 6.3% 4.4% 2.4% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812061400.pktlen.png)
detailed numbers
[ 32- 63]: 3363401
[ 64- 127]: 3775449
[ 128- 255]: 744581
[ 256- 511]: 353570
[ 512- 1023]: 476416
[ 1024- 2047]: 7105137
Protocol Breakdown
![[protocol breakdown chart]](200812061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15818554 (100.00%) 11446937198 (100.00%) 723.64
ip 15782293 ( 99.77%) 11441356631 ( 99.95%) 724.95
tcp 13182264 ( 83.33%) 10678226519 ( 93.28%) 810.04
http(s) 5859296 ( 37.04%) 7957431621 ( 69.52%) 1358.09
http(c) 3513484 ( 22.21%) 320514228 ( 2.80%) 91.22
squid 220022 ( 1.39%) 150065346 ( 1.31%) 682.05
smtp 225192 ( 1.42%) 56051329 ( 0.49%) 248.90
ftp 400674 ( 2.53%) 205528191 ( 1.80%) 512.96
pop3 9759 ( 0.06%) 2675660 ( 0.02%) 274.17
imap 4156 ( 0.03%) 2924338 ( 0.03%) 703.64
telnet 87089 ( 0.55%) 6439504 ( 0.06%) 73.94
ssh 103205 ( 0.65%) 27950624 ( 0.24%) 270.83
dns 7173 ( 0.05%) 5973433 ( 0.05%) 832.77
bgp 135 ( 0.00%) 43629 ( 0.00%) 323.18
realaud 7 ( 0.00%) 478 ( 0.00%) 68.29
rtsp 72666 ( 0.46%) 28882678 ( 0.25%) 397.47
icecast 93251 ( 0.59%) 140416216 ( 1.23%) 1505.79
other 2586155 ( 16.35%) 1773329244 ( 15.49%) 685.70
udp 1879866 ( 11.88%) 681137569 ( 5.95%) 362.33
dns 905828 ( 5.73%) 183501061 ( 1.60%) 202.58
realaud 19858 ( 0.13%) 8381659 ( 0.07%) 422.08
halflif 26 ( 0.00%) 2996 ( 0.00%) 115.23
starcra 28 ( 0.00%) 4315 ( 0.00%) 154.11
everque 2207 ( 0.01%) 1175467 ( 0.01%) 532.61
unreal 51 ( 0.00%) 13471 ( 0.00%) 264.14
quake 14 ( 0.00%) 1586 ( 0.00%) 113.29
cuseeme 10 ( 0.00%) 1052 ( 0.00%) 105.20
other 951803 ( 6.02%) 488033756 ( 4.26%) 512.75
icmp 408682 ( 2.58%) 37938844 ( 0.33%) 92.83
ipip 318 ( 0.00%) 40592 ( 0.00%) 127.65
ipsec 10 ( 0.00%) 1580 ( 0.00%) 158.00
ip6 12116 ( 0.08%) 5144651 ( 0.04%) 424.62
other 299037 ( 1.89%) 38866876 ( 0.34%) 129.97
frag 23463 ( 0.15%) 22163720 ( 0.19%) 944.62
ip6 36261 ( 0.23%) 5580567 ( 0.05%) 153.90
tcp6 21844 ( 0.14%) 3579314 ( 0.03%) 163.86
http(s) 1122 ( 0.01%) 1554251 ( 0.01%) 1385.25
http(c) 18538 ( 0.12%) 1756451 ( 0.02%) 94.75
smtp 173 ( 0.00%) 47868 ( 0.00%) 276.69
ftp 19 ( 0.00%) 1680 ( 0.00%) 88.42
pop3 54 ( 0.00%) 4587 ( 0.00%) 84.94
ssh 124 ( 0.00%) 27404 ( 0.00%) 221.00
dns 16 ( 0.00%) 3155 ( 0.00%) 197.19
bgp 410 ( 0.00%) 40994 ( 0.00%) 99.99
other 1388 ( 0.01%) 142924 ( 0.00%) 102.97
udp6 9253 ( 0.06%) 1368454 ( 0.01%) 147.89
dns 9241 ( 0.06%) 1367133 ( 0.01%) 147.94
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 5114 ( 0.03%) 609665 ( 0.01%) 119.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 19054 ( 0.00%) 952.70
tcpdump file: 200812061400.dump.gz (384.45 MB)