Traffic Trace Info
DumpFile: 200812071400.dump
FileSize: 722.57MB
Id: 200812071400
StartTime: Sun Dec 7 14:00:00 2008
EndTime: Sun Dec 7 14:15:00 2008
TotalTime: 900.36 seconds
TotalCapSize: 562.40MB CapLen: 96 bytes
# of packets: 10495846 (7612.90MB)
AvgRate: 70.94Mbps stddev:10.93M
IP flow (unique src/dst pair) Information
# of flows: 563038 (avg. 18.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.4% 3.4% 2.7% 2.4% 2.4% 2.2% 2.0% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 411858
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.4% 8.1% 8.0% 5.3% 5.3% 3.5% 3.4% 3.4% 3.1%
# of IPv6 addresses: 933
Top 10 bandwidth usage (bytes/total in %):
42.2% 40.6% 9.4% 9.2% 5.5% 3.7% 2.9% 2.9% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812071400.pktlen.png)
detailed numbers
[ 32- 63]: 2524080
[ 64- 127]: 1987937
[ 128- 255]: 479615
[ 256- 511]: 252817
[ 512- 1023]: 198512
[ 1024- 2047]: 5052885
Protocol Breakdown
![[protocol breakdown chart]](200812071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10495846 (100.00%) 7982704717 (100.00%) 760.56
ip 10460917 ( 99.67%) 7978705951 ( 99.95%) 762.72
tcp 8523858 ( 81.21%) 7346742576 ( 92.03%) 861.90
http(s) 4129422 ( 39.34%) 5630073539 ( 70.53%) 1363.40
http(c) 1895071 ( 18.06%) 158868632 ( 1.99%) 83.83
squid 221317 ( 2.11%) 139484003 ( 1.75%) 630.25
smtp 94518 ( 0.90%) 12145249 ( 0.15%) 128.50
ftp 73749 ( 0.70%) 6572748 ( 0.08%) 89.12
pop3 5813 ( 0.06%) 1184687 ( 0.01%) 203.80
imap 613 ( 0.01%) 49332 ( 0.00%) 80.48
telnet 403 ( 0.00%) 30979 ( 0.00%) 76.87
ssh 83034 ( 0.79%) 12745729 ( 0.16%) 153.50
dns 1522 ( 0.01%) 152447 ( 0.00%) 100.16
bgp 137 ( 0.00%) 39044 ( 0.00%) 284.99
napster 8 ( 0.00%) 490 ( 0.00%) 61.25
realaud 6 ( 0.00%) 372 ( 0.00%) 62.00
rtsp 28 ( 0.00%) 8339 ( 0.00%) 297.82
icecast 16089 ( 0.15%) 22349666 ( 0.28%) 1389.13
hotline 110 ( 0.00%) 6886 ( 0.00%) 62.60
other 2002011 ( 19.07%) 1363030014 ( 17.07%) 680.83
udp 1615084 ( 15.39%) 602947319 ( 7.55%) 373.32
dns 691341 ( 6.59%) 146602819 ( 1.84%) 212.06
realaud 6 ( 0.00%) 843 ( 0.00%) 140.50
halflif 22 ( 0.00%) 2867 ( 0.00%) 130.32
starcra 44 ( 0.00%) 6138 ( 0.00%) 139.50
everque 109 ( 0.00%) 13441 ( 0.00%) 123.31
unreal 31 ( 0.00%) 9197 ( 0.00%) 296.68
quake 14 ( 0.00%) 1515 ( 0.00%) 108.21
cuseeme 4 ( 0.00%) 619 ( 0.00%) 154.75
other 923465 ( 8.80%) 456277740 ( 5.72%) 494.09
icmp 316097 ( 3.01%) 28164860 ( 0.35%) 89.10
ipip 296 ( 0.00%) 35304 ( 0.00%) 119.27
ip6 338 ( 0.00%) 167612 ( 0.00%) 495.89
other 5244 ( 0.05%) 648280 ( 0.01%) 123.62
frag 24565 ( 0.23%) 23915820 ( 0.30%) 973.57
ip6 34929 ( 0.33%) 3998766 ( 0.05%) 114.48
tcp6 21221 ( 0.20%) 2166986 ( 0.03%) 102.12
http(s) 119 ( 0.00%) 75278 ( 0.00%) 632.59
http(c) 18538 ( 0.18%) 1776056 ( 0.02%) 95.81
smtp 143 ( 0.00%) 43875 ( 0.00%) 306.82
ftp 33 ( 0.00%) 3099 ( 0.00%) 93.91
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 97 ( 0.00%) 11610 ( 0.00%) 119.69
bgp 412 ( 0.00%) 38810 ( 0.00%) 94.20
other 1849 ( 0.02%) 215654 ( 0.00%) 116.63
udp6 8420 ( 0.08%) 1186689 ( 0.01%) 140.94
dns 8354 ( 0.08%) 1179426 ( 0.01%) 141.18
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
other 64 ( 0.00%) 7040 ( 0.00%) 110.00
icmp6 5250 ( 0.05%) 633791 ( 0.01%) 120.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7220 ( 0.00%) 902.50
tcpdump file: 200812071400.dump.gz (245.49 MB)