Traffic Trace Info
DumpFile: 200812081400.dump
FileSize: 1208.88MB
Id: 200812081400
StartTime: Mon Dec 8 14:00:01 2008
EndTime: Mon Dec 8 14:15:00 2008
TotalTime: 899.87 seconds
TotalCapSize: 943.47MB CapLen: 96 bytes
# of packets: 17393395 (11695.61MB)
AvgRate: 109.06Mbps stddev:13.06M
IP flow (unique src/dst pair) Information
# of flows: 600708 (avg. 28.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.9% 1.7% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 359059
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.9% 6.9% 6.0% 3.9% 3.4% 3.0% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1072
Top 10 bandwidth usage (bytes/total in %):
71.1% 71.1% 8.9% 8.2% 2.5% 2.1% 1.3% 0.9% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812081400.pktlen.png)
detailed numbers
[ 32- 63]: 4430283
[ 64- 127]: 3629771
[ 128- 255]: 800414
[ 256- 511]: 446584
[ 512- 1023]: 593731
[ 1024- 2047]: 7492612
Protocol Breakdown
![[protocol breakdown chart]](200812081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17393395 (100.00%) 12263735852 (100.00%) 705.08
ip 17340578 ( 99.70%) 12243963248 ( 99.84%) 706.09
tcp 14473781 ( 83.21%) 11457123942 ( 93.42%) 791.58
http(s) 6163782 ( 35.44%) 8192163453 ( 66.80%) 1329.08
http(c) 4278488 ( 24.60%) 509641077 ( 4.16%) 119.12
squid 175025 ( 1.01%) 110399188 ( 0.90%) 630.76
smtp 251375 ( 1.45%) 54115087 ( 0.44%) 215.28
ftp 84392 ( 0.49%) 7547625 ( 0.06%) 89.44
pop3 27502 ( 0.16%) 15196342 ( 0.12%) 552.55
imap 10986 ( 0.06%) 6209041 ( 0.05%) 565.18
telnet 1094 ( 0.01%) 95698 ( 0.00%) 87.48
ssh 46326 ( 0.27%) 8371128 ( 0.07%) 180.70
dns 2513 ( 0.01%) 224682 ( 0.00%) 89.41
bgp 139 ( 0.00%) 42609 ( 0.00%) 306.54
napster 62 ( 0.00%) 4426 ( 0.00%) 71.39
realaud 7 ( 0.00%) 3121 ( 0.00%) 445.86
rtsp 248472 ( 1.43%) 159623740 ( 1.30%) 642.42
icecast 446 ( 0.00%) 53768 ( 0.00%) 120.56
other 3183166 ( 18.30%) 2393432597 ( 19.52%) 751.90
udp 2316928 ( 13.32%) 724176255 ( 5.91%) 312.56
dns 995062 ( 5.72%) 208911506 ( 1.70%) 209.95
realaud 7724 ( 0.04%) 493769 ( 0.00%) 63.93
halflif 19 ( 0.00%) 1735 ( 0.00%) 91.32
starcra 18 ( 0.00%) 2272 ( 0.00%) 126.22
everque 633 ( 0.00%) 70054 ( 0.00%) 110.67
unreal 22 ( 0.00%) 6050 ( 0.00%) 275.00
quake 22 ( 0.00%) 4865 ( 0.00%) 221.14
cuseeme 4 ( 0.00%) 566 ( 0.00%) 141.50
other 1313334 ( 7.55%) 514645432 ( 4.20%) 391.86
icmp 421320 ( 2.42%) 37003115 ( 0.30%) 87.83
ipip 338 ( 0.00%) 41580 ( 0.00%) 123.02
ipsec 52329 ( 0.30%) 14639062 ( 0.12%) 279.75
ip6 847 ( 0.00%) 105582 ( 0.00%) 124.65
other 75035 ( 0.43%) 10873712 ( 0.09%) 144.92
frag 29118 ( 0.17%) 28171048 ( 0.23%) 967.48
ip6 52817 ( 0.30%) 19772604 ( 0.16%) 374.36
tcp6 32388 ( 0.19%) 16928292 ( 0.14%) 522.67
http(s) 10074 ( 0.06%) 14570021 ( 0.12%) 1446.30
http(c) 19378 ( 0.11%) 1853189 ( 0.02%) 95.63
smtp 675 ( 0.00%) 240932 ( 0.00%) 356.94
ftp 42 ( 0.00%) 3863 ( 0.00%) 91.98
pop3 30 ( 0.00%) 2604 ( 0.00%) 86.80
ssh 210 ( 0.00%) 58076 ( 0.00%) 276.55
dns 12 ( 0.00%) 2343 ( 0.00%) 195.25
bgp 402 ( 0.00%) 36735 ( 0.00%) 91.38
other 1565 ( 0.01%) 160529 ( 0.00%) 102.57
udp6 13674 ( 0.08%) 2052534 ( 0.02%) 150.10
dns 13637 ( 0.08%) 2048470 ( 0.02%) 150.21
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 35 ( 0.00%) 3850 ( 0.00%) 110.00
icmp6 6714 ( 0.04%) 777172 ( 0.01%) 115.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 10526 ( 0.00%) 956.91
tcpdump file: 200812081400.dump.gz (424.44 MB)