Traffic Trace Info
DumpFile: 200812091400.dump
FileSize: 1857.93MB
Id: 200812091400
StartTime: Tue Dec 9 14:00:00 2008
EndTime: Tue Dec 9 14:15:00 2008
TotalTime: 899.99 seconds
TotalCapSize: 1442.70MB CapLen: 96 bytes
# of packets: 27211844 (17797.81MB)
AvgRate: 165.90Mbps stddev:24.62M
IP flow (unique src/dst pair) Information
# of flows: 543744 (avg. 50.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 307807
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.9% 7.8% 7.6% 5.6% 5.3% 4.2% 4.0% 2.9% 2.1%
# of IPv6 addresses: 1144
Top 10 bandwidth usage (bytes/total in %):
91.4% 91.4% 2.2% 2.0% 1.8% 1.8% 0.6% 0.5% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812091400.pktlen.png)
detailed numbers
[ 32- 63]: 6753575
[ 64- 127]: 6382830
[ 128- 255]: 1210307
[ 256- 511]: 595287
[ 512- 1023]: 934888
[ 1024- 2047]: 11334957
Protocol Breakdown
![[protocol breakdown chart]](200812091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27211844 (100.00%) 18662358538 (100.00%) 685.82
ip 27116720 ( 99.65%) 18582300498 ( 99.57%) 685.27
tcp 22023451 ( 80.93%) 16193278137 ( 86.77%) 735.27
http(s) 6754044 ( 24.82%) 9050456921 ( 48.50%) 1340.01
http(c) 5556581 ( 20.42%) 840950248 ( 4.51%) 151.34
squid 317349 ( 1.17%) 259155029 ( 1.39%) 816.62
smtp 295186 ( 1.08%) 83652096 ( 0.45%) 283.39
ftp 125046 ( 0.46%) 28756183 ( 0.15%) 229.96
pop3 33448 ( 0.12%) 9030521 ( 0.05%) 269.99
imap 7006 ( 0.03%) 1821177 ( 0.01%) 259.95
telnet 1088 ( 0.00%) 87776 ( 0.00%) 80.68
ssh 1534187 ( 5.64%) 230560771 ( 1.24%) 150.28
dns 5463 ( 0.02%) 875530 ( 0.00%) 160.27
bgp 196 ( 0.00%) 91568 ( 0.00%) 467.18
napster 54 ( 0.00%) 4076 ( 0.00%) 75.48
realaud 51 ( 0.00%) 9576 ( 0.00%) 187.76
rtsp 327795 ( 1.20%) 167194580 ( 0.90%) 510.06
icecast 5566 ( 0.02%) 1136423 ( 0.01%) 204.17
other 7060391 ( 25.95%) 5519495662 ( 29.58%) 781.75
udp 4549515 ( 16.72%) 2330204553 ( 12.49%) 512.19
dns 1018357 ( 3.74%) 209358597 ( 1.12%) 205.58
realaud 939 ( 0.00%) 57966 ( 0.00%) 61.73
halflif 28 ( 0.00%) 2631 ( 0.00%) 93.96
starcra 75 ( 0.00%) 10282 ( 0.00%) 137.09
everque 83 ( 0.00%) 12022 ( 0.00%) 144.84
unreal 148 ( 0.00%) 42531 ( 0.00%) 287.37
quake 7 ( 0.00%) 564 ( 0.00%) 80.57
cuseeme 5 ( 0.00%) 552 ( 0.00%) 110.40
other 3529710 ( 12.97%) 2120691905 ( 11.36%) 600.81
icmp 383655 ( 1.41%) 34716105 ( 0.19%) 90.49
ipip 322 ( 0.00%) 38836 ( 0.00%) 120.61
ipsec 22 ( 0.00%) 3660 ( 0.00%) 166.36
ip6 909 ( 0.00%) 113242 ( 0.00%) 124.58
other 158846 ( 0.58%) 23945965 ( 0.13%) 150.75
frag 30195 ( 0.11%) 27671840 ( 0.15%) 916.44
ip6 95124 ( 0.35%) 80058040 ( 0.43%) 841.62
tcp6 76065 ( 0.28%) 77284292 ( 0.41%) 1016.03
http(s) 314 ( 0.00%) 339505 ( 0.00%) 1081.23
http(c) 19318 ( 0.07%) 1854772 ( 0.01%) 96.01
smtp 414 ( 0.00%) 115354 ( 0.00%) 278.63
ftp 36 ( 0.00%) 3340 ( 0.00%) 92.78
ssh 5107 ( 0.02%) 1612930 ( 0.01%) 315.83
dns 16 ( 0.00%) 2516 ( 0.00%) 157.25
bgp 419 ( 0.00%) 40358 ( 0.00%) 96.32
other 50441 ( 0.19%) 73315517 ( 0.39%) 1453.49
udp6 13541 ( 0.05%) 2038922 ( 0.01%) 150.57
dns 13470 ( 0.05%) 2031688 ( 0.01%) 150.83
other 71 ( 0.00%) 7234 ( 0.00%) 101.89
icmp6 5468 ( 0.02%) 717461 ( 0.00%) 131.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 13285 ( 0.00%) 664.25
tcpdump file: 200812091400.dump.gz (671.53 MB)