Traffic Trace Info
DumpFile: 200812101400.dump
FileSize: 1467.18MB
Id: 200812101400
StartTime: Wed Dec 10 14:00:01 2008
EndTime: Wed Dec 10 14:15:00 2008
TotalTime: 899.15 seconds
TotalCapSize: 1151.61MB CapLen: 96 bytes
# of packets: 20681027 (14501.47MB)
AvgRate: 135.33Mbps stddev:15.04M
IP flow (unique src/dst pair) Information
# of flows: 601837 (avg. 34.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 5.1% 3.4% 2.0% 1.6% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 335313
Top 10 bandwidth usage (bytes/total in %):
9.4% 9.3% 7.5% 5.3% 5.3% 5.1% 4.9% 3.8% 3.5% 3.3%
# of IPv6 addresses: 1095
Top 10 bandwidth usage (bytes/total in %):
95.0% 59.9% 35.1% 1.3% 1.2% 0.5% 0.4% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812101400.pktlen.png)
detailed numbers
[ 32- 63]: 4411077
[ 64- 127]: 4742984
[ 128- 255]: 937435
[ 256- 511]: 526562
[ 512- 1023]: 586192
[ 1024- 2047]: 9476777
Protocol Breakdown
![[protocol breakdown chart]](200812101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20681027 (100.00%) 15205894289 (100.00%) 735.26
ip 20552911 ( 99.38%) 15071027903 ( 99.11%) 733.28
tcp 17797318 ( 86.06%) 14422113974 ( 94.85%) 810.35
http(s) 7040649 ( 34.04%) 9512138335 ( 62.56%) 1351.03
http(c) 4614955 ( 22.31%) 488462331 ( 3.21%) 105.84
squid 327459 ( 1.58%) 223067217 ( 1.47%) 681.21
smtp 304799 ( 1.47%) 103429860 ( 0.68%) 339.34
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 135464 ( 0.66%) 71486481 ( 0.47%) 527.72
pop3 40093 ( 0.19%) 34588046 ( 0.23%) 862.70
imap 5442 ( 0.03%) 945413 ( 0.01%) 173.73
telnet 2543 ( 0.01%) 354650 ( 0.00%) 139.46
ssh 393087 ( 1.90%) 73939620 ( 0.49%) 188.10
dns 4767 ( 0.02%) 390610 ( 0.00%) 81.94
bgp 185 ( 0.00%) 80841 ( 0.00%) 436.98
napster 46 ( 0.00%) 4072 ( 0.00%) 88.52
realaud 11 ( 0.00%) 1111 ( 0.00%) 101.00
rtsp 326708 ( 1.58%) 279323918 ( 1.84%) 854.97
icecast 52632 ( 0.25%) 46339546 ( 0.30%) 880.44
hotline 23 ( 0.00%) 2013 ( 0.00%) 87.52
other 4548448 ( 21.99%) 3587559484 ( 23.59%) 788.74
udp 2032853 ( 9.83%) 569135970 ( 3.74%) 279.97
dns 1103043 ( 5.33%) 215006611 ( 1.41%) 194.92
realaud 5562 ( 0.03%) 375064 ( 0.00%) 67.43
halflif 21 ( 0.00%) 2789 ( 0.00%) 132.81
starcra 22 ( 0.00%) 3284 ( 0.00%) 149.27
everque 111 ( 0.00%) 15985 ( 0.00%) 144.01
unreal 108 ( 0.00%) 28302 ( 0.00%) 262.06
quake 16 ( 0.00%) 1541 ( 0.00%) 96.31
cuseeme 6 ( 0.00%) 726 ( 0.00%) 121.00
other 923924 ( 4.47%) 353677286 ( 2.33%) 382.80
icmp 533378 ( 2.58%) 46041642 ( 0.30%) 86.32
ipip 313 ( 0.00%) 36194 ( 0.00%) 115.64
ipsec 260 ( 0.00%) 75032 ( 0.00%) 288.58
ip6 1270 ( 0.01%) 155300 ( 0.00%) 122.28
other 187519 ( 0.91%) 33469791 ( 0.22%) 178.49
frag 26034 ( 0.13%) 24982210 ( 0.16%) 959.60
ip6 128116 ( 0.62%) 134866386 ( 0.89%) 1052.69
tcp6 110033 ( 0.53%) 132196868 ( 0.87%) 1201.43
http(s) 591 ( 0.00%) 673708 ( 0.00%) 1139.95
http(c) 20155 ( 0.10%) 1918339 ( 0.01%) 95.18
smtp 980 ( 0.00%) 855472 ( 0.01%) 872.93
ftp 85 ( 0.00%) 11936 ( 0.00%) 140.42
ssh 157 ( 0.00%) 18618 ( 0.00%) 118.59
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 401 ( 0.00%) 36597 ( 0.00%) 91.26
other 87657 ( 0.42%) 128681563 ( 0.85%) 1468.01
udp6 12303 ( 0.06%) 1940188 ( 0.01%) 157.70
dns 12285 ( 0.06%) 1938212 ( 0.01%) 157.77
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 17 ( 0.00%) 1870 ( 0.00%) 110.00
icmp6 5746 ( 0.03%) 721600 ( 0.00%) 125.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3650 ( 0.00%) 912.50
tcpdump file: 200812101400.dump.gz (508.14 MB)