Traffic Trace Info
DumpFile: 200812121400.dump
FileSize: 1419.63MB
Id: 200812121400
StartTime: Fri Dec 12 14:00:00 2008
EndTime: Fri Dec 12 14:15:00 2008
TotalTime: 899.92 seconds
TotalCapSize: 1108.71MB CapLen: 96 bytes
# of packets: 20375931 (14293.65MB)
AvgRate: 133.27Mbps stddev:19.21M
IP flow (unique src/dst pair) Information
# of flows: 591145 (avg. 34.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 5.0% 2.3% 2.3% 1.6% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 324092
Top 10 bandwidth usage (bytes/total in %):
7.8% 6.5% 6.2% 6.0% 5.0% 5.0% 4.4% 3.9% 2.4% 2.4%
# of IPv6 addresses: 1156
Top 10 bandwidth usage (bytes/total in %):
24.3% 22.7% 8.7% 8.7% 8.0% 6.5% 6.2% 6.2% 6.1% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812121400.pktlen.png)
detailed numbers
[ 32- 63]: 4948346
[ 64- 127]: 4273645
[ 128- 255]: 740566
[ 256- 511]: 476324
[ 512- 1023]: 718255
[ 1024- 2047]: 9218795
Protocol Breakdown
![[protocol breakdown chart]](200812121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20375931 (100.00%) 14987973345 (100.00%) 735.57
ip 20334272 ( 99.80%) 14980773912 ( 99.95%) 736.73
tcp 17622926 ( 86.49%) 14044743916 ( 93.71%) 796.96
http(s) 6986159 ( 34.29%) 9461580086 ( 63.13%) 1354.33
http(c) 4589145 ( 22.52%) 468903212 ( 3.13%) 102.18
squid 353642 ( 1.74%) 310376038 ( 2.07%) 877.66
smtp 274715 ( 1.35%) 70307077 ( 0.47%) 255.93
nntp 53 ( 0.00%) 5691 ( 0.00%) 107.38
ftp 312406 ( 1.53%) 270557070 ( 1.81%) 866.04
pop3 17202 ( 0.08%) 7153715 ( 0.05%) 415.87
imap 8285 ( 0.04%) 2107547 ( 0.01%) 254.38
telnet 1991 ( 0.01%) 202626 ( 0.00%) 101.77
ssh 31044 ( 0.15%) 5497420 ( 0.04%) 177.08
dns 2765 ( 0.01%) 296474 ( 0.00%) 107.22
bgp 139 ( 0.00%) 47423 ( 0.00%) 341.17
napster 27 ( 0.00%) 2749 ( 0.00%) 101.81
realaud 18 ( 0.00%) 2203 ( 0.00%) 122.39
rtsp 283310 ( 1.39%) 242166278 ( 1.62%) 854.77
icecast 1193 ( 0.01%) 96731 ( 0.00%) 81.08
hotline 19 ( 0.00%) 2342 ( 0.00%) 123.26
other 4760813 ( 23.36%) 3205439234 ( 21.39%) 673.30
udp 2157484 ( 10.59%) 869660741 ( 5.80%) 403.09
dns 971246 ( 4.77%) 202217663 ( 1.35%) 208.20
realaud 27419 ( 0.13%) 18719603 ( 0.12%) 682.72
halflif 19 ( 0.00%) 1910 ( 0.00%) 100.53
starcra 46 ( 0.00%) 8183 ( 0.00%) 177.89
everque 99 ( 0.00%) 17154 ( 0.00%) 173.27
unreal 65 ( 0.00%) 15779 ( 0.00%) 242.75
quake 13 ( 0.00%) 1194 ( 0.00%) 91.85
cuseeme 7 ( 0.00%) 1115 ( 0.00%) 159.29
other 1158511 ( 5.69%) 648634944 ( 4.33%) 559.89
icmp 440503 ( 2.16%) 40386059 ( 0.27%) 91.68
ipip 322 ( 0.00%) 38820 ( 0.00%) 120.56
ipsec 4 ( 0.00%) 560 ( 0.00%) 140.00
ip6 1192 ( 0.01%) 300070 ( 0.00%) 251.74
other 111841 ( 0.55%) 25643746 ( 0.17%) 229.29
frag 27741 ( 0.14%) 26115739 ( 0.17%) 941.41
ip6 41659 ( 0.20%) 7199433 ( 0.05%) 172.82
tcp6 24638 ( 0.12%) 4640688 ( 0.03%) 188.35
http(s) 1720 ( 0.01%) 2211983 ( 0.01%) 1286.04
http(c) 19589 ( 0.10%) 1878979 ( 0.01%) 95.92
smtp 875 ( 0.00%) 285778 ( 0.00%) 326.60
ftp 36 ( 0.00%) 3308 ( 0.00%) 91.89
ssh 146 ( 0.00%) 30060 ( 0.00%) 205.89
bgp 372 ( 0.00%) 31899 ( 0.00%) 85.75
other 1900 ( 0.01%) 198681 ( 0.00%) 104.57
udp6 12448 ( 0.06%) 1904850 ( 0.01%) 153.02
dns 12436 ( 0.06%) 1903543 ( 0.01%) 153.07
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4535 ( 0.02%) 644707 ( 0.00%) 142.16
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 7 ( 0.00%) 4972 ( 0.00%) 710.29
tcpdump file: 200812121400.dump.gz (493.08 MB)