Traffic Trace Info
DumpFile: 200812131400.dump
FileSize: 881.05MB
Id: 200812131400
StartTime: Sat Dec 13 14:00:01 2008
EndTime: Sat Dec 13 14:15:01 2008
TotalTime: 900.18 seconds
TotalCapSize: 688.39MB CapLen: 96 bytes
# of packets: 12625623 (8266.83MB)
AvgRate: 77.02Mbps stddev:12.34M
IP flow (unique src/dst pair) Information
# of flows: 482986 (avg. 26.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.5% 2.3% 1.7% 1.7% 1.5% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 292519
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.7% 6.8% 6.8% 6.8% 3.7% 3.1% 3.1% 2.6% 2.4%
# of IPv6 addresses: 1005
Top 10 bandwidth usage (bytes/total in %):
29.6% 27.1% 25.9% 25.9% 6.9% 6.4% 4.8% 3.2% 3.1% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812131400.pktlen.png)
detailed numbers
[ 32- 63]: 3046368
[ 64- 127]: 2774347
[ 128- 255]: 606262
[ 256- 511]: 422182
[ 512- 1023]: 427983
[ 1024- 2047]: 5348481
Protocol Breakdown
![[protocol breakdown chart]](200812131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12625623 (100.00%) 8668403337 (100.00%) 686.57
ip 12572159 ( 99.58%) 8662408735 ( 99.93%) 689.02
tcp 10301790 ( 81.59%) 7880150587 ( 90.91%) 764.93
http(s) 4473212 ( 35.43%) 6022666468 ( 69.48%) 1346.39
http(c) 2759290 ( 21.85%) 259272008 ( 2.99%) 93.96
squid 558270 ( 4.42%) 430481517 ( 4.97%) 771.10
smtp 255765 ( 2.03%) 49571484 ( 0.57%) 193.82
nntp 15 ( 0.00%) 1631 ( 0.00%) 108.73
ftp 118642 ( 0.94%) 106200548 ( 1.23%) 895.13
pop3 46393 ( 0.37%) 10223803 ( 0.12%) 220.37
imap 3531 ( 0.03%) 992008 ( 0.01%) 280.94
telnet 1446 ( 0.01%) 150395 ( 0.00%) 104.01
ssh 127062 ( 1.01%) 16633883 ( 0.19%) 130.91
dns 2418 ( 0.02%) 207247 ( 0.00%) 85.71
bgp 144 ( 0.00%) 47669 ( 0.00%) 331.03
napster 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 72616 ( 0.58%) 34125121 ( 0.39%) 469.94
icecast 578 ( 0.00%) 46146 ( 0.00%) 79.84
hotline 8 ( 0.00%) 1329 ( 0.00%) 166.12
other 1882394 ( 14.91%) 949528968 ( 10.95%) 504.43
udp 1912151 ( 15.15%) 749265597 ( 8.64%) 391.84
dns 883565 ( 7.00%) 180333037 ( 2.08%) 204.10
realaud 56140 ( 0.44%) 28147226 ( 0.32%) 501.38
halflif 17 ( 0.00%) 2281 ( 0.00%) 134.18
starcra 79 ( 0.00%) 7599 ( 0.00%) 96.19
everque 63 ( 0.00%) 11979 ( 0.00%) 190.14
unreal 61 ( 0.00%) 14474 ( 0.00%) 237.28
quake 3 ( 0.00%) 385 ( 0.00%) 128.33
other 972165 ( 7.70%) 540713886 ( 6.24%) 556.20
icmp 348355 ( 2.76%) 31758060 ( 0.37%) 91.17
ipip 300 ( 0.00%) 35738 ( 0.00%) 119.13
ipsec 8 ( 0.00%) 1264 ( 0.00%) 158.00
ip6 850 ( 0.01%) 103882 ( 0.00%) 122.21
other 8705 ( 0.07%) 1093607 ( 0.01%) 125.63
frag 25209 ( 0.20%) 23868952 ( 0.28%) 946.84
ip6 53462 ( 0.42%) 5994482 ( 0.07%) 112.13
tcp6 38219 ( 0.30%) 3865406 ( 0.04%) 101.14
http(s) 142 ( 0.00%) 77733 ( 0.00%) 547.42
http(c) 19546 ( 0.15%) 1873569 ( 0.02%) 95.85
squid 1 ( 0.00%) 86 ( 0.00%) 86.00
smtp 132 ( 0.00%) 32253 ( 0.00%) 244.34
ssh 15784 ( 0.13%) 1584515 ( 0.02%) 100.39
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 385 ( 0.00%) 34166 ( 0.00%) 88.74
other 2222 ( 0.02%) 262449 ( 0.00%) 118.11
udp6 11006 ( 0.09%) 1538771 ( 0.02%) 139.81
dns 10984 ( 0.09%) 1536367 ( 0.02%) 139.87
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 4188 ( 0.03%) 569428 ( 0.01%) 135.97
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 18 ( 0.00%) 16661 ( 0.00%) 925.61
tcpdump file: 200812131400.dump.gz (304.36 MB)