Traffic Trace Info
DumpFile: 200812141400.dump
FileSize: 790.36MB
Id: 200812141400
StartTime: Sun Dec 14 14:00:00 2008
EndTime: Sun Dec 14 14:15:00 2008
TotalTime: 900.47 seconds
TotalCapSize: 617.33MB CapLen: 96 bytes
# of packets: 11338785 (7073.93MB)
AvgRate: 65.90Mbps stddev:11.91M
IP flow (unique src/dst pair) Information
# of flows: 442228 (avg. 25.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.0% 1.8% 1.5% 1.4% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 284213
Top 10 bandwidth usage (bytes/total in %):
12.3% 8.8% 7.5% 4.6% 3.6% 3.5% 2.8% 2.8% 2.6% 2.5%
# of IPv6 addresses: 973
Top 10 bandwidth usage (bytes/total in %):
83.7% 83.7% 6.5% 6.5% 3.9% 3.6% 0.9% 0.8% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812141400.pktlen.png)
detailed numbers
[ 32- 63]: 2511256
[ 64- 127]: 3033844
[ 128- 255]: 558746
[ 256- 511]: 314201
[ 512- 1023]: 465643
[ 1024- 2047]: 4455095
Protocol Breakdown
![[protocol breakdown chart]](200812141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11338785 (100.00%) 7417550755 (100.00%) 654.18
ip 10792440 ( 95.18%) 7372751439 ( 99.40%) 683.14
tcp 8506570 ( 75.02%) 6583790001 ( 88.76%) 773.97
http(s) 3524802 ( 31.09%) 4731233784 ( 63.78%) 1342.27
http(c) 1993900 ( 17.58%) 171384950 ( 2.31%) 85.95
squid 305299 ( 2.69%) 148225949 ( 2.00%) 485.51
smtp 172954 ( 1.53%) 25068461 ( 0.34%) 144.94
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 76429 ( 0.67%) 19293857 ( 0.26%) 252.44
pop3 9131 ( 0.08%) 2281417 ( 0.03%) 249.85
imap 1921 ( 0.02%) 548370 ( 0.01%) 285.46
telnet 1100 ( 0.01%) 73342 ( 0.00%) 66.67
ssh 235005 ( 2.07%) 57632708 ( 0.78%) 245.24
dns 4650 ( 0.04%) 3241758 ( 0.04%) 697.15
bgp 138 ( 0.00%) 45132 ( 0.00%) 327.04
napster 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 33 ( 0.00%) 2046 ( 0.00%) 62.00
rtsp 90752 ( 0.80%) 121519233 ( 1.64%) 1339.03
icecast 630 ( 0.01%) 44628 ( 0.00%) 70.84
other 2089812 ( 18.43%) 1303193526 ( 17.57%) 623.59
udp 1947789 ( 17.18%) 757415020 ( 10.21%) 388.86
dns 824491 ( 7.27%) 163746009 ( 2.21%) 198.60
realaud 13510 ( 0.12%) 6727609 ( 0.09%) 497.97
halflif 4184 ( 0.04%) 442424 ( 0.01%) 105.74
starcra 26 ( 0.00%) 5780 ( 0.00%) 222.31
everque 96 ( 0.00%) 40632 ( 0.00%) 423.25
unreal 67 ( 0.00%) 22494 ( 0.00%) 335.73
quake 7 ( 0.00%) 595 ( 0.00%) 85.00
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 1105348 ( 9.75%) 586390968 ( 7.91%) 530.50
icmp 325428 ( 2.87%) 29659385 ( 0.40%) 91.14
ipip 308 ( 0.00%) 37470 ( 0.00%) 121.66
ipsec 8 ( 0.00%) 1264 ( 0.00%) 158.00
ip6 822 ( 0.01%) 100840 ( 0.00%) 122.68
other 11515 ( 0.10%) 1747459 ( 0.02%) 151.76
frag 7178 ( 0.06%) 8636708 ( 0.12%) 1203.22
ip6 546343 ( 4.82%) 44799196 ( 0.60%) 82.00
tcp6 531776 ( 4.69%) 42789107 ( 0.58%) 80.46
http(s) 167 ( 0.00%) 134849 ( 0.00%) 807.48
http(c) 19065 ( 0.17%) 1829196 ( 0.02%) 95.95
smtp 92 ( 0.00%) 20923 ( 0.00%) 227.42
ftp 19 ( 0.00%) 2210 ( 0.00%) 116.32
pop3 32 ( 0.00%) 2603 ( 0.00%) 81.34
ssh 97 ( 0.00%) 11626 ( 0.00%) 119.86
bgp 446 ( 0.00%) 44710 ( 0.00%) 100.25
other 511858 ( 4.51%) 40742990 ( 0.55%) 79.60
udp6 9806 ( 0.09%) 1369894 ( 0.02%) 139.70
dns 8515 ( 0.08%) 1271528 ( 0.02%) 149.33
other 1291 ( 0.01%) 98366 ( 0.00%) 76.19
icmp6 4722 ( 0.04%) 630392 ( 0.01%) 133.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 5587 ( 0.00%) 698.38
tcpdump file: 200812141400.dump.gz (268.73 MB)