Traffic Trace Info
DumpFile: 200812151400.dump
FileSize: 1253.73MB
Id: 200812151400
StartTime: Mon Dec 15 14:00:01 2008
EndTime: Mon Dec 15 14:15:00 2008
TotalTime: 899.45 seconds
TotalCapSize: 974.58MB CapLen: 96 bytes
# of packets: 18293349 (12619.01MB)
AvgRate: 117.69Mbps stddev:16.52M
IP flow (unique src/dst pair) Information
# of flows: 587284 (avg. 31.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.6% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 352062
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.4% 6.1% 5.7% 5.2% 3.3% 3.3% 2.8% 2.6% 2.3%
# of IPv6 addresses: 1050
Top 10 bandwidth usage (bytes/total in %):
27.7% 25.8% 11.0% 11.0% 10.3% 7.6% 5.0% 3.6% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812151400.pktlen.png)
detailed numbers
[ 32- 63]: 4554243
[ 64- 127]: 3676583
[ 128- 255]: 740546
[ 256- 511]: 599573
[ 512- 1023]: 504811
[ 1024- 2047]: 8217593
Protocol Breakdown
![[protocol breakdown chart]](200812151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18293349 (100.00%) 13231986853 (100.00%) 723.32
ip 18250030 ( 99.76%) 13225640264 ( 99.95%) 724.69
tcp 15107940 ( 82.59%) 12127264586 ( 91.65%) 802.71
http(s) 6211270 ( 33.95%) 8418182812 ( 63.62%) 1355.31
http(c) 4016965 ( 21.96%) 495005385 ( 3.74%) 123.23
squid 484639 ( 2.65%) 253951045 ( 1.92%) 524.00
smtp 348310 ( 1.90%) 115256715 ( 0.87%) 330.90
nntp 235 ( 0.00%) 25666 ( 0.00%) 109.22
ftp 311008 ( 1.70%) 262022049 ( 1.98%) 842.49
pop3 19254 ( 0.11%) 4130465 ( 0.03%) 214.53
imap 11316 ( 0.06%) 2666987 ( 0.02%) 235.68
telnet 125 ( 0.00%) 10895 ( 0.00%) 87.16
ssh 28299 ( 0.15%) 5099793 ( 0.04%) 180.21
dns 12224 ( 0.07%) 9792518 ( 0.07%) 801.09
bgp 145 ( 0.00%) 51501 ( 0.00%) 355.18
napster 15 ( 0.00%) 984 ( 0.00%) 65.60
realaud 27 ( 0.00%) 1662 ( 0.00%) 61.56
rtsp 206164 ( 1.13%) 98017734 ( 0.74%) 475.44
icecast 6718 ( 0.04%) 417114 ( 0.00%) 62.09
other 3451226 ( 18.87%) 2462631261 ( 18.61%) 713.55
udp 2253614 ( 12.32%) 818740579 ( 6.19%) 363.30
dns 881201 ( 4.82%) 199592612 ( 1.51%) 226.50
realaud 2019 ( 0.01%) 306592 ( 0.00%) 151.85
halflif 29 ( 0.00%) 4090 ( 0.00%) 141.03
starcra 70 ( 0.00%) 12674 ( 0.00%) 181.06
everque 2839 ( 0.02%) 730146 ( 0.01%) 257.18
unreal 45 ( 0.00%) 12442 ( 0.00%) 276.49
quake 11 ( 0.00%) 1391 ( 0.00%) 126.45
cuseeme 6 ( 0.00%) 632 ( 0.00%) 105.33
other 1367207 ( 7.47%) 618030711 ( 4.67%) 452.04
icmp 318539 ( 1.74%) 29379565 ( 0.22%) 92.23
ipip 314 ( 0.00%) 36948 ( 0.00%) 117.67
ipsec 452134 ( 2.47%) 226709948 ( 1.71%) 501.42
ip6 852 ( 0.00%) 104188 ( 0.00%) 122.29
other 116637 ( 0.64%) 23404450 ( 0.18%) 200.66
frag 10922 ( 0.06%) 12791529 ( 0.10%) 1171.17
ip6 43317 ( 0.24%) 6346469 ( 0.05%) 146.51
tcp6 22172 ( 0.12%) 3184319 ( 0.02%) 143.62
http(s) 723 ( 0.00%) 967817 ( 0.01%) 1338.61
http(c) 18888 ( 0.10%) 1793340 ( 0.01%) 94.95
smtp 715 ( 0.00%) 222106 ( 0.00%) 310.64
ssh 198 ( 0.00%) 30340 ( 0.00%) 153.23
dns 7 ( 0.00%) 638 ( 0.00%) 91.14
bgp 371 ( 0.00%) 31917 ( 0.00%) 86.03
other 1270 ( 0.01%) 138161 ( 0.00%) 108.79
udp6 16732 ( 0.09%) 2517115 ( 0.02%) 150.44
dns 16661 ( 0.09%) 2509291 ( 0.02%) 150.61
halflif 1 ( 0.00%) 121 ( 0.00%) 121.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 116 ( 0.00%) 116.00
other 68 ( 0.00%) 7480 ( 0.00%) 110.00
icmp6 4369 ( 0.02%) 628350 ( 0.00%) 143.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 12605 ( 0.00%) 900.36
tcpdump file: 200812151400.dump.gz (442.13 MB)