Traffic Trace Info
DumpFile: 200812171400.dump
FileSize: 1813.29MB
Id: 200812171400
StartTime: Wed Dec 17 14:00:00 2008
EndTime: Wed Dec 17 14:15:01 2008
TotalTime: 900.62 seconds
TotalCapSize: 1410.74MB CapLen: 96 bytes
# of packets: 26380872 (17104.67MB)
AvgRate: 159.31Mbps stddev:22.16M
IP flow (unique src/dst pair) Information
# of flows: 679228 (avg. 38.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.5% 1.5% 1.4% 1.4% 1.4% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 375386
Top 10 bandwidth usage (bytes/total in %):
15.1% 11.6% 8.1% 4.1% 3.9% 2.7% 2.4% 2.1% 2.0% 1.7%
# of IPv6 addresses: 1122
Top 10 bandwidth usage (bytes/total in %):
93.4% 67.6% 25.9% 1.8% 1.7% 0.7% 0.5% 0.3% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812171400.pktlen.png)
detailed numbers
[ 32- 63]: 5731169
[ 64- 127]: 5568483
[ 128- 255]: 2608645
[ 256- 511]: 805586
[ 512- 1023]: 786780
[ 1024- 2047]: 10880209
Protocol Breakdown
![[protocol breakdown chart]](200812171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26380872 (100.00%) 17935545270 (100.00%) 679.87
ip 26277193 ( 99.61%) 17836884534 ( 99.45%) 678.80
tcp 20948418 ( 79.41%) 16668845903 ( 92.94%) 795.71
http(s) 9041897 ( 34.27%) 12201103481 ( 68.03%) 1349.40
http(c) 6851958 ( 25.97%) 1465726206 ( 8.17%) 213.91
squid 508409 ( 1.93%) 287825535 ( 1.60%) 566.13
smtp 390444 ( 1.48%) 86950992 ( 0.48%) 222.70
nntp 103 ( 0.00%) 56650 ( 0.00%) 550.00
ftp 74033 ( 0.28%) 49086333 ( 0.27%) 663.03
pop3 19744 ( 0.07%) 4564509 ( 0.03%) 231.18
imap 13710 ( 0.05%) 1363697 ( 0.01%) 99.47
telnet 1757 ( 0.01%) 248563 ( 0.00%) 141.47
ssh 127680 ( 0.48%) 99421216 ( 0.55%) 778.67
dns 2304 ( 0.01%) 423395 ( 0.00%) 183.77
bgp 179 ( 0.00%) 75379 ( 0.00%) 421.11
napster 38 ( 0.00%) 4667 ( 0.00%) 122.82
realaud 92 ( 0.00%) 10817 ( 0.00%) 117.58
rtsp 82236 ( 0.31%) 29036799 ( 0.16%) 353.09
icecast 37313 ( 0.14%) 38135005 ( 0.21%) 1022.03
hotline 6 ( 0.00%) 1460 ( 0.00%) 243.33
other 3796512 ( 14.39%) 2404811019 ( 13.41%) 633.43
udp 4827435 ( 18.30%) 1115218131 ( 6.22%) 231.02
dns 1605353 ( 6.09%) 216466931 ( 1.21%) 134.84
rip 1 ( 0.00%) 1042 ( 0.00%) 1042.00
realaud 34193 ( 0.13%) 14764534 ( 0.08%) 431.80
halflif 33 ( 0.00%) 4233 ( 0.00%) 128.27
starcra 78 ( 0.00%) 14853 ( 0.00%) 190.42
everque 145 ( 0.00%) 30168 ( 0.00%) 208.06
unreal 109 ( 0.00%) 33358 ( 0.00%) 306.04
quake 25 ( 0.00%) 2195 ( 0.00%) 87.80
cuseeme 9 ( 0.00%) 1457 ( 0.00%) 161.89
other 3183888 ( 12.07%) 882471404 ( 4.92%) 277.17
icmp 408989 ( 1.55%) 36965641 ( 0.21%) 90.38
ipip 313 ( 0.00%) 38664 ( 0.00%) 123.53
ipsec 8 ( 0.00%) 1264 ( 0.00%) 158.00
ip6 841 ( 0.00%) 102762 ( 0.00%) 122.19
other 91189 ( 0.35%) 15712169 ( 0.09%) 172.30
frag 18165 ( 0.07%) 16896297 ( 0.09%) 930.16
ip6 103679 ( 0.39%) 98660736 ( 0.55%) 951.60
tcp6 85325 ( 0.32%) 95800879 ( 0.53%) 1122.78
http(s) 1008 ( 0.00%) 1276545 ( 0.01%) 1266.41
http(c) 19535 ( 0.07%) 1851110 ( 0.01%) 94.76
smtp 942 ( 0.00%) 319348 ( 0.00%) 339.01
ftp 33 ( 0.00%) 3050 ( 0.00%) 92.42
imap 4 ( 0.00%) 503 ( 0.00%) 125.75
ssh 130 ( 0.00%) 19376 ( 0.00%) 149.05
bgp 387 ( 0.00%) 33745 ( 0.00%) 87.20
other 63286 ( 0.24%) 92297202 ( 0.51%) 1458.41
udp6 13712 ( 0.05%) 2188988 ( 0.01%) 159.64
dns 13668 ( 0.05%) 2184155 ( 0.01%) 159.80
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
other 43 ( 0.00%) 4730 ( 0.00%) 110.00
icmp6 4602 ( 0.02%) 658263 ( 0.00%) 143.04
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9 ( 0.00%) 8390 ( 0.00%) 932.22
tcpdump file: 200812171400.dump.gz (660.80 MB)