Traffic Trace Info
DumpFile: 200812211400.dump
FileSize: 1141.88MB
Id: 200812211400
StartTime: Sun Dec 21 14:00:00 2008
EndTime: Sun Dec 21 14:15:01 2008
TotalTime: 900.85 seconds
TotalCapSize: 889.16MB CapLen: 96 bytes
# of packets: 16561332 (11922.42MB)
AvgRate: 111.03Mbps stddev:14.49M
IP flow (unique src/dst pair) Information
# of flows: 425621 (avg. 38.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.8% 2.1% 2.0% 1.5% 1.5% 1.5% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 258639
Top 10 bandwidth usage (bytes/total in %):
13.2% 9.7% 7.6% 6.9% 5.8% 5.7% 5.6% 4.5% 2.9% 2.8%
# of IPv6 addresses: 1005
Top 10 bandwidth usage (bytes/total in %):
49.7% 30.4% 18.3% 18.3% 17.1% 4.7% 4.6% 3.9% 3.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812211400.pktlen.png)
detailed numbers
[ 32- 63]: 3959454
[ 64- 127]: 3337338
[ 128- 255]: 600873
[ 256- 511]: 372142
[ 512- 1023]: 345684
[ 1024- 2047]: 7945841
Protocol Breakdown
![[protocol breakdown chart]](200812211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16561332 (100.00%) 12501558781 (100.00%) 754.86
ip 16465679 ( 99.42%) 12492026066 ( 99.92%) 758.67
tcp 13549104 ( 81.81%) 11402953667 ( 91.21%) 841.60
http(s) 5964433 ( 36.01%) 8327512091 ( 66.61%) 1396.20
http(c) 3171410 ( 19.15%) 264765392 ( 2.12%) 83.49
squid 422869 ( 2.55%) 182388130 ( 1.46%) 431.31
smtp 166175 ( 1.00%) 27241640 ( 0.22%) 163.93
ftp 48672 ( 0.29%) 4617078 ( 0.04%) 94.86
pop3 14539 ( 0.09%) 4290246 ( 0.03%) 295.09
imap 3036 ( 0.02%) 637476 ( 0.01%) 209.97
telnet 1263 ( 0.01%) 78780 ( 0.00%) 62.38
ssh 195473 ( 1.18%) 26320182 ( 0.21%) 134.65
dns 1844 ( 0.01%) 151945 ( 0.00%) 82.40
bgp 136 ( 0.00%) 36739 ( 0.00%) 270.14
napster 6107 ( 0.04%) 5596534 ( 0.04%) 916.41
realaud 26 ( 0.00%) 2566 ( 0.00%) 98.69
rtsp 67640 ( 0.41%) 68238556 ( 0.55%) 1008.85
icecast 16747 ( 0.10%) 15542808 ( 0.12%) 928.10
other 3468734 ( 20.94%) 2475533504 ( 19.80%) 713.67
udp 2489768 ( 15.03%) 1050667119 ( 8.40%) 421.99
dns 716959 ( 4.33%) 152797466 ( 1.22%) 213.12
rip 72 ( 0.00%) 10865 ( 0.00%) 150.90
realaud 24 ( 0.00%) 4202 ( 0.00%) 175.08
halflif 15 ( 0.00%) 1372 ( 0.00%) 91.47
starcra 24 ( 0.00%) 4077 ( 0.00%) 169.88
everque 128 ( 0.00%) 21179 ( 0.00%) 165.46
unreal 210 ( 0.00%) 58926 ( 0.00%) 280.60
quake 18 ( 0.00%) 1544 ( 0.00%) 85.78
cuseeme 4 ( 0.00%) 335 ( 0.00%) 83.75
other 1772272 ( 10.70%) 897729828 ( 7.18%) 506.54
icmp 420498 ( 2.54%) 37637742 ( 0.30%) 89.51
ipip 287 ( 0.00%) 32114 ( 0.00%) 111.90
ipsec 180 ( 0.00%) 28440 ( 0.00%) 158.00
ip6 902 ( 0.01%) 112064 ( 0.00%) 124.24
other 4940 ( 0.03%) 594920 ( 0.00%) 120.43
frag 1678 ( 0.01%) 1380491 ( 0.01%) 822.70
ip6 95653 ( 0.58%) 9532715 ( 0.08%) 99.66
tcp6 80683 ( 0.49%) 7360242 ( 0.06%) 91.22
http(s) 55 ( 0.00%) 22932 ( 0.00%) 416.95
http(c) 44618 ( 0.27%) 3998636 ( 0.03%) 89.62
smtp 373 ( 0.00%) 117717 ( 0.00%) 315.60
ftp 14 ( 0.00%) 1275 ( 0.00%) 91.07
ssh 12 ( 0.00%) 1736 ( 0.00%) 144.67
bgp 370 ( 0.00%) 31446 ( 0.00%) 84.99
other 35241 ( 0.21%) 3186500 ( 0.03%) 90.42
udp6 9403 ( 0.06%) 1372451 ( 0.01%) 145.96
dns 9326 ( 0.06%) 1363981 ( 0.01%) 146.26
other 77 ( 0.00%) 8470 ( 0.00%) 110.00
icmp6 5527 ( 0.03%) 785838 ( 0.01%) 142.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 10104 ( 0.00%) 1010.40
tcpdump file: 200812211400.dump.gz (389.26 MB)