Traffic Trace Info
DumpFile: 200812241400.dump
FileSize: 1215.29MB
Id: 200812241400
StartTime: Wed Dec 24 14:00:01 2008
EndTime: Wed Dec 24 14:15:00 2008
TotalTime: 899.52 seconds
TotalCapSize: 948.45MB CapLen: 96 bytes
# of packets: 17486709 (11879.91MB)
AvgRate: 110.79Mbps stddev:14.80M
IP flow (unique src/dst pair) Information
# of flows: 546423 (avg. 32.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.0% 2.3% 1.9% 1.5% 1.3% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 313210
Top 10 bandwidth usage (bytes/total in %):
10.4% 6.9% 6.0% 5.8% 5.8% 4.7% 4.1% 3.9% 3.0% 3.0%
# of IPv6 addresses: 1134
Top 10 bandwidth usage (bytes/total in %):
45.0% 43.9% 17.4% 16.0% 5.5% 5.2% 3.0% 1.8% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812241400.pktlen.png)
detailed numbers
[ 32- 63]: 3948530
[ 64- 127]: 4004927
[ 128- 255]: 802759
[ 256- 511]: 532672
[ 512- 1023]: 566601
[ 1024- 2047]: 7631220
Protocol Breakdown
![[protocol breakdown chart]](200812241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17486709 (100.00%) 12456983667 (100.00%) 712.37
ip 17437759 ( 99.72%) 12446818060 ( 99.92%) 713.79
tcp 14198612 ( 81.20%) 11334124859 ( 90.99%) 798.26
http(s) 6253538 ( 35.76%) 8510468134 ( 68.32%) 1360.90
http(c) 3958017 ( 22.63%) 534502583 ( 4.29%) 135.04
squid 581520 ( 3.33%) 223549933 ( 1.79%) 384.42
smtp 456786 ( 2.61%) 155092809 ( 1.25%) 339.53
nntp 24 ( 0.00%) 1837 ( 0.00%) 76.54
ftp 228759 ( 1.31%) 190378910 ( 1.53%) 832.22
pop3 20784 ( 0.12%) 5638479 ( 0.05%) 271.29
imap 4122 ( 0.02%) 854567 ( 0.01%) 207.32
telnet 3268 ( 0.02%) 321382 ( 0.00%) 98.34
ssh 90891 ( 0.52%) 19190773 ( 0.15%) 211.14
dns 1800 ( 0.01%) 158455 ( 0.00%) 88.03
bgp 156 ( 0.00%) 61454 ( 0.00%) 393.94
napster 17 ( 0.00%) 2415 ( 0.00%) 142.06
realaud 8 ( 0.00%) 761 ( 0.00%) 95.12
rtsp 432729 ( 2.47%) 474128249 ( 3.81%) 1095.67
icecast 10874 ( 0.06%) 14996999 ( 0.12%) 1379.16
other 2155317 ( 12.33%) 1204776957 ( 9.67%) 558.98
udp 2809315 ( 16.07%) 1071228212 ( 8.60%) 381.31
dns 1249993 ( 7.15%) 224583357 ( 1.80%) 179.67
realaud 1114 ( 0.01%) 76290 ( 0.00%) 68.48
halflif 35 ( 0.00%) 4212 ( 0.00%) 120.34
starcra 13 ( 0.00%) 2108 ( 0.00%) 162.15
everque 93 ( 0.00%) 15767 ( 0.00%) 169.54
unreal 22 ( 0.00%) 3480 ( 0.00%) 158.18
quake 13 ( 0.00%) 1398 ( 0.00%) 107.54
cuseeme 2 ( 0.00%) 463 ( 0.00%) 231.50
other 1558003 ( 8.91%) 846523352 ( 6.80%) 543.34
icmp 392409 ( 2.24%) 36384364 ( 0.29%) 92.72
ipip 331 ( 0.00%) 40788 ( 0.00%) 123.23
ipsec 81 ( 0.00%) 12446 ( 0.00%) 153.65
ip6 858 ( 0.00%) 101914 ( 0.00%) 118.78
other 36153 ( 0.21%) 4925477 ( 0.04%) 136.24
frag 1798 ( 0.01%) 1504142 ( 0.01%) 836.56
ip6 48950 ( 0.28%) 10165607 ( 0.08%) 207.67
tcp6 23481 ( 0.13%) 2753935 ( 0.02%) 117.28
http(s) 420 ( 0.00%) 367007 ( 0.00%) 873.83
http(c) 20556 ( 0.12%) 2001862 ( 0.02%) 97.39
smtp 279 ( 0.00%) 114573 ( 0.00%) 410.66
ftp 34 ( 0.00%) 3136 ( 0.00%) 92.24
ssh 10 ( 0.00%) 1564 ( 0.00%) 156.40
bgp 381 ( 0.00%) 33274 ( 0.00%) 87.33
other 1801 ( 0.01%) 232519 ( 0.00%) 129.11
udp6 12740 ( 0.07%) 1927893 ( 0.02%) 151.33
dns 12695 ( 0.07%) 1922954 ( 0.02%) 151.47
starcra 2 ( 0.00%) 209 ( 0.00%) 104.50
other 43 ( 0.00%) 4730 ( 0.00%) 110.00
icmp6 7163 ( 0.04%) 1095321 ( 0.01%) 152.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5536 ( 0.03%) 4384378 ( 0.04%) 791.98
tcpdump file: 200812241400.dump.gz (427.40 MB)