Traffic Trace Info
DumpFile: 200812251400.dump
FileSize: 1123.41MB
Id: 200812251400
StartTime: Thu Dec 25 14:00:00 2008
EndTime: Thu Dec 25 14:15:01 2008
TotalTime: 900.40 seconds
TotalCapSize: 877.25MB CapLen: 96 bytes
# of packets: 16131778 (10921.41MB)
AvgRate: 101.75Mbps stddev:12.20M
IP flow (unique src/dst pair) Information
# of flows: 594996 (avg. 27.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.7% 2.5% 2.4% 2.3% 1.6% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 372054
Top 10 bandwidth usage (bytes/total in %):
8.9% 7.5% 7.3% 6.9% 5.4% 5.4% 4.1% 3.2% 2.7% 2.6%
# of IPv6 addresses: 1088
Top 10 bandwidth usage (bytes/total in %):
44.7% 44.7% 19.8% 18.2% 5.0% 4.6% 2.7% 2.0% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812251400.pktlen.png)
detailed numbers
[ 32- 63]: 3708187
[ 64- 127]: 3677193
[ 128- 255]: 767671
[ 256- 511]: 481067
[ 512- 1023]: 401722
[ 1024- 2047]: 7095938
Protocol Breakdown
![[protocol breakdown chart]](200812251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16131778 (100.00%) 11451929546 (100.00%) 709.90
ip 16089672 ( 99.74%) 11443005308 ( 99.92%) 711.20
tcp 13351984 ( 82.77%) 10562079111 ( 92.23%) 791.05
http(s) 5266723 ( 32.65%) 7064610700 ( 61.69%) 1341.37
http(c) 3222825 ( 19.98%) 496048811 ( 4.33%) 153.92
squid 616048 ( 3.82%) 184360925 ( 1.61%) 299.26
smtp 271574 ( 1.68%) 70548333 ( 0.62%) 259.78
ftp 143689 ( 0.89%) 133941920 ( 1.17%) 932.17
pop3 24288 ( 0.15%) 5251796 ( 0.05%) 216.23
imap 2332 ( 0.01%) 405808 ( 0.00%) 174.02
telnet 1782 ( 0.01%) 143801 ( 0.00%) 80.70
ssh 321609 ( 1.99%) 81692887 ( 0.71%) 254.01
dns 1618 ( 0.01%) 133352 ( 0.00%) 82.42
bgp 134 ( 0.00%) 43285 ( 0.00%) 323.02
napster 2206 ( 0.01%) 2820694 ( 0.02%) 1278.65
realaud 32 ( 0.00%) 4814 ( 0.00%) 150.44
rtsp 35069 ( 0.22%) 9537906 ( 0.08%) 271.98
icecast 9516 ( 0.06%) 7368469 ( 0.06%) 774.32
hotline 5 ( 0.00%) 471 ( 0.00%) 94.20
other 3432533 ( 21.28%) 2505165079 ( 21.88%) 729.83
udp 2363201 ( 14.65%) 843804970 ( 7.37%) 357.06
dns 971955 ( 6.03%) 191881602 ( 1.68%) 197.42
realaud 42361 ( 0.26%) 35089132 ( 0.31%) 828.34
halflif 18 ( 0.00%) 1838 ( 0.00%) 102.11
starcra 26 ( 0.00%) 4585 ( 0.00%) 176.35
everque 54 ( 0.00%) 10627 ( 0.00%) 196.80
unreal 19 ( 0.00%) 2687 ( 0.00%) 141.42
quake 15 ( 0.00%) 1348 ( 0.00%) 89.87
cuseeme 39 ( 0.00%) 3279 ( 0.00%) 84.08
other 1348691 ( 8.36%) 616794624 ( 5.39%) 457.33
icmp 349627 ( 2.17%) 32371032 ( 0.28%) 92.59
ipip 298 ( 0.00%) 34792 ( 0.00%) 116.75
ipsec 5101 ( 0.03%) 2193566 ( 0.02%) 430.03
ip6 931 ( 0.01%) 115602 ( 0.00%) 124.17
other 18530 ( 0.11%) 2406235 ( 0.02%) 129.86
frag 1555 ( 0.01%) 1266704 ( 0.01%) 814.60
ip6 42106 ( 0.26%) 8924238 ( 0.08%) 211.95
tcp6 24485 ( 0.15%) 6221983 ( 0.05%) 254.11
http(s) 2909 ( 0.02%) 4107442 ( 0.04%) 1411.98
http(c) 19620 ( 0.12%) 1868708 ( 0.02%) 95.25
smtp 298 ( 0.00%) 67287 ( 0.00%) 225.80
ftp 34 ( 0.00%) 3136 ( 0.00%) 92.24
imap 4 ( 0.00%) 503 ( 0.00%) 125.75
ssh 10 ( 0.00%) 1564 ( 0.00%) 156.40
bgp 377 ( 0.00%) 32625 ( 0.00%) 86.54
other 1233 ( 0.01%) 140718 ( 0.00%) 114.13
udp6 12205 ( 0.08%) 1896166 ( 0.02%) 155.36
dns 12172 ( 0.08%) 1892536 ( 0.02%) 155.48
other 33 ( 0.00%) 3630 ( 0.00%) 110.00
icmp6 5366 ( 0.03%) 781320 ( 0.01%) 145.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 20689 ( 0.00%) 1034.45
tcpdump file: 200812251400.dump.gz (393.78 MB)