Traffic Trace Info
DumpFile: 200812271400.dump
FileSize: 1158.81MB
Id: 200812271400
StartTime: Sat Dec 27 14:00:01 2008
EndTime: Sat Dec 27 14:15:00 2008
TotalTime: 899.70 seconds
TotalCapSize: 909.41MB CapLen: 96 bytes
# of packets: 16343818 (11714.47MB)
AvgRate: 109.22Mbps stddev:15.88M
IP flow (unique src/dst pair) Information
# of flows: 572417 (avg. 28.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 3.0% 2.9% 1.9% 1.5% 1.4% 1.2% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 332901
Top 10 bandwidth usage (bytes/total in %):
15.2% 8.6% 8.3% 3.6% 3.4% 3.4% 2.8% 2.6% 2.4% 2.4%
# of IPv6 addresses: 1093
Top 10 bandwidth usage (bytes/total in %):
99.5% 71.7% 27.8% 0.2% 0.2% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812271400.pktlen.png)
detailed numbers
[ 32- 63]: 3390211
[ 64- 127]: 3775600
[ 128- 255]: 658643
[ 256- 511]: 382464
[ 512- 1023]: 458809
[ 1024- 2047]: 7678091
Protocol Breakdown
![[protocol breakdown chart]](200812271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16343818 (100.00%) 12283515326 (100.00%) 751.57
ip 15447928 ( 94.52%) 11022807066 ( 89.74%) 713.55
tcp 12717782 ( 77.81%) 10240810157 ( 83.37%) 805.24
http(s) 5619378 ( 34.38%) 7587319620 ( 61.77%) 1350.21
http(c) 2914626 ( 17.83%) 272881470 ( 2.22%) 93.62
squid 519166 ( 3.18%) 350986773 ( 2.86%) 676.06
smtp 295327 ( 1.81%) 58726625 ( 0.48%) 198.85
nntp 4127 ( 0.03%) 297287 ( 0.00%) 72.03
ftp 508154 ( 3.11%) 502123949 ( 4.09%) 988.13
pop3 16590 ( 0.10%) 5936453 ( 0.05%) 357.83
imap 3093 ( 0.02%) 822850 ( 0.01%) 266.04
telnet 681 ( 0.00%) 51926 ( 0.00%) 76.25
ssh 591261 ( 3.62%) 128290563 ( 1.04%) 216.98
dns 1445 ( 0.01%) 266343 ( 0.00%) 184.32
bgp 124 ( 0.00%) 33035 ( 0.00%) 266.41
napster 106 ( 0.00%) 9829 ( 0.00%) 92.73
realaud 20 ( 0.00%) 1542 ( 0.00%) 77.10
rtsp 137364 ( 0.84%) 109756133 ( 0.89%) 799.02
icecast 10402 ( 0.06%) 7785521 ( 0.06%) 748.46
hotline 20 ( 0.00%) 1502 ( 0.00%) 75.10
other 2095897 ( 12.82%) 1215518676 ( 9.90%) 579.95
udp 2367744 ( 14.49%) 748106934 ( 6.09%) 315.96
dns 921889 ( 5.64%) 176371972 ( 1.44%) 191.32
realaud 20051 ( 0.12%) 17229245 ( 0.14%) 859.27
halflif 36 ( 0.00%) 4927 ( 0.00%) 136.86
starcra 55 ( 0.00%) 11212 ( 0.00%) 203.85
everque 92 ( 0.00%) 16045 ( 0.00%) 174.40
unreal 20 ( 0.00%) 2880 ( 0.00%) 144.00
quake 11 ( 0.00%) 954 ( 0.00%) 86.73
cuseeme 5 ( 0.00%) 492 ( 0.00%) 98.40
other 1425432 ( 8.72%) 554341465 ( 4.51%) 388.89
icmp 354311 ( 2.17%) 32605819 ( 0.27%) 92.03
ipip 318 ( 0.00%) 38432 ( 0.00%) 120.86
ipsec 76 ( 0.00%) 12008 ( 0.00%) 158.00
ip6 1500 ( 0.01%) 406097 ( 0.00%) 270.73
other 6197 ( 0.04%) 827619 ( 0.01%) 133.55
frag 2239 ( 0.01%) 2004282 ( 0.02%) 895.17
ip6 895890 ( 5.48%) 1260708260 ( 10.26%) 1407.21
tcp6 877483 ( 5.37%) 1258019704 ( 10.24%) 1433.67
http(s) 141 ( 0.00%) 87598 ( 0.00%) 621.26
http(c) 34840 ( 0.21%) 2642590 ( 0.02%) 75.85
smtp 135 ( 0.00%) 43184 ( 0.00%) 319.88
ftp 43 ( 0.00%) 4908 ( 0.00%) 114.14
pop3 39 ( 0.00%) 3149 ( 0.00%) 80.74
ssh 10 ( 0.00%) 1548 ( 0.00%) 154.80
bgp 392 ( 0.00%) 35538 ( 0.00%) 90.66
other 841883 ( 5.15%) 1255201189 ( 10.22%) 1490.94
udp6 11294 ( 0.07%) 1755053 ( 0.01%) 155.40
dns 11266 ( 0.07%) 1751979 ( 0.01%) 155.51
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
other 27 ( 0.00%) 2970 ( 0.00%) 110.00
icmp6 7066 ( 0.04%) 911756 ( 0.01%) 129.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 17667 ( 0.00%) 1039.24
tcpdump file: 200812271400.dump.gz (397.81 MB)