Traffic Trace Info
DumpFile: 200812311400.dump
FileSize: 1086.25MB
Id: 200812311400
StartTime: Wed Dec 31 14:00:01 2008
EndTime: Wed Dec 31 14:15:01 2008
TotalTime: 899.91 seconds
TotalCapSize: 852.16MB CapLen: 96 bytes
# of packets: 15340486 (11080.35MB)
AvgRate: 103.29Mbps stddev:16.26M
IP flow (unique src/dst pair) Information
# of flows: 539338 (avg. 28.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 5.0% 4.9% 4.7% 2.6% 1.9% 1.8% 1.6% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 323487
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.8% 8.9% 7.9% 6.6% 6.3% 5.7% 5.2% 3.8% 3.0%
# of IPv6 addresses: 996
Top 10 bandwidth usage (bytes/total in %):
99.6% 50.1% 49.5% 0.2% 0.2% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200812311400.pktlen.png)
detailed numbers
[ 32- 63]: 2966230
[ 64- 127]: 3622137
[ 128- 255]: 687459
[ 256- 511]: 360568
[ 512- 1023]: 435720
[ 1024- 2047]: 7268372
Protocol Breakdown
![[protocol breakdown chart]](200812311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15340486 (100.00%) 11618594005 (100.00%) 757.38
ip 14543473 ( 94.80%) 10458105945 ( 90.01%) 719.09
tcp 11410888 ( 74.38%) 9637374981 ( 82.95%) 844.58
http(s) 5333717 ( 34.77%) 7179706469 ( 61.79%) 1346.10
http(c) 2416068 ( 15.75%) 219350180 ( 1.89%) 90.79
squid 461406 ( 3.01%) 344905316 ( 2.97%) 747.51
smtp 329664 ( 2.15%) 70170529 ( 0.60%) 212.85
nntp 4096 ( 0.03%) 295064 ( 0.00%) 72.04
ftp 94889 ( 0.62%) 38031400 ( 0.33%) 400.80
pop3 10211 ( 0.07%) 2413042 ( 0.02%) 236.32
imap 14804 ( 0.10%) 17317377 ( 0.15%) 1169.78
telnet 2147 ( 0.01%) 289408 ( 0.00%) 134.80
ssh 169463 ( 1.10%) 57568094 ( 0.50%) 339.71
dns 1386 ( 0.01%) 115821 ( 0.00%) 83.56
bgp 141 ( 0.00%) 42199 ( 0.00%) 299.28
realaud 84 ( 0.00%) 9994 ( 0.00%) 118.98
rtsp 3306 ( 0.02%) 333067 ( 0.00%) 100.75
icecast 791 ( 0.01%) 69880 ( 0.00%) 88.34
other 2568713 ( 16.74%) 1706757021 ( 14.69%) 664.44
udp 2569739 ( 16.75%) 770930051 ( 6.64%) 300.00
dns 1212632 ( 7.90%) 210368027 ( 1.81%) 173.48
realaud 1456 ( 0.01%) 89227 ( 0.00%) 61.28
halflif 32 ( 0.00%) 3126 ( 0.00%) 97.69
starcra 25 ( 0.00%) 4186 ( 0.00%) 167.44
everque 56 ( 0.00%) 10249 ( 0.00%) 183.02
unreal 11 ( 0.00%) 1795 ( 0.00%) 163.18
quake 11 ( 0.00%) 1146 ( 0.00%) 104.18
cuseeme 5 ( 0.00%) 512 ( 0.00%) 102.40
other 1355460 ( 8.84%) 560410729 ( 4.82%) 413.45
icmp 540384 ( 3.52%) 46574196 ( 0.40%) 86.19
ipip 351 ( 0.00%) 41230 ( 0.00%) 117.46
ipsec 72 ( 0.00%) 11376 ( 0.00%) 158.00
ip6 1459 ( 0.01%) 586615 ( 0.01%) 402.07
other 20580 ( 0.13%) 2587496 ( 0.02%) 125.73
frag 103089 ( 0.67%) 78755040 ( 0.68%) 763.95
ip6 797013 ( 5.20%) 1160488060 ( 9.99%) 1456.05
tcp6 780457 ( 5.09%) 1158123371 ( 9.97%) 1483.90
http(s) 2186 ( 0.01%) 1923903 ( 0.02%) 880.10
http(c) 2288 ( 0.01%) 217189 ( 0.00%) 94.93
smtp 315 ( 0.00%) 95664 ( 0.00%) 303.70
ftp 34 ( 0.00%) 3136 ( 0.00%) 92.24
pop3 62 ( 0.00%) 5075 ( 0.00%) 81.85
ssh 12 ( 0.00%) 1736 ( 0.00%) 144.67
bgp 380 ( 0.00%) 32726 ( 0.00%) 86.12
other 775180 ( 5.05%) 1155843942 ( 9.95%) 1491.07
udp6 10093 ( 0.07%) 1550703 ( 0.01%) 153.64
dns 10042 ( 0.07%) 1545112 ( 0.01%) 153.86
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
other 48 ( 0.00%) 5280 ( 0.00%) 110.00
icmp6 6430 ( 0.04%) 807516 ( 0.01%) 125.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 2254 ( 0.00%) 1127.00
tcpdump file: 200812311400.dump.gz (363.17 MB)