Traffic Trace Info
DumpFile: 200912011400.dump
FileSize: 2159.51MB
Id: 200912011400
StartTime: Tue Dec 1 14:00:01 2009
EndTime: Tue Dec 1 14:15:01 2009
TotalTime: 900.11 seconds
TotalCapSize: 1691.81MB CapLen: 96 bytes
# of packets: 30650739 (20595.83MB)
AvgRate: 191.96Mbps stddev:19.60M
IP flow (unique src/dst pair) Information
# of flows: 1129979 (avg. 27.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.6% 1.5% 1.3% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 657409
Top 10 bandwidth usage (bytes/total in %):
8.5% 6.8% 4.7% 3.9% 3.8% 3.8% 3.7% 3.5% 3.3% 2.5%
# of IPv6 addresses: 942
Top 10 bandwidth usage (bytes/total in %):
24.9% 11.8% 9.9% 5.9% 5.7% 5.1% 4.9% 3.7% 3.6% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912011400.pktlen.png)
detailed numbers
[ 32- 63]: 6884998
[ 64- 127]: 7568105
[ 128- 255]: 1283848
[ 256- 511]: 816424
[ 512- 1023]: 666284
[ 1024- 2047]: 13431080
Protocol Breakdown
![[protocol breakdown chart]](200912011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30650739 (100.00%) 21596293830 (100.00%) 704.59
ip 30615430 ( 99.88%) 21589044075 ( 99.97%) 705.17
tcp 25704502 ( 83.86%) 19377290804 ( 89.73%) 753.85
http(s) 8848465 ( 28.87%) 11215424943 ( 51.93%) 1267.50
http(c) 7443033 ( 24.28%) 1548729289 ( 7.17%) 208.08
squid 456369 ( 1.49%) 129354754 ( 0.60%) 283.44
smtp 254632 ( 0.83%) 126190647 ( 0.58%) 495.58
nntp 49 ( 0.00%) 4257 ( 0.00%) 86.88
ftp 56396 ( 0.18%) 9716698 ( 0.04%) 172.29
pop3 26395 ( 0.09%) 20688965 ( 0.10%) 783.82
imap 3513 ( 0.01%) 678180 ( 0.00%) 193.05
telnet 9036 ( 0.03%) 657649 ( 0.00%) 72.78
ssh 81268 ( 0.27%) 18239602 ( 0.08%) 224.44
dns 49338 ( 0.16%) 55018475 ( 0.25%) 1115.13
bgp 142 ( 0.00%) 49596 ( 0.00%) 349.27
napster 127 ( 0.00%) 19240 ( 0.00%) 151.50
realaud 4306 ( 0.01%) 2316975 ( 0.01%) 538.08
rtsp 319024 ( 1.04%) 98333122 ( 0.46%) 308.23
icecast 8793 ( 0.03%) 994888 ( 0.00%) 113.15
hotline 44 ( 0.00%) 3752 ( 0.00%) 85.27
other 8143568 ( 26.57%) 6150869532 ( 28.48%) 755.30
udp 4174779 ( 13.62%) 2139072635 ( 9.90%) 512.38
dns 1195510 ( 3.90%) 177216265 ( 0.82%) 148.23
realaud 1099 ( 0.00%) 83334 ( 0.00%) 75.83
halflif 115 ( 0.00%) 9638 ( 0.00%) 83.81
starcra 98 ( 0.00%) 15774 ( 0.00%) 160.96
everque 832 ( 0.00%) 111228 ( 0.00%) 133.69
unreal 25 ( 0.00%) 3694 ( 0.00%) 147.76
quake 35 ( 0.00%) 3220 ( 0.00%) 92.00
cuseeme 3 ( 0.00%) 224 ( 0.00%) 74.67
other 2974793 ( 9.71%) 1961217550 ( 9.08%) 659.28
icmp 638926 ( 2.08%) 49254985 ( 0.23%) 77.09
ipip 332 ( 0.00%) 38960 ( 0.00%) 117.35
ipsec 31 ( 0.00%) 3978 ( 0.00%) 128.32
ip6 46244 ( 0.15%) 16626312 ( 0.08%) 359.53
other 50616 ( 0.17%) 6756401 ( 0.03%) 133.48
frag 26040 ( 0.08%) 21361717 ( 0.10%) 820.34
ip6 35309 ( 0.12%) 7249755 ( 0.03%) 205.32
tcp6 7641 ( 0.02%) 1849916 ( 0.01%) 242.10
http(s) 947 ( 0.00%) 746204 ( 0.00%) 787.97
http(c) 3695 ( 0.01%) 340684 ( 0.00%) 92.20
smtp 876 ( 0.00%) 390685 ( 0.00%) 445.99
ssh 377 ( 0.00%) 174966 ( 0.00%) 464.10
dns 5 ( 0.00%) 1936 ( 0.00%) 387.20
bgp 101 ( 0.00%) 12722 ( 0.00%) 125.96
other 1640 ( 0.01%) 182719 ( 0.00%) 111.41
udp6 22350 ( 0.07%) 4782359 ( 0.02%) 213.98
dns 22286 ( 0.07%) 4770394 ( 0.02%) 214.05
other 64 ( 0.00%) 11965 ( 0.00%) 186.95
icmp6 5267 ( 0.02%) 593855 ( 0.00%) 112.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 19545 ( 0.00%) 930.71
tcpdump file: 200912011400.dump.gz (756.39 MB)