Traffic Trace Info
DumpFile: 200912021400.dump
FileSize: 2102.23MB
Id: 200912021400
StartTime: Wed Dec 2 14:00:00 2009
EndTime: Wed Dec 2 14:15:00 2009
TotalTime: 899.96 seconds
TotalCapSize: 1660.78MB CapLen: 96 bytes
# of packets: 28930202 (19039.71MB)
AvgRate: 177.49Mbps stddev:18.42M
IP flow (unique src/dst pair) Information
# of flows: 1051988 (avg. 27.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.6% 1.5% 1.5% 1.4% 1.2% 1.2% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 560922
Top 10 bandwidth usage (bytes/total in %):
7.7% 7.6% 4.8% 4.1% 3.2% 3.0% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
22.3% 14.1% 14.1% 9.8% 6.7% 4.7% 4.7% 4.1% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912021400.pktlen.png)
detailed numbers
[ 32- 63]: 5613620
[ 64- 127]: 8594293
[ 128- 255]: 917969
[ 256- 511]: 724395
[ 512- 1023]: 720030
[ 1024- 2047]: 12359895
Protocol Breakdown
![[protocol breakdown chart]](200912021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28930202 (100.00%) 19964587156 (100.00%) 690.09
ip 28893286 ( 99.87%) 19956481796 ( 99.96%) 690.70
tcp 25317968 ( 87.51%) 19002942703 ( 95.18%) 750.57
http(s) 10170318 ( 35.15%) 13303529262 ( 66.64%) 1308.07
http(c) 7787724 ( 26.92%) 911105996 ( 4.56%) 116.99
squid 421060 ( 1.46%) 104446222 ( 0.52%) 248.06
smtp 279652 ( 0.97%) 126812453 ( 0.64%) 453.47
nntp 86 ( 0.00%) 5664 ( 0.00%) 65.86
ftp 42593 ( 0.15%) 19663371 ( 0.10%) 461.66
pop3 17228 ( 0.06%) 4459562 ( 0.02%) 258.86
imap 3531 ( 0.01%) 836219 ( 0.00%) 236.82
telnet 6429 ( 0.02%) 458262 ( 0.00%) 71.28
ssh 76642 ( 0.26%) 64787440 ( 0.32%) 845.33
dns 6304 ( 0.02%) 7339654 ( 0.04%) 1164.29
bgp 135 ( 0.00%) 49711 ( 0.00%) 368.23
napster 447 ( 0.00%) 157285 ( 0.00%) 351.87
realaud 24 ( 0.00%) 11806 ( 0.00%) 491.92
rtsp 229802 ( 0.79%) 76756623 ( 0.38%) 334.01
icecast 17338 ( 0.06%) 1988319 ( 0.01%) 114.68
hotline 7 ( 0.00%) 1706 ( 0.00%) 243.71
other 6258643 ( 21.63%) 4380532848 ( 21.94%) 699.92
udp 2603302 ( 9.00%) 875192630 ( 4.38%) 336.19
dns 1132247 ( 3.91%) 168291379 ( 0.84%) 148.63
realaud 1888 ( 0.01%) 114587 ( 0.00%) 60.69
halflif 350 ( 0.00%) 22945 ( 0.00%) 65.56
starcra 47 ( 0.00%) 7160 ( 0.00%) 152.34
everque 1270 ( 0.00%) 253848 ( 0.00%) 199.88
unreal 22 ( 0.00%) 3894 ( 0.00%) 177.00
quake 36 ( 0.00%) 3604 ( 0.00%) 100.11
cuseeme 7 ( 0.00%) 572 ( 0.00%) 81.71
other 1467200 ( 5.07%) 706442309 ( 3.54%) 481.49
icmp 921008 ( 3.18%) 69139113 ( 0.35%) 75.07
ipip 329 ( 0.00%) 40040 ( 0.00%) 121.70
ipsec 40 ( 0.00%) 5600 ( 0.00%) 140.00
ip6 40084 ( 0.14%) 5427904 ( 0.03%) 135.41
other 10555 ( 0.04%) 3733806 ( 0.02%) 353.75
frag 23885 ( 0.08%) 18910813 ( 0.09%) 791.74
ip6 36916 ( 0.13%) 8105360 ( 0.04%) 219.56
tcp6 8057 ( 0.03%) 3127693 ( 0.02%) 388.20
http(s) 1361 ( 0.00%) 1768445 ( 0.01%) 1299.37
http(c) 3869 ( 0.01%) 351181 ( 0.00%) 90.77
smtp 1714 ( 0.01%) 882640 ( 0.00%) 514.96
ssh 13 ( 0.00%) 1806 ( 0.00%) 138.92
dns 14 ( 0.00%) 3033 ( 0.00%) 216.64
bgp 110 ( 0.00%) 14581 ( 0.00%) 132.55
other 976 ( 0.00%) 106007 ( 0.00%) 108.61
udp6 22592 ( 0.08%) 4234519 ( 0.02%) 187.43
dns 22574 ( 0.08%) 4232511 ( 0.02%) 187.49
other 18 ( 0.00%) 2008 ( 0.00%) 111.56
icmp6 6216 ( 0.02%) 718337 ( 0.00%) 115.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 20731 ( 0.00%) 987.19
tcpdump file: 200912021400.dump.gz (707.55 MB)