Traffic Trace Info
DumpFile: 200912031400.dump
FileSize: 1982.98MB
Id: 200912031400
StartTime: Thu Dec 3 14:00:01 2009
EndTime: Thu Dec 3 14:15:01 2009
TotalTime: 900.27 seconds
TotalCapSize: 1557.08MB CapLen: 96 bytes
# of packets: 27911049 (18701.43MB)
AvgRate: 174.26Mbps stddev:17.09M
IP flow (unique src/dst pair) Information
# of flows: 910627 (avg. 30.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.9% 2.8% 1.5% 1.1% 1.0% 1.0% 1.0% 0.9% 0.6%
IP address Information
# of IPv4 addresses: 530653
Top 10 bandwidth usage (bytes/total in %):
7.8% 6.7% 6.0% 3.8% 3.6% 3.5% 3.4% 3.0% 2.9% 2.8%
# of IPv6 addresses: 980
Top 10 bandwidth usage (bytes/total in %):
62.0% 61.8% 17.4% 17.3% 4.7% 3.0% 3.0% 2.0% 1.9% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912031400.pktlen.png)
detailed numbers
[ 32- 63]: 6455447
[ 64- 127]: 6914401
[ 128- 255]: 891997
[ 256- 511]: 688879
[ 512- 1023]: 647884
[ 1024- 2047]: 12312441
Protocol Breakdown
![[protocol breakdown chart]](200912031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27911049 (100.00%) 19609868526 (100.00%) 702.58
ip 27786977 ( 99.56%) 19571625363 ( 99.80%) 704.35
tcp 23947571 ( 85.80%) 18280574225 ( 93.22%) 763.36
http(s) 9525812 ( 34.13%) 12129305892 ( 61.85%) 1273.31
http(c) 7400972 ( 26.52%) 1579005555 ( 8.05%) 213.35
squid 319862 ( 1.15%) 119922593 ( 0.61%) 374.92
smtp 249952 ( 0.90%) 115161025 ( 0.59%) 460.73
nntp 91 ( 0.00%) 19976 ( 0.00%) 219.52
ftp 41797 ( 0.15%) 3964001 ( 0.02%) 94.84
pop3 14149 ( 0.05%) 5901272 ( 0.03%) 417.08
imap 2435 ( 0.01%) 936124 ( 0.00%) 384.45
telnet 7384 ( 0.03%) 538085 ( 0.00%) 72.87
ssh 56620 ( 0.20%) 10991198 ( 0.06%) 194.12
dns 5378 ( 0.02%) 5840600 ( 0.03%) 1086.02
bgp 128 ( 0.00%) 41868 ( 0.00%) 327.09
napster 1113 ( 0.00%) 597686 ( 0.00%) 537.00
realaud 53 ( 0.00%) 7666 ( 0.00%) 144.64
rtsp 195864 ( 0.70%) 24951040 ( 0.13%) 127.39
icecast 25077 ( 0.09%) 16324361 ( 0.08%) 650.97
hotline 7 ( 0.00%) 1293 ( 0.00%) 184.71
other 6100876 ( 21.86%) 4267063930 ( 21.76%) 699.42
udp 3057264 ( 10.95%) 1214103595 ( 6.19%) 397.12
dns 1101716 ( 3.95%) 164939321 ( 0.84%) 149.71
realaud 37 ( 0.00%) 4174 ( 0.00%) 112.81
halflif 103 ( 0.00%) 10444 ( 0.00%) 101.40
starcra 126 ( 0.00%) 21164 ( 0.00%) 167.97
everque 313 ( 0.00%) 69326 ( 0.00%) 221.49
unreal 21 ( 0.00%) 3022 ( 0.00%) 143.90
quake 36 ( 0.00%) 3284 ( 0.00%) 91.22
cuseeme 5 ( 0.00%) 398 ( 0.00%) 79.60
other 1954455 ( 7.00%) 1048792905 ( 5.35%) 536.62
icmp 643719 ( 2.31%) 56427358 ( 0.29%) 87.66
ipip 328 ( 0.00%) 40190 ( 0.00%) 122.53
ipsec 117 ( 0.00%) 19294 ( 0.00%) 164.91
ip6 40828 ( 0.15%) 7037439 ( 0.04%) 172.37
other 97150 ( 0.35%) 13423262 ( 0.07%) 138.17
frag 1658 ( 0.01%) 1774343 ( 0.01%) 1070.17
ip6 124072 ( 0.44%) 38243163 ( 0.20%) 308.23
tcp6 97042 ( 0.35%) 33420389 ( 0.17%) 344.39
http(s) 16419 ( 0.06%) 24616000 ( 0.13%) 1499.24
http(c) 3293 ( 0.01%) 300018 ( 0.00%) 91.11
smtp 1952 ( 0.01%) 1752673 ( 0.01%) 897.89
ssh 12 ( 0.00%) 1672 ( 0.00%) 139.33
dns 15 ( 0.00%) 6021 ( 0.00%) 401.40
bgp 100 ( 0.00%) 12257 ( 0.00%) 122.57
other 75251 ( 0.27%) 6731748 ( 0.03%) 89.46
udp6 20783 ( 0.07%) 4099868 ( 0.02%) 197.27
dns 20704 ( 0.07%) 4085401 ( 0.02%) 197.32
other 79 ( 0.00%) 14467 ( 0.00%) 183.13
icmp6 6197 ( 0.02%) 699270 ( 0.00%) 112.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 19556 ( 0.00%) 977.80
tcpdump file: 200912031400.dump.gz (676.15 MB)