Traffic Trace Info
DumpFile: 200912041400.dump
FileSize: 1948.14MB
Id: 200912041400
StartTime: Fri Dec 4 14:00:01 2009
EndTime: Fri Dec 4 14:15:01 2009
TotalTime: 900.09 seconds
TotalCapSize: 1533.29MB CapLen: 96 bytes
# of packets: 27186438 (19007.26MB)
AvgRate: 177.15Mbps stddev:16.56M
IP flow (unique src/dst pair) Information
# of flows: 848538 (avg. 32.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.7% 3.6% 2.0% 1.5% 1.5% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 490331
Top 10 bandwidth usage (bytes/total in %):
9.5% 5.7% 4.9% 4.9% 4.8% 4.4% 3.8% 3.7% 2.9% 2.7%
# of IPv6 addresses: 974
Top 10 bandwidth usage (bytes/total in %):
22.2% 10.2% 8.5% 7.3% 7.2% 5.1% 5.1% 4.1% 3.9% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912041400.pktlen.png)
detailed numbers
[ 32- 63]: 5684199
[ 64- 127]: 6835778
[ 128- 255]: 823138
[ 256- 511]: 609179
[ 512- 1023]: 710673
[ 1024- 2047]: 12523471
Protocol Breakdown
![[protocol breakdown chart]](200912041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27186438 (100.00%) 19930554708 (100.00%) 733.11
ip 27145707 ( 99.85%) 19922439057 ( 99.96%) 733.91
tcp 23689638 ( 87.14%) 18857902675 ( 94.62%) 796.04
http(s) 9542957 ( 35.10%) 12619618334 ( 63.32%) 1322.40
http(c) 6840285 ( 25.16%) 934740716 ( 4.69%) 136.65
squid 350168 ( 1.29%) 109268058 ( 0.55%) 312.04
smtp 283140 ( 1.04%) 133921748 ( 0.67%) 472.99
nntp 737 ( 0.00%) 45785 ( 0.00%) 62.12
ftp 58008 ( 0.21%) 11188479 ( 0.06%) 192.88
pop3 19509 ( 0.07%) 6676272 ( 0.03%) 342.21
imap 2702 ( 0.01%) 659915 ( 0.00%) 244.23
telnet 15952 ( 0.06%) 1171499 ( 0.01%) 73.44
ssh 76396 ( 0.28%) 25626714 ( 0.13%) 335.45
dns 4836 ( 0.02%) 5199405 ( 0.03%) 1075.15
bgp 137 ( 0.00%) 44553 ( 0.00%) 325.20
napster 256 ( 0.00%) 19655 ( 0.00%) 76.78
realaud 405 ( 0.00%) 26551 ( 0.00%) 65.56
rtsp 209000 ( 0.77%) 31567373 ( 0.16%) 151.04
icecast 13204 ( 0.05%) 1111566 ( 0.01%) 84.18
hotline 41 ( 0.00%) 4204 ( 0.00%) 102.54
other 6271900 ( 23.07%) 4977011548 ( 24.97%) 793.54
udp 2677284 ( 9.85%) 963961305 ( 4.84%) 360.05
dns 1156343 ( 4.25%) 193885606 ( 0.97%) 167.67
realaud 26 ( 0.00%) 3216 ( 0.00%) 123.69
halflif 95 ( 0.00%) 8334 ( 0.00%) 87.73
starcra 31 ( 0.00%) 4370 ( 0.00%) 140.97
everque 646 ( 0.00%) 163579 ( 0.00%) 253.22
unreal 30 ( 0.00%) 3393 ( 0.00%) 113.10
quake 26 ( 0.00%) 2853 ( 0.00%) 109.73
cuseeme 2 ( 0.00%) 198 ( 0.00%) 99.00
other 1519730 ( 5.59%) 769642074 ( 3.86%) 506.43
icmp 719300 ( 2.65%) 73408969 ( 0.37%) 102.06
ipip 352 ( 0.00%) 44404 ( 0.00%) 126.15
ipsec 119 ( 0.00%) 16498 ( 0.00%) 138.64
ip6 55340 ( 0.20%) 26094012 ( 0.13%) 471.52
other 3674 ( 0.01%) 1011194 ( 0.01%) 275.23
frag 2345 ( 0.01%) 2334045 ( 0.01%) 995.33
ip6 40731 ( 0.15%) 8115651 ( 0.04%) 199.25
tcp6 13089 ( 0.05%) 3350475 ( 0.02%) 255.98
http(s) 1732 ( 0.01%) 1465669 ( 0.01%) 846.23
http(c) 6783 ( 0.02%) 592205 ( 0.00%) 87.31
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 1471 ( 0.01%) 737485 ( 0.00%) 501.35
ssh 2142 ( 0.01%) 436260 ( 0.00%) 203.67
bgp 106 ( 0.00%) 13459 ( 0.00%) 126.97
other 852 ( 0.00%) 105143 ( 0.00%) 123.41
udp6 20141 ( 0.07%) 3957262 ( 0.02%) 196.48
dns 20115 ( 0.07%) 3954110 ( 0.02%) 196.58
other 26 ( 0.00%) 3152 ( 0.00%) 121.23
icmp6 7465 ( 0.03%) 796933 ( 0.00%) 106.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 6901 ( 0.00%) 1150.17
tcpdump file: 200912041400.dump.gz (664.60 MB)