Traffic Trace Info
DumpFile: 200912061400.dump
FileSize: 797.66MB
Id: 200912061400
StartTime: Sun Dec 6 14:00:00 2009
EndTime: Sun Dec 6 14:15:00 2009
TotalTime: 899.90 seconds
TotalCapSize: 621.56MB CapLen: 96 bytes
# of packets: 11540110 (7332.30MB)
AvgRate: 68.35Mbps stddev:12.26M
IP flow (unique src/dst pair) Information
# of flows: 501366 (avg. 23.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 2.2% 2.2% 2.1% 1.7% 1.4% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 338370
Top 10 bandwidth usage (bytes/total in %):
6.2% 4.7% 4.1% 4.0% 3.9% 3.1% 2.9% 2.9% 2.7% 2.6%
# of IPv6 addresses: 731
Top 10 bandwidth usage (bytes/total in %):
37.3% 10.1% 9.7% 7.6% 7.2% 5.5% 5.3% 4.9% 4.6% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912061400.pktlen.png)
detailed numbers
[ 32- 63]: 2998972
[ 64- 127]: 2640711
[ 128- 255]: 579988
[ 256- 511]: 324579
[ 512- 1023]: 210445
[ 1024- 2047]: 4785415
Protocol Breakdown
![[protocol breakdown chart]](200912061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11540110 (100.00%) 7688478148 (100.00%) 666.24
ip 11509385 ( 99.73%) 7683631476 ( 99.94%) 667.60
tcp 9231016 ( 79.99%) 6951083519 ( 90.41%) 753.01
http(s) 3717570 ( 32.21%) 5083598196 ( 66.12%) 1367.45
http(c) 1562646 ( 13.54%) 128844855 ( 1.68%) 82.45
squid 527788 ( 4.57%) 112919308 ( 1.47%) 213.95
smtp 47217 ( 0.41%) 9584349 ( 0.12%) 202.99
ftp 35432 ( 0.31%) 10780835 ( 0.14%) 304.27
pop3 4459 ( 0.04%) 3113783 ( 0.04%) 698.31
imap 351 ( 0.00%) 81416 ( 0.00%) 231.95
telnet 3431 ( 0.03%) 254536 ( 0.00%) 74.19
ssh 17736 ( 0.15%) 4426638 ( 0.06%) 249.58
dns 14280 ( 0.12%) 10336334 ( 0.13%) 723.83
bgp 140 ( 0.00%) 34490 ( 0.00%) 246.36
napster 52 ( 0.00%) 3204 ( 0.00%) 61.62
realaud 10 ( 0.00%) 608 ( 0.00%) 60.80
rtsp 2154 ( 0.02%) 1387897 ( 0.02%) 644.33
icecast 229 ( 0.00%) 30866 ( 0.00%) 134.79
hotline 23 ( 0.00%) 2111 ( 0.00%) 91.78
other 3297498 ( 28.57%) 1585684093 ( 20.62%) 480.87
udp 1920919 ( 16.65%) 701899437 ( 9.13%) 365.40
dns 754931 ( 6.54%) 109756447 ( 1.43%) 145.39
realaud 24 ( 0.00%) 2771 ( 0.00%) 115.46
halflif 47 ( 0.00%) 4575 ( 0.00%) 97.34
starcra 58 ( 0.00%) 9659 ( 0.00%) 166.53
everque 306 ( 0.00%) 53393 ( 0.00%) 174.49
unreal 25 ( 0.00%) 3781 ( 0.00%) 151.24
quake 40 ( 0.00%) 6463 ( 0.00%) 161.57
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 1165246 ( 10.10%) 591860007 ( 7.70%) 507.93
icmp 313682 ( 2.72%) 24437755 ( 0.32%) 77.91
ipip 319 ( 0.00%) 39098 ( 0.00%) 122.56
ip6 42053 ( 0.36%) 5866776 ( 0.08%) 139.51
other 1396 ( 0.01%) 304891 ( 0.00%) 218.40
frag 1902 ( 0.02%) 1922890 ( 0.03%) 1010.98
ip6 30725 ( 0.27%) 4846672 ( 0.06%) 157.74
tcp6 10053 ( 0.09%) 1511517 ( 0.02%) 150.35
http(s) 302 ( 0.00%) 268585 ( 0.00%) 889.35
http(c) 3362 ( 0.03%) 305950 ( 0.00%) 91.00
smtp 750 ( 0.01%) 372333 ( 0.00%) 496.44
ftp 2699 ( 0.02%) 277861 ( 0.00%) 102.95
ssh 12 ( 0.00%) 1672 ( 0.00%) 139.33
dns 6 ( 0.00%) 593 ( 0.00%) 98.83
bgp 98 ( 0.00%) 12092 ( 0.00%) 123.39
other 2824 ( 0.02%) 272431 ( 0.00%) 96.47
udp6 16086 ( 0.14%) 2792096 ( 0.04%) 173.57
dns 16078 ( 0.14%) 2791216 ( 0.04%) 173.60
other 8 ( 0.00%) 880 ( 0.00%) 110.00
icmp6 4543 ( 0.04%) 525703 ( 0.01%) 115.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 13276 ( 0.00%) 1021.23
tcpdump file: 200912061400.dump.gz (273.21 MB)