Traffic Trace Info
DumpFile: 200912071400.dump
FileSize: 1652.24MB
Id: 200912071400
StartTime: Mon Dec 7 14:00:00 2009
EndTime: Mon Dec 7 14:15:00 2009
TotalTime: 900.34 seconds
TotalCapSize: 1293.48MB CapLen: 96 bytes
# of packets: 23510917 (15475.02MB)
AvgRate: 144.16Mbps stddev:19.44M
IP flow (unique src/dst pair) Information
# of flows: 905477 (avg. 25.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.2% 1.4% 1.3% 1.3% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 526928
Top 10 bandwidth usage (bytes/total in %):
4.9% 4.3% 3.7% 3.1% 3.1% 2.3% 2.3% 2.3% 2.1% 2.1%
# of IPv6 addresses: 979
Top 10 bandwidth usage (bytes/total in %):
26.6% 13.5% 7.0% 6.8% 5.5% 4.9% 4.9% 4.8% 4.8% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912071400.pktlen.png)
detailed numbers
[ 32- 63]: 5648133
[ 64- 127]: 5876861
[ 128- 255]: 804210
[ 256- 511]: 542922
[ 512- 1023]: 610490
[ 1024- 2047]: 10028301
Protocol Breakdown
![[protocol breakdown chart]](200912071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23510917 (100.00%) 16226732027 (100.00%) 690.18
ip 23468871 ( 99.82%) 16219947250 ( 99.96%) 691.13
tcp 19621527 ( 83.46%) 15171112878 ( 93.49%) 773.19
http(s) 7857868 ( 33.42%) 10431934898 ( 64.29%) 1327.58
http(c) 5740891 ( 24.42%) 888352203 ( 5.47%) 154.74
squid 297670 ( 1.27%) 86071442 ( 0.53%) 289.15
smtp 214083 ( 0.91%) 81471393 ( 0.50%) 380.56
nntp 421 ( 0.00%) 26670 ( 0.00%) 63.35
ftp 39931 ( 0.17%) 10299699 ( 0.06%) 257.94
pop3 17654 ( 0.08%) 5093418 ( 0.03%) 288.51
imap 2824 ( 0.01%) 432530 ( 0.00%) 153.16
telnet 5197 ( 0.02%) 376335 ( 0.00%) 72.41
ssh 102265 ( 0.43%) 22308406 ( 0.14%) 218.14
dns 20971 ( 0.09%) 9836097 ( 0.06%) 469.03
bgp 137 ( 0.00%) 42843 ( 0.00%) 312.72
napster 183 ( 0.00%) 15496 ( 0.00%) 84.68
realaud 59 ( 0.00%) 5734 ( 0.00%) 97.19
rtsp 287826 ( 1.22%) 53963644 ( 0.33%) 187.49
icecast 6512 ( 0.03%) 447839 ( 0.00%) 68.77
hotline 5 ( 0.00%) 730 ( 0.00%) 146.00
other 5027025 ( 21.38%) 3580433201 ( 22.07%) 712.24
udp 3127739 ( 13.30%) 957158438 ( 5.90%) 306.02
dns 1030029 ( 4.38%) 189611983 ( 1.17%) 184.08
realaud 315 ( 0.00%) 20272 ( 0.00%) 64.36
halflif 80 ( 0.00%) 6715 ( 0.00%) 83.94
starcra 59 ( 0.00%) 8224 ( 0.00%) 139.39
everque 405 ( 0.00%) 161340 ( 0.00%) 398.37
unreal 58 ( 0.00%) 10483 ( 0.00%) 180.74
quake 48 ( 0.00%) 6788 ( 0.00%) 141.42
cuseeme 4 ( 0.00%) 388 ( 0.00%) 97.00
other 2094574 ( 8.91%) 766956987 ( 4.73%) 366.16
icmp 623368 ( 2.65%) 46071111 ( 0.28%) 73.91
ipip 348 ( 0.00%) 42711 ( 0.00%) 122.73
ipsec 48 ( 0.00%) 6984 ( 0.00%) 145.50
ip6 59970 ( 0.26%) 23137996 ( 0.14%) 385.83
other 35871 ( 0.15%) 22417132 ( 0.14%) 624.94
frag 11064 ( 0.05%) 8729604 ( 0.05%) 789.01
ip6 42044 ( 0.18%) 6784657 ( 0.04%) 161.37
tcp6 16062 ( 0.07%) 2020217 ( 0.01%) 125.78
http(s) 40 ( 0.00%) 18245 ( 0.00%) 456.12
http(c) 2539 ( 0.01%) 235254 ( 0.00%) 92.66
smtp 719 ( 0.00%) 343354 ( 0.00%) 477.54
ftp 5126 ( 0.02%) 525658 ( 0.00%) 102.55
ssh 1919 ( 0.01%) 366138 ( 0.00%) 190.80
bgp 99 ( 0.00%) 12570 ( 0.00%) 126.97
other 5620 ( 0.02%) 518998 ( 0.00%) 92.35
udp6 21083 ( 0.09%) 4157364 ( 0.03%) 197.19
dns 21042 ( 0.09%) 4151997 ( 0.03%) 197.32
other 41 ( 0.00%) 5367 ( 0.00%) 130.90
icmp6 4849 ( 0.02%) 581537 ( 0.00%) 119.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 21459 ( 0.00%) 1072.95
tcpdump file: 200912071400.dump.gz (561.47 MB)