Traffic Trace Info
DumpFile: 200912081400.dump
FileSize: 1890.31MB
Id: 200912081400
StartTime: Tue Dec 8 14:00:00 2009
EndTime: Tue Dec 8 14:15:01 2009
TotalTime: 900.67 seconds
TotalCapSize: 1486.49MB CapLen: 96 bytes
# of packets: 26464211 (17122.13MB)
AvgRate: 159.48Mbps stddev:17.19M
IP flow (unique src/dst pair) Information
# of flows: 865349 (avg. 30.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.9% 1.8% 1.6% 1.5% 1.2% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 525823
Top 10 bandwidth usage (bytes/total in %):
16.0% 7.3% 4.6% 4.0% 2.9% 2.8% 2.6% 2.5% 2.3% 2.1%
# of IPv6 addresses: 953
Top 10 bandwidth usage (bytes/total in %):
25.9% 12.9% 11.4% 11.4% 6.6% 6.3% 5.2% 5.1% 4.4% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912081400.pktlen.png)
detailed numbers
[ 32- 63]: 6036578
[ 64- 127]: 6981844
[ 128- 255]: 1082532
[ 256- 511]: 590971
[ 512- 1023]: 649404
[ 1024- 2047]: 11122882
Protocol Breakdown
![[protocol breakdown chart]](200912081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26464211 (100.00%) 17953854002 (100.00%) 678.42
ip 26424183 ( 99.85%) 17946865866 ( 99.96%) 679.18
tcp 22533503 ( 85.15%) 16393807092 ( 91.31%) 727.53
http(s) 9240535 ( 34.92%) 12140606003 ( 67.62%) 1313.84
http(c) 6898561 ( 26.07%) 913432556 ( 5.09%) 132.41
squid 281113 ( 1.06%) 83071958 ( 0.46%) 295.51
smtp 222043 ( 0.84%) 105303306 ( 0.59%) 474.25
nntp 55 ( 0.00%) 5146 ( 0.00%) 93.56
ftp 40468 ( 0.15%) 14803858 ( 0.08%) 365.82
pop3 17857 ( 0.07%) 5979135 ( 0.03%) 334.83
imap 3502 ( 0.01%) 735053 ( 0.00%) 209.90
telnet 2862 ( 0.01%) 214356 ( 0.00%) 74.90
ssh 168142 ( 0.64%) 59396184 ( 0.33%) 353.25
dns 18517 ( 0.07%) 7347751 ( 0.04%) 396.81
bgp 135 ( 0.00%) 42395 ( 0.00%) 314.04
napster 686 ( 0.00%) 260015 ( 0.00%) 379.03
realaud 22 ( 0.00%) 2099 ( 0.00%) 95.41
rtsp 247650 ( 0.94%) 20550164 ( 0.11%) 82.98
icecast 31076 ( 0.12%) 17185705 ( 0.10%) 553.02
hotline 15 ( 0.00%) 1825 ( 0.00%) 121.67
other 5360246 ( 20.25%) 3024868503 ( 16.85%) 564.32
udp 3330963 ( 12.59%) 1507263526 ( 8.40%) 452.50
dns 1241955 ( 4.69%) 183865997 ( 1.02%) 148.05
realaud 1468 ( 0.01%) 90605 ( 0.00%) 61.72
halflif 68 ( 0.00%) 5422 ( 0.00%) 79.74
starcra 191 ( 0.00%) 27886 ( 0.00%) 146.00
everque 151 ( 0.00%) 36097 ( 0.00%) 239.05
unreal 27 ( 0.00%) 3751 ( 0.00%) 138.93
quake 12 ( 0.00%) 1124 ( 0.00%) 93.67
cuseeme 6 ( 0.00%) 460 ( 0.00%) 76.67
other 2086965 ( 7.89%) 1323115524 ( 7.37%) 633.99
icmp 503470 ( 1.90%) 38069473 ( 0.21%) 75.61
ipip 317 ( 0.00%) 38716 ( 0.00%) 122.13
ipsec 36 ( 0.00%) 4856 ( 0.00%) 134.89
ip6 49446 ( 0.19%) 6540860 ( 0.04%) 132.28
other 6448 ( 0.02%) 1141343 ( 0.01%) 177.01
frag 1138 ( 0.00%) 1175938 ( 0.01%) 1033.34
ip6 40026 ( 0.15%) 6988016 ( 0.04%) 174.59
tcp6 15711 ( 0.06%) 2630932 ( 0.01%) 167.46
http(s) 144 ( 0.00%) 117744 ( 0.00%) 817.67
http(c) 3585 ( 0.01%) 324993 ( 0.00%) 90.65
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 711 ( 0.00%) 370527 ( 0.00%) 521.14
ftp 4653 ( 0.02%) 464857 ( 0.00%) 99.90
ssh 26 ( 0.00%) 2864 ( 0.00%) 110.15
dns 6 ( 0.00%) 2601 ( 0.00%) 433.50
bgp 108 ( 0.00%) 13868 ( 0.00%) 128.41
other 6475 ( 0.02%) 1333224 ( 0.01%) 205.90
udp6 19655 ( 0.07%) 3802046 ( 0.02%) 193.44
dns 19532 ( 0.07%) 3784122 ( 0.02%) 193.74
other 123 ( 0.00%) 17924 ( 0.00%) 145.72
icmp6 4601 ( 0.02%) 523757 ( 0.00%) 113.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 29 ( 0.00%) 27201 ( 0.00%) 937.97
tcpdump file: 200912081400.dump.gz (668.54 MB)