Traffic Trace Info
DumpFile: 200912091400.dump
FileSize: 1872.11MB
Id: 200912091400
StartTime: Wed Dec 9 14:00:01 2009
EndTime: Wed Dec 9 14:15:00 2009
TotalTime: 899.63 seconds
TotalCapSize: 1472.64MB CapLen: 96 bytes
# of packets: 26178368 (16994.64MB)
AvgRate: 158.50Mbps stddev:18.04M
IP flow (unique src/dst pair) Information
# of flows: 906506 (avg. 28.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.7% 1.4% 1.2% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 533908
Top 10 bandwidth usage (bytes/total in %):
9.6% 5.0% 4.9% 3.8% 3.7% 3.4% 3.0% 2.8% 2.4% 2.1%
# of IPv6 addresses: 988
Top 10 bandwidth usage (bytes/total in %):
49.8% 49.7% 15.9% 5.4% 3.8% 2.8% 2.3% 1.8% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912091400.pktlen.png)
detailed numbers
[ 32- 63]: 5122925
[ 64- 127]: 7540158
[ 128- 255]: 1148242
[ 256- 511]: 677012
[ 512- 1023]: 494120
[ 1024- 2047]: 11195911
Protocol Breakdown
![[protocol breakdown chart]](200912091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26178368 (100.00%) 17820176758 (100.00%) 680.72
ip 26082983 ( 99.64%) 17808840654 ( 99.94%) 682.78
tcp 21347445 ( 81.55%) 16365327258 ( 91.84%) 766.62
http(s) 9194850 ( 35.12%) 12342196134 ( 69.26%) 1342.29
http(c) 6758865 ( 25.82%) 905393799 ( 5.08%) 133.96
squid 269514 ( 1.03%) 65864348 ( 0.37%) 244.38
smtp 255618 ( 0.98%) 76351310 ( 0.43%) 298.69
nntp 37700 ( 0.14%) 2278110 ( 0.01%) 60.43
ftp 54365 ( 0.21%) 10698380 ( 0.06%) 196.79
pop3 15767 ( 0.06%) 7385965 ( 0.04%) 468.44
imap 2282 ( 0.01%) 345416 ( 0.00%) 151.37
telnet 16811 ( 0.06%) 1238381 ( 0.01%) 73.66
ssh 79204 ( 0.30%) 29121821 ( 0.16%) 367.68
dns 12779 ( 0.05%) 7514467 ( 0.04%) 588.03
bgp 137 ( 0.00%) 44577 ( 0.00%) 325.38
napster 5519 ( 0.02%) 759144 ( 0.00%) 137.55
realaud 247 ( 0.00%) 111992 ( 0.00%) 453.41
rtsp 127941 ( 0.49%) 20449948 ( 0.11%) 159.84
icecast 9836 ( 0.04%) 629826 ( 0.00%) 64.03
hotline 8 ( 0.00%) 628 ( 0.00%) 78.50
other 4505999 ( 17.21%) 2894942832 ( 16.25%) 642.46
udp 3610158 ( 13.79%) 1351821653 ( 7.59%) 374.45
dns 1421571 ( 5.43%) 201152032 ( 1.13%) 141.50
realaud 1165 ( 0.00%) 71542 ( 0.00%) 61.41
halflif 103 ( 0.00%) 8848 ( 0.00%) 85.90
starcra 102 ( 0.00%) 16581 ( 0.00%) 162.56
everque 184 ( 0.00%) 41332 ( 0.00%) 224.63
unreal 41 ( 0.00%) 6985 ( 0.00%) 170.37
quake 32 ( 0.00%) 3471 ( 0.00%) 108.47
cuseeme 7 ( 0.00%) 632 ( 0.00%) 90.29
other 2186627 ( 8.35%) 1150227722 ( 6.45%) 526.03
icmp 990786 ( 3.78%) 73125873 ( 0.41%) 73.81
ipip 325 ( 0.00%) 40076 ( 0.00%) 123.31
ipsec 31 ( 0.00%) 3978 ( 0.00%) 128.32
ip6 64048 ( 0.24%) 8252271 ( 0.05%) 128.85
other 70190 ( 0.27%) 10269545 ( 0.06%) 146.31
frag 1916 ( 0.01%) 2049766 ( 0.01%) 1069.82
ip6 95383 ( 0.36%) 11335984 ( 0.06%) 118.85
tcp6 70108 ( 0.27%) 6806055 ( 0.04%) 97.08
http(s) 155 ( 0.00%) 82542 ( 0.00%) 532.53
http(c) 3997 ( 0.02%) 361166 ( 0.00%) 90.36
smtp 1208 ( 0.00%) 614759 ( 0.00%) 508.91
ssh 98 ( 0.00%) 12475 ( 0.00%) 127.30
dns 20 ( 0.00%) 3494 ( 0.00%) 174.70
bgp 99 ( 0.00%) 12152 ( 0.00%) 122.75
other 64531 ( 0.25%) 5719467 ( 0.03%) 88.63
udp6 19907 ( 0.08%) 3897534 ( 0.02%) 195.79
dns 19847 ( 0.08%) 3890795 ( 0.02%) 196.04
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 58 ( 0.00%) 6513 ( 0.00%) 112.29
icmp6 5320 ( 0.02%) 612279 ( 0.00%) 115.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17 ( 0.00%) 15900 ( 0.00%) 935.29
tcpdump file: 200912091400.dump.gz (624.80 MB)