Traffic Trace Info
DumpFile: 200912121400.dump
FileSize: 1150.98MB
Id: 200912121400
StartTime: Sat Dec 12 14:00:00 2009
EndTime: Sat Dec 12 14:15:00 2009
TotalTime: 899.99 seconds
TotalCapSize: 903.33MB CapLen: 96 bytes
# of packets: 16229159 (9841.46MB)
AvgRate: 91.74Mbps stddev:23.04M
IP flow (unique src/dst pair) Information
# of flows: 976920 (avg. 16.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 7.4% 3.0% 2.3% 1.6% 1.5% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 545676
Top 10 bandwidth usage (bytes/total in %):
7.8% 7.6% 7.6% 7.5% 5.5% 5.3% 4.9% 3.0% 2.4% 2.4%
# of IPv6 addresses: 816
Top 10 bandwidth usage (bytes/total in %):
35.2% 12.2% 5.9% 5.7% 5.7% 4.4% 4.0% 4.0% 3.7% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912121400.pktlen.png)
detailed numbers
[ 32- 63]: 4407300
[ 64- 127]: 4123934
[ 128- 255]: 703208
[ 256- 511]: 329689
[ 512- 1023]: 328684
[ 1024- 2047]: 6336344
Protocol Breakdown
![[protocol breakdown chart]](200912121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16229159 (100.00%) 10319520565 (100.00%) 635.86
ip 16200189 ( 99.82%) 10314383883 ( 99.95%) 636.68
tcp 13508574 ( 83.24%) 9495099119 ( 92.01%) 702.89
http(s) 5075778 ( 31.28%) 6746459207 ( 65.38%) 1329.15
http(c) 3946625 ( 24.32%) 353247388 ( 3.42%) 89.51
squid 230707 ( 1.42%) 97574873 ( 0.95%) 422.94
smtp 184496 ( 1.14%) 53669688 ( 0.52%) 290.90
ftp 30633 ( 0.19%) 3708255 ( 0.04%) 121.05
pop3 7481 ( 0.05%) 4887917 ( 0.05%) 653.38
imap 1997 ( 0.01%) 371779 ( 0.00%) 186.17
telnet 9747 ( 0.06%) 683731 ( 0.01%) 70.15
ssh 381679 ( 2.35%) 402050152 ( 3.90%) 1053.37
dns 42219 ( 0.26%) 11218037 ( 0.11%) 265.71
bgp 134 ( 0.00%) 41053 ( 0.00%) 306.37
napster 9 ( 0.00%) 630 ( 0.00%) 70.00
realaud 24 ( 0.00%) 1452 ( 0.00%) 60.50
rtsp 132350 ( 0.82%) 35816384 ( 0.35%) 270.62
icecast 348 ( 0.00%) 26675 ( 0.00%) 76.65
other 3464346 ( 21.35%) 1785341838 ( 17.30%) 515.35
udp 2101677 ( 12.95%) 768645757 ( 7.45%) 365.73
dns 902607 ( 5.56%) 154495005 ( 1.50%) 171.17
realaud 10 ( 0.00%) 1270 ( 0.00%) 127.00
halflif 73 ( 0.00%) 6998 ( 0.00%) 95.86
starcra 112 ( 0.00%) 18511 ( 0.00%) 165.28
everque 192 ( 0.00%) 36892 ( 0.00%) 192.15
unreal 61 ( 0.00%) 10522 ( 0.00%) 172.49
quake 20 ( 0.00%) 2280 ( 0.00%) 114.00
cuseeme 3 ( 0.00%) 274 ( 0.00%) 91.33
other 1198298 ( 7.38%) 613837724 ( 5.95%) 512.26
icmp 533649 ( 3.29%) 43196186 ( 0.42%) 80.94
ipip 336 ( 0.00%) 42394 ( 0.00%) 126.17
ipsec 227 ( 0.00%) 33682 ( 0.00%) 148.38
ip6 52297 ( 0.32%) 6969768 ( 0.07%) 133.27
other 3429 ( 0.02%) 396977 ( 0.00%) 115.77
frag 1450 ( 0.01%) 1584471 ( 0.02%) 1092.74
ip6 28970 ( 0.18%) 5136682 ( 0.05%) 177.31
tcp6 7337 ( 0.05%) 1449289 ( 0.01%) 197.53
http(s) 47 ( 0.00%) 25757 ( 0.00%) 548.02
http(c) 1904 ( 0.01%) 176094 ( 0.00%) 92.49
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 1232 ( 0.01%) 639013 ( 0.01%) 518.68
ftp 38 ( 0.00%) 3515 ( 0.00%) 92.50
ssh 916 ( 0.01%) 292592 ( 0.00%) 319.42
dns 6 ( 0.00%) 2249 ( 0.00%) 374.83
bgp 100 ( 0.00%) 12236 ( 0.00%) 122.36
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3091 ( 0.02%) 297611 ( 0.00%) 96.28
udp6 17601 ( 0.11%) 3207994 ( 0.03%) 182.26
dns 17556 ( 0.11%) 3203284 ( 0.03%) 182.46
other 45 ( 0.00%) 4710 ( 0.00%) 104.67
icmp6 3987 ( 0.02%) 457153 ( 0.00%) 114.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 18166 ( 0.00%) 1211.07
tcpdump file: 200912121400.dump.gz (392.09 MB)