Traffic Trace Info
DumpFile: 200912131400.dump
FileSize: 880.45MB
Id: 200912131400
StartTime: Sun Dec 13 14:00:00 2009
EndTime: Sun Dec 13 14:15:00 2009
TotalTime: 899.79 seconds
TotalCapSize: 688.51MB CapLen: 96 bytes
# of packets: 12578732 (7269.61MB)
AvgRate: 67.79Mbps stddev:9.97M
IP flow (unique src/dst pair) Information
# of flows: 718876 (avg. 17.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.7% 2.6% 2.1% 1.8% 1.5% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 458934
Top 10 bandwidth usage (bytes/total in %):
9.9% 6.1% 5.7% 5.0% 3.6% 3.0% 2.7% 2.6% 2.6% 2.4%
# of IPv6 addresses: 794
Top 10 bandwidth usage (bytes/total in %):
39.4% 8.1% 7.3% 5.9% 4.3% 4.2% 4.2% 4.2% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912131400.pktlen.png)
detailed numbers
[ 32- 63]: 2813930
[ 64- 127]: 3722155
[ 128- 255]: 691680
[ 256- 511]: 311703
[ 512- 1023]: 443330
[ 1024- 2047]: 4595934
Protocol Breakdown
![[protocol breakdown chart]](200912131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12578732 (100.00%) 7622733367 (100.00%) 606.00
ip 12555612 ( 99.82%) 7618946097 ( 99.95%) 606.82
tcp 9857057 ( 78.36%) 6761955394 ( 88.71%) 686.00
http(s) 3330835 ( 26.48%) 4414508697 ( 57.91%) 1325.35
http(c) 2352472 ( 18.70%) 356089188 ( 4.67%) 151.37
squid 285585 ( 2.27%) 119683373 ( 1.57%) 419.08
smtp 152461 ( 1.21%) 27266775 ( 0.36%) 178.84
ftp 263520 ( 2.09%) 19583990 ( 0.26%) 74.32
pop3 6325 ( 0.05%) 4750226 ( 0.06%) 751.02
imap 499 ( 0.00%) 62988 ( 0.00%) 126.23
telnet 14313 ( 0.11%) 1693360 ( 0.02%) 118.31
ssh 252861 ( 2.01%) 21200223 ( 0.28%) 83.84
dns 18862 ( 0.15%) 8003586 ( 0.10%) 424.32
bgp 136 ( 0.00%) 40622 ( 0.00%) 298.69
napster 62 ( 0.00%) 4348 ( 0.00%) 70.13
realaud 19 ( 0.00%) 1148 ( 0.00%) 60.42
rtsp 2115 ( 0.02%) 177159 ( 0.00%) 83.76
icecast 422 ( 0.00%) 27950 ( 0.00%) 66.23
other 3176563 ( 25.25%) 1788861341 ( 23.47%) 563.14
udp 2176426 ( 17.30%) 810464052 ( 10.63%) 372.38
dns 819917 ( 6.52%) 131542349 ( 1.73%) 160.43
realaud 1791 ( 0.01%) 108569 ( 0.00%) 60.62
halflif 78 ( 0.00%) 12244 ( 0.00%) 156.97
starcra 317 ( 0.00%) 88612 ( 0.00%) 279.53
everque 194 ( 0.00%) 31023 ( 0.00%) 159.91
unreal 34 ( 0.00%) 3679 ( 0.00%) 108.21
quake 23 ( 0.00%) 1855 ( 0.00%) 80.65
cuseeme 7 ( 0.00%) 815 ( 0.00%) 116.43
other 1353996 ( 10.76%) 678622494 ( 8.90%) 501.20
icmp 449333 ( 3.57%) 36101825 ( 0.47%) 80.35
ipip 364 ( 0.00%) 43432 ( 0.00%) 119.32
ipsec 28 ( 0.00%) 3528 ( 0.00%) 126.00
ip6 49772 ( 0.40%) 6884088 ( 0.09%) 138.31
other 22632 ( 0.18%) 3493778 ( 0.05%) 154.37
frag 438 ( 0.00%) 470418 ( 0.01%) 1074.01
ip6 23120 ( 0.18%) 3787270 ( 0.05%) 163.81
tcp6 3438 ( 0.03%) 572324 ( 0.01%) 166.47
http(s) 25 ( 0.00%) 12725 ( 0.00%) 509.00
http(c) 1875 ( 0.01%) 171809 ( 0.00%) 91.63
squid 3 ( 0.00%) 234 ( 0.00%) 78.00
smtp 643 ( 0.01%) 288052 ( 0.00%) 447.98
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 42 ( 0.00%) 9277 ( 0.00%) 220.88
bgp 96 ( 0.00%) 11424 ( 0.00%) 119.00
other 749 ( 0.01%) 78021 ( 0.00%) 104.17
udp6 15180 ( 0.12%) 2686095 ( 0.04%) 176.95
dns 15129 ( 0.12%) 2679662 ( 0.04%) 177.12
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 50 ( 0.00%) 6314 ( 0.00%) 126.28
icmp6 4457 ( 0.04%) 510677 ( 0.01%) 114.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 14094 ( 0.00%) 939.60
tcpdump file: 200912131400.dump.gz (317.73 MB)