Traffic Trace Info
DumpFile: 200912141400.dump
FileSize: 1803.67MB
Id: 200912141400
StartTime: Mon Dec 14 14:00:00 2009
EndTime: Mon Dec 14 14:15:00 2009
TotalTime: 900.14 seconds
TotalCapSize: 1410.91MB CapLen: 96 bytes
# of packets: 25739077 (16752.71MB)
AvgRate: 156.09Mbps stddev:20.52M
IP flow (unique src/dst pair) Information
# of flows: 770766 (avg. 33.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.7% 1.7% 1.6% 1.6% 1.3% 1.2% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 457158
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.2% 4.0% 3.5% 3.5% 2.8% 2.5% 2.3% 2.2% 2.2%
# of IPv6 addresses: 920
Top 10 bandwidth usage (bytes/total in %):
26.8% 16.1% 5.6% 5.6% 4.9% 4.5% 3.2% 3.1% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912141400.pktlen.png)
detailed numbers
[ 32- 63]: 5450438
[ 64- 127]: 6541714
[ 128- 255]: 1468796
[ 256- 511]: 694081
[ 512- 1023]: 738554
[ 1024- 2047]: 10845494
Protocol Breakdown
![[protocol breakdown chart]](200912141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25739077 (100.00%) 17566494577 (100.00%) 682.48
ip 25711456 ( 99.89%) 17560928578 ( 99.97%) 683.00
tcp 21226834 ( 82.47%) 15827565465 ( 90.10%) 745.64
http(s) 7698614 ( 29.91%) 10110866189 ( 57.56%) 1313.34
http(c) 6928551 ( 26.92%) 1380836300 ( 7.86%) 199.30
squid 324455 ( 1.26%) 157577712 ( 0.90%) 485.67
smtp 277532 ( 1.08%) 118427381 ( 0.67%) 426.72
ftp 22490 ( 0.09%) 2378418 ( 0.01%) 105.75
pop3 22733 ( 0.09%) 9136561 ( 0.05%) 401.91
imap 3391 ( 0.01%) 895844 ( 0.01%) 264.18
telnet 2962 ( 0.01%) 219042 ( 0.00%) 73.95
ssh 399400 ( 1.55%) 253404129 ( 1.44%) 634.46
dns 26157 ( 0.10%) 8701799 ( 0.05%) 332.68
bgp 146 ( 0.00%) 54642 ( 0.00%) 374.26
napster 9 ( 0.00%) 594 ( 0.00%) 66.00
realaud 52 ( 0.00%) 6343 ( 0.00%) 121.98
rtsp 193884 ( 0.75%) 47424744 ( 0.27%) 244.60
icecast 11591 ( 0.05%) 1377986 ( 0.01%) 118.88
hotline 23 ( 0.00%) 1744 ( 0.00%) 75.83
other 5314839 ( 20.65%) 3736255737 ( 21.27%) 702.99
udp 4003782 ( 15.56%) 1689531688 ( 9.62%) 421.98
dns 1419621 ( 5.52%) 227811867 ( 1.30%) 160.47
realaud 5464 ( 0.02%) 330748 ( 0.00%) 60.53
halflif 103 ( 0.00%) 11848 ( 0.00%) 115.03
starcra 101 ( 0.00%) 14596 ( 0.00%) 144.51
everque 471 ( 0.00%) 175995 ( 0.00%) 373.66
unreal 59 ( 0.00%) 8335 ( 0.00%) 141.27
quake 38 ( 0.00%) 4910 ( 0.00%) 129.21
cuseeme 6 ( 0.00%) 461 ( 0.00%) 76.83
other 2577599 ( 10.01%) 1460888096 ( 8.32%) 566.76
icmp 385800 ( 1.50%) 32037858 ( 0.18%) 83.04
ipip 349 ( 0.00%) 43066 ( 0.00%) 123.40
ipsec 71 ( 0.00%) 10954 ( 0.00%) 154.28
ip6 51957 ( 0.20%) 6894746 ( 0.04%) 132.70
other 42663 ( 0.17%) 4844801 ( 0.03%) 113.56
frag 1373 ( 0.01%) 1503682 ( 0.01%) 1095.18
ip6 27621 ( 0.11%) 5565999 ( 0.03%) 201.51
tcp6 5147 ( 0.02%) 1476208 ( 0.01%) 286.81
http(s) 144 ( 0.00%) 179647 ( 0.00%) 1247.55
http(c) 1815 ( 0.01%) 167445 ( 0.00%) 92.26
smtp 1757 ( 0.01%) 924317 ( 0.01%) 526.08
ssh 501 ( 0.00%) 100026 ( 0.00%) 199.65
dns 12 ( 0.00%) 4836 ( 0.00%) 403.00
bgp 93 ( 0.00%) 10957 ( 0.00%) 117.82
other 825 ( 0.00%) 88980 ( 0.00%) 107.85
udp6 18222 ( 0.07%) 3569395 ( 0.02%) 195.88
dns 18079 ( 0.07%) 3545393 ( 0.02%) 196.11
other 143 ( 0.00%) 24002 ( 0.00%) 167.85
icmp6 4188 ( 0.02%) 483447 ( 0.00%) 115.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34 ( 0.00%) 32869 ( 0.00%) 966.74
tcpdump file: 200912141400.dump.gz (623.13 MB)