Traffic Trace Info
DumpFile: 200912151400.dump
FileSize: 2021.72MB
Id: 200912151400
StartTime: Tue Dec 15 14:00:00 2009
EndTime: Tue Dec 15 14:15:01 2009
TotalTime: 900.75 seconds
TotalCapSize: 1584.83MB CapLen: 96 bytes
# of packets: 28631482 (19557.01MB)
AvgRate: 182.16Mbps stddev:17.48M
IP flow (unique src/dst pair) Information
# of flows: 929020 (avg. 30.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.8% 3.1% 2.0% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 566104
Top 10 bandwidth usage (bytes/total in %):
9.3% 8.5% 6.7% 6.3% 5.0% 4.6% 3.9% 3.3% 3.2% 3.1%
# of IPv6 addresses: 960
Top 10 bandwidth usage (bytes/total in %):
26.4% 11.9% 5.8% 5.8% 5.8% 5.6% 3.4% 3.3% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912151400.pktlen.png)
detailed numbers
[ 32- 63]: 5324710
[ 64- 127]: 7874972
[ 128- 255]: 1220672
[ 256- 511]: 639738
[ 512- 1023]: 727152
[ 1024- 2047]: 12844238
Protocol Breakdown
![[protocol breakdown chart]](200912151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28631482 (100.00%) 20507013503 (100.00%) 716.24
ip 28601308 ( 99.89%) 20501360372 ( 99.97%) 716.80
tcp 23226157 ( 81.12%) 18129105099 ( 88.40%) 780.55
http(s) 9455124 ( 33.02%) 12255855784 ( 59.76%) 1296.21
http(c) 7576716 ( 26.46%) 1708840890 ( 8.33%) 225.54
squid 237881 ( 0.83%) 136330838 ( 0.66%) 573.11
smtp 315019 ( 1.10%) 159456054 ( 0.78%) 506.18
nntp 7582 ( 0.03%) 459944 ( 0.00%) 60.66
ftp 19329 ( 0.07%) 2606901 ( 0.01%) 134.87
pop3 12641 ( 0.04%) 3656760 ( 0.02%) 289.28
imap 1616 ( 0.01%) 143910 ( 0.00%) 89.05
telnet 8833 ( 0.03%) 652962 ( 0.00%) 73.92
ssh 114855 ( 0.40%) 35815831 ( 0.17%) 311.84
dns 29430 ( 0.10%) 8861551 ( 0.04%) 301.11
bgp 145 ( 0.00%) 51577 ( 0.00%) 355.70
napster 46 ( 0.00%) 4266 ( 0.00%) 92.74
realaud 3 ( 0.00%) 196 ( 0.00%) 65.33
rtsp 459763 ( 1.61%) 168932208 ( 0.82%) 367.43
icecast 15720 ( 0.05%) 1036182 ( 0.01%) 65.91
other 4971451 ( 17.36%) 3646399065 ( 17.78%) 733.47
udp 4898189 ( 17.11%) 2319551420 ( 11.31%) 473.55
dns 1192651 ( 4.17%) 208365222 ( 1.02%) 174.71
rip 1 ( 0.00%) 105 ( 0.00%) 105.00
realaud 946 ( 0.00%) 64484 ( 0.00%) 68.16
halflif 50 ( 0.00%) 6271 ( 0.00%) 125.42
starcra 103 ( 0.00%) 18226 ( 0.00%) 176.95
everque 618 ( 0.00%) 179784 ( 0.00%) 290.91
unreal 73 ( 0.00%) 11609 ( 0.00%) 159.03
quake 24 ( 0.00%) 3156 ( 0.00%) 131.50
cuseeme 9 ( 0.00%) 1215 ( 0.00%) 135.00
other 3700209 ( 12.92%) 2110441267 ( 10.29%) 570.36
icmp 376624 ( 1.32%) 31429150 ( 0.15%) 83.45
ipip 336 ( 0.00%) 42648 ( 0.00%) 126.93
ipsec 480 ( 0.00%) 158440 ( 0.00%) 330.08
ip6 48590 ( 0.17%) 6515525 ( 0.03%) 134.09
other 50932 ( 0.18%) 14558090 ( 0.07%) 285.83
frag 10207 ( 0.04%) 7647545 ( 0.04%) 749.25
ip6 30174 ( 0.11%) 5653131 ( 0.03%) 187.35
tcp6 8404 ( 0.03%) 1639147 ( 0.01%) 195.04
http(s) 116 ( 0.00%) 75541 ( 0.00%) 651.22
http(c) 3962 ( 0.01%) 364757 ( 0.00%) 92.06
smtp 1447 ( 0.01%) 711347 ( 0.00%) 491.60
ssh 1810 ( 0.01%) 328908 ( 0.00%) 181.72
dns 15 ( 0.00%) 5331 ( 0.00%) 355.40
bgp 107 ( 0.00%) 13765 ( 0.00%) 128.64
other 947 ( 0.00%) 139498 ( 0.00%) 147.31
udp6 17388 ( 0.06%) 3470573 ( 0.02%) 199.60
dns 17323 ( 0.06%) 3461716 ( 0.02%) 199.83
other 65 ( 0.00%) 8857 ( 0.00%) 136.26
icmp6 4309 ( 0.02%) 500706 ( 0.00%) 116.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43 ( 0.00%) 38625 ( 0.00%) 898.26
tcpdump file: 200912151400.dump.gz (693.25 MB)