Traffic Trace Info
DumpFile: 200912161400.dump
FileSize: 1984.11MB
Id: 200912161400
StartTime: Wed Dec 16 14:00:01 2009
EndTime: Wed Dec 16 14:15:01 2009
TotalTime: 899.95 seconds
TotalCapSize: 1559.81MB CapLen: 96 bytes
# of packets: 27806471 (18897.23MB)
AvgRate: 176.11Mbps stddev:17.71M
IP flow (unique src/dst pair) Information
# of flows: 805285 (avg. 34.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.4% 1.6% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 463228
Top 10 bandwidth usage (bytes/total in %):
6.4% 4.6% 3.6% 3.5% 3.5% 3.3% 3.2% 3.2% 3.1% 3.1%
# of IPv6 addresses: 1012
Top 10 bandwidth usage (bytes/total in %):
29.6% 6.6% 6.5% 6.3% 6.3% 3.1% 3.1% 3.1% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912161400.pktlen.png)
detailed numbers
[ 32- 63]: 6802631
[ 64- 127]: 6587592
[ 128- 255]: 912750
[ 256- 511]: 514231
[ 512- 1023]: 477192
[ 1024- 2047]: 12512075
Protocol Breakdown
![[protocol breakdown chart]](200912161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27806471 (100.00%) 19815179674 (100.00%) 712.61
ip 27779934 ( 99.90%) 19810136633 ( 99.97%) 713.11
tcp 24436570 ( 87.88%) 18564272455 ( 93.69%) 759.69
http(s) 11249234 ( 40.46%) 15381828493 ( 77.63%) 1367.37
http(c) 6868542 ( 24.70%) 898093224 ( 4.53%) 130.75
squid 400299 ( 1.44%) 199141095 ( 1.00%) 497.48
smtp 363596 ( 1.31%) 187058619 ( 0.94%) 514.47
nntp 269 ( 0.00%) 32027 ( 0.00%) 119.06
ftp 29879 ( 0.11%) 4900239 ( 0.02%) 164.00
pop3 52532 ( 0.19%) 9408582 ( 0.05%) 179.10
imap 3366 ( 0.01%) 825582 ( 0.00%) 245.27
telnet 5314 ( 0.02%) 394357 ( 0.00%) 74.21
ssh 54403 ( 0.20%) 10637786 ( 0.05%) 195.54
dns 39311 ( 0.14%) 9525717 ( 0.05%) 242.32
bgp 143 ( 0.00%) 49679 ( 0.00%) 347.41
napster 47 ( 0.00%) 8235 ( 0.00%) 175.21
realaud 45 ( 0.00%) 3875 ( 0.00%) 86.11
rtsp 190723 ( 0.69%) 27480172 ( 0.14%) 144.08
icecast 5564 ( 0.02%) 371183 ( 0.00%) 66.71
hotline 27 ( 0.00%) 1770 ( 0.00%) 65.56
other 5173273 ( 18.60%) 1834511640 ( 9.26%) 354.61
udp 2859481 ( 10.28%) 1201235575 ( 6.06%) 420.09
dns 1142693 ( 4.11%) 180682051 ( 0.91%) 158.12
realaud 19 ( 0.00%) 2243 ( 0.00%) 118.05
halflif 107 ( 0.00%) 9995 ( 0.00%) 93.41
starcra 29 ( 0.00%) 4269 ( 0.00%) 147.21
everque 29105 ( 0.10%) 29392147 ( 0.15%) 1009.87
unreal 32 ( 0.00%) 4254 ( 0.00%) 132.94
quake 26 ( 0.00%) 3562 ( 0.00%) 137.00
cuseeme 8 ( 0.00%) 704 ( 0.00%) 88.00
other 1686992 ( 6.07%) 990762116 ( 5.00%) 587.30
icmp 417905 ( 1.50%) 34888605 ( 0.18%) 83.48
ipip 358 ( 0.00%) 44462 ( 0.00%) 124.20
ipsec 48 ( 0.00%) 6392 ( 0.00%) 133.17
ip6 53760 ( 0.19%) 7890411 ( 0.04%) 146.77
other 11812 ( 0.04%) 1798733 ( 0.01%) 152.28
frag 1870 ( 0.01%) 1832420 ( 0.01%) 979.90
ip6 26537 ( 0.10%) 5043041 ( 0.03%) 190.04
tcp6 4381 ( 0.02%) 922827 ( 0.00%) 210.64
http(s) 295 ( 0.00%) 357993 ( 0.00%) 1213.54
http(c) 2172 ( 0.01%) 200371 ( 0.00%) 92.25
smtp 55 ( 0.00%) 17097 ( 0.00%) 310.85
ssh 228 ( 0.00%) 102608 ( 0.00%) 450.04
bgp 112 ( 0.00%) 14287 ( 0.00%) 127.56
other 1519 ( 0.01%) 230471 ( 0.00%) 151.73
udp6 17871 ( 0.06%) 3587751 ( 0.02%) 200.76
dns 17729 ( 0.06%) 3574913 ( 0.02%) 201.64
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 141 ( 0.00%) 12734 ( 0.00%) 90.31
icmp6 4221 ( 0.02%) 497248 ( 0.00%) 117.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34 ( 0.00%) 31135 ( 0.00%) 915.74
tcpdump file: 200912161400.dump.gz (669.01 MB)