Traffic Trace Info
DumpFile: 200912171400.dump
FileSize: 1828.31MB
Id: 200912171400
StartTime: Thu Dec 17 14:00:00 2009
EndTime: Thu Dec 17 14:15:00 2009
TotalTime: 899.64 seconds
TotalCapSize: 1437.51MB CapLen: 96 bytes
# of packets: 25610524 (17272.14MB)
AvgRate: 161.02Mbps stddev:19.06M
IP flow (unique src/dst pair) Information
# of flows: 1001330 (avg. 25.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.6% 1.4% 1.2% 1.1% 1.1% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 593810
Top 10 bandwidth usage (bytes/total in %):
13.7% 5.2% 5.0% 4.2% 3.9% 3.2% 3.0% 2.7% 2.7% 2.7%
# of IPv6 addresses: 1014
Top 10 bandwidth usage (bytes/total in %):
34.6% 34.5% 13.3% 9.9% 9.9% 9.9% 8.8% 8.8% 8.4% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912171400.pktlen.png)
detailed numbers
[ 32- 63]: 5600176
[ 64- 127]: 6456633
[ 128- 255]: 1028837
[ 256- 511]: 608977
[ 512- 1023]: 628250
[ 1024- 2047]: 11287651
Protocol Breakdown
![[protocol breakdown chart]](200912171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25610524 (100.00%) 18111152070 (100.00%) 707.18
ip 25513597 ( 99.62%) 18096167945 ( 99.92%) 709.28
tcp 22146599 ( 86.47%) 17096870380 ( 94.40%) 771.99
http(s) 10297659 ( 40.21%) 13833131374 ( 76.38%) 1343.33
http(c) 7055909 ( 27.55%) 961117868 ( 5.31%) 136.21
squid 275785 ( 1.08%) 73403383 ( 0.41%) 266.16
smtp 357069 ( 1.39%) 199987583 ( 1.10%) 560.08
nntp 308 ( 0.00%) 35750 ( 0.00%) 116.07
ftp 18696 ( 0.07%) 3784147 ( 0.02%) 202.40
pop3 23048 ( 0.09%) 4241762 ( 0.02%) 184.04
imap 3014 ( 0.01%) 311969 ( 0.00%) 103.51
telnet 6315 ( 0.02%) 466522 ( 0.00%) 73.88
ssh 48414 ( 0.19%) 7806949 ( 0.04%) 161.25
dns 26227 ( 0.10%) 7634971 ( 0.04%) 291.11
bgp 146 ( 0.00%) 49614 ( 0.00%) 339.82
napster 182 ( 0.00%) 16281 ( 0.00%) 89.46
realaud 1210 ( 0.00%) 155619 ( 0.00%) 128.61
rtsp 232903 ( 0.91%) 103886850 ( 0.57%) 446.05
icecast 12800 ( 0.05%) 3443064 ( 0.02%) 268.99
hotline 208 ( 0.00%) 12480 ( 0.00%) 60.00
other 3786704 ( 14.79%) 1897384074 ( 10.48%) 501.06
udp 2734764 ( 10.68%) 935444026 ( 5.17%) 342.06
dns 1256930 ( 4.91%) 224346353 ( 1.24%) 178.49
realaud 34 ( 0.00%) 8650 ( 0.00%) 254.41
halflif 34 ( 0.00%) 3991 ( 0.00%) 117.38
starcra 95 ( 0.00%) 16482 ( 0.00%) 173.49
everque 191 ( 0.00%) 35645 ( 0.00%) 186.62
unreal 67 ( 0.00%) 10551 ( 0.00%) 157.48
quake 18 ( 0.00%) 1653 ( 0.00%) 91.83
cuseeme 8 ( 0.00%) 763 ( 0.00%) 95.38
other 1477059 ( 5.77%) 710773649 ( 3.92%) 481.21
icmp 531350 ( 2.07%) 49250353 ( 0.27%) 92.69
ipip 336 ( 0.00%) 41176 ( 0.00%) 122.55
ipsec 84 ( 0.00%) 12944 ( 0.00%) 154.10
ip6 51671 ( 0.20%) 7355651 ( 0.04%) 142.36
other 48793 ( 0.19%) 7193415 ( 0.04%) 147.43
frag 1530 ( 0.01%) 1630815 ( 0.01%) 1065.89
ip6 96927 ( 0.38%) 14984125 ( 0.08%) 154.59
tcp6 74555 ( 0.29%) 10876139 ( 0.06%) 145.88
http(s) 2051 ( 0.01%) 1948127 ( 0.01%) 949.84
http(c) 12286 ( 0.05%) 961842 ( 0.01%) 78.29
smtp 245 ( 0.00%) 56045 ( 0.00%) 228.76
ssh 120 ( 0.00%) 29596 ( 0.00%) 246.63
dns 4 ( 0.00%) 825 ( 0.00%) 206.25
bgp 111 ( 0.00%) 17055 ( 0.00%) 153.65
other 59738 ( 0.23%) 7862649 ( 0.04%) 131.62
udp6 18024 ( 0.07%) 3548693 ( 0.02%) 196.89
dns 17790 ( 0.07%) 3498209 ( 0.02%) 196.64
other 234 ( 0.00%) 50484 ( 0.00%) 215.74
icmp6 4264 ( 0.02%) 491167 ( 0.00%) 115.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 54 ( 0.00%) 64046 ( 0.00%) 1186.04
tcpdump file: 200912171400.dump.gz (649.16 MB)