Traffic Trace Info
DumpFile: 200912181400.dump
FileSize: 1595.56MB
Id: 200912181400
StartTime: Fri Dec 18 14:00:00 2009
EndTime: Fri Dec 18 14:15:01 2009
TotalTime: 900.67 seconds
TotalCapSize: 1250.41MB CapLen: 96 bytes
# of packets: 22618797 (15367.86MB)
AvgRate: 143.14Mbps stddev:15.40M
IP flow (unique src/dst pair) Information
# of flows: 729017 (avg. 31.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.0% 1.7% 1.5% 1.4% 1.0% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 435018
Top 10 bandwidth usage (bytes/total in %):
9.7% 4.5% 4.4% 3.7% 3.2% 3.1% 3.1% 2.7% 2.7% 2.1%
# of IPv6 addresses: 983
Top 10 bandwidth usage (bytes/total in %):
57.6% 57.5% 12.9% 12.9% 9.3% 2.0% 2.0% 2.0% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912181400.pktlen.png)
detailed numbers
[ 32- 63]: 5265024
[ 64- 127]: 5194905
[ 128- 255]: 907256
[ 256- 511]: 549138
[ 512- 1023]: 701144
[ 1024- 2047]: 10001330
Protocol Breakdown
![[protocol breakdown chart]](200912181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22618797 (100.00%) 16114372644 (100.00%) 712.43
ip 22487772 ( 99.42%) 16098252364 ( 99.90%) 715.87
tcp 19371246 ( 85.64%) 15106469728 ( 93.75%) 779.84
http(s) 8146555 ( 36.02%) 11076502837 ( 68.74%) 1359.65
http(c) 5715871 ( 25.27%) 741849492 ( 4.60%) 129.79
squid 719920 ( 3.18%) 384087034 ( 2.38%) 533.51
smtp 419733 ( 1.86%) 265150608 ( 1.65%) 631.71
nntp 67 ( 0.00%) 6645 ( 0.00%) 99.18
ftp 16732 ( 0.07%) 2671511 ( 0.02%) 159.66
pop3 15032 ( 0.07%) 5948730 ( 0.04%) 395.74
imap 3376 ( 0.01%) 2281316 ( 0.01%) 675.75
telnet 7731 ( 0.03%) 572493 ( 0.00%) 74.05
ssh 37409 ( 0.17%) 5005586 ( 0.03%) 133.81
dns 29227 ( 0.13%) 6540126 ( 0.04%) 223.77
bgp 138 ( 0.00%) 45093 ( 0.00%) 326.76
napster 369 ( 0.00%) 25855 ( 0.00%) 70.07
realaud 21 ( 0.00%) 1358 ( 0.00%) 64.67
rtsp 207758 ( 0.92%) 62234255 ( 0.39%) 299.55
icecast 32020 ( 0.14%) 2019012 ( 0.01%) 63.05
hotline 10 ( 0.00%) 1430 ( 0.00%) 143.00
other 4019272 ( 17.77%) 2551526047 ( 15.83%) 634.82
udp 2647983 ( 11.71%) 947394936 ( 5.88%) 357.78
dns 1051345 ( 4.65%) 169115196 ( 1.05%) 160.86
realaud 124 ( 0.00%) 14527 ( 0.00%) 117.15
halflif 69 ( 0.00%) 5640 ( 0.00%) 81.74
starcra 117 ( 0.00%) 19811 ( 0.00%) 169.32
everque 320 ( 0.00%) 54485 ( 0.00%) 170.27
unreal 39 ( 0.00%) 6877 ( 0.00%) 176.33
quake 85 ( 0.00%) 9420 ( 0.00%) 110.82
cuseeme 17 ( 0.00%) 2017 ( 0.00%) 118.65
other 1595299 ( 7.05%) 777911452 ( 4.83%) 487.63
icmp 408657 ( 1.81%) 34079417 ( 0.21%) 83.39
ipip 364 ( 0.00%) 44952 ( 0.00%) 123.49
ipsec 42 ( 0.00%) 5812 ( 0.00%) 138.38
ip6 56150 ( 0.25%) 7978095 ( 0.05%) 142.09
other 3330 ( 0.01%) 2279424 ( 0.01%) 684.51
frag 2269 ( 0.01%) 1988425 ( 0.01%) 876.34
ip6 131025 ( 0.58%) 16120280 ( 0.10%) 123.03
tcp6 109733 ( 0.49%) 12243622 ( 0.08%) 111.58
http(s) 125 ( 0.00%) 144862 ( 0.00%) 1158.90
http(c) 3014 ( 0.01%) 275863 ( 0.00%) 91.53
smtp 167 ( 0.00%) 40865 ( 0.00%) 244.70
ssh 2662 ( 0.01%) 2105204 ( 0.01%) 790.84
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 116 ( 0.00%) 14602 ( 0.00%) 125.88
other 103644 ( 0.46%) 9660452 ( 0.06%) 93.21
udp6 16740 ( 0.07%) 3270941 ( 0.02%) 195.40
dns 16655 ( 0.07%) 3261075 ( 0.02%) 195.80
other 85 ( 0.00%) 9866 ( 0.00%) 116.07
icmp6 4486 ( 0.02%) 555221 ( 0.00%) 123.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 46416 ( 0.00%) 1289.33
tcpdump file: 200912181400.dump.gz (546.05 MB)