Traffic Trace Info
DumpFile: 200912191400.dump
FileSize: 1268.56MB
Id: 200912191400
StartTime: Sat Dec 19 14:00:01 2009
EndTime: Sat Dec 19 14:15:00 2009
TotalTime: 899.39 seconds
TotalCapSize: 991.97MB CapLen: 96 bytes
# of packets: 18126143 (11491.63MB)
AvgRate: 107.15Mbps stddev:15.35M
IP flow (unique src/dst pair) Information
# of flows: 758304 (avg. 23.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.9% 1.7% 1.5% 1.4% 1.4% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 443368
Top 10 bandwidth usage (bytes/total in %):
8.4% 7.2% 4.7% 4.6% 3.6% 3.3% 2.7% 2.7% 2.6% 2.4%
# of IPv6 addresses: 826
Top 10 bandwidth usage (bytes/total in %):
44.9% 44.8% 16.2% 11.1% 4.4% 3.4% 3.3% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912191400.pktlen.png)
detailed numbers
[ 32- 63]: 4008875
[ 64- 127]: 4822673
[ 128- 255]: 865887
[ 256- 511]: 418489
[ 512- 1023]: 453175
[ 1024- 2047]: 7557044
Protocol Breakdown
![[protocol breakdown chart]](200912191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18126143 (100.00%) 12049844201 (100.00%) 664.78
ip 18055208 ( 99.61%) 12040657930 ( 99.92%) 666.88
tcp 14428379 ( 79.60%) 10615535001 ( 88.10%) 735.74
http(s) 5773853 ( 31.85%) 7766792468 ( 64.46%) 1345.17
http(c) 3777967 ( 20.84%) 376865006 ( 3.13%) 99.75
squid 259227 ( 1.43%) 98679250 ( 0.82%) 380.67
smtp 164526 ( 0.91%) 36238717 ( 0.30%) 220.26
ftp 29793 ( 0.16%) 4867696 ( 0.04%) 163.38
pop3 42833 ( 0.24%) 6456947 ( 0.05%) 150.75
imap 1284 ( 0.01%) 252970 ( 0.00%) 197.02
telnet 4776 ( 0.03%) 353100 ( 0.00%) 73.93
ssh 412084 ( 2.27%) 121635394 ( 1.01%) 295.17
dns 21991 ( 0.12%) 4762170 ( 0.04%) 216.55
bgp 248 ( 0.00%) 131155 ( 0.00%) 528.85
napster 523 ( 0.00%) 279570 ( 0.00%) 534.55
realaud 129 ( 0.00%) 14218 ( 0.00%) 110.22
rtsp 152820 ( 0.84%) 103029286 ( 0.86%) 674.19
icecast 15820 ( 0.09%) 1012326 ( 0.01%) 63.99
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 3770494 ( 20.80%) 2094164056 ( 17.38%) 555.41
udp 3175556 ( 17.52%) 1381054187 ( 11.46%) 434.90
dns 1180977 ( 6.52%) 188018080 ( 1.56%) 159.21
realaud 1588 ( 0.01%) 419815 ( 0.00%) 264.37
halflif 901 ( 0.00%) 55351 ( 0.00%) 61.43
starcra 58 ( 0.00%) 6723 ( 0.00%) 115.91
everque 2696 ( 0.01%) 1317676 ( 0.01%) 488.75
unreal 52 ( 0.00%) 7953 ( 0.00%) 152.94
quake 33 ( 0.00%) 4096 ( 0.00%) 124.12
cuseeme 1 ( 0.00%) 75 ( 0.00%) 75.00
other 1989182 ( 10.97%) 1191161194 ( 9.89%) 598.82
icmp 387172 ( 2.14%) 32129051 ( 0.27%) 82.98
ipip 346 ( 0.00%) 41532 ( 0.00%) 120.03
ipsec 128 ( 0.00%) 19408 ( 0.00%) 151.62
ip6 57310 ( 0.32%) 7937168 ( 0.07%) 138.50
other 6317 ( 0.03%) 3941583 ( 0.03%) 623.96
frag 505 ( 0.00%) 569489 ( 0.00%) 1127.70
ip6 70935 ( 0.39%) 9186271 ( 0.08%) 129.50
tcp6 52164 ( 0.29%) 5910177 ( 0.05%) 113.30
http(s) 10 ( 0.00%) 2640 ( 0.00%) 264.00
http(c) 4471 ( 0.02%) 414451 ( 0.00%) 92.70
smtp 2925 ( 0.02%) 1135620 ( 0.01%) 388.25
ssh 196 ( 0.00%) 113404 ( 0.00%) 578.59
bgp 112 ( 0.00%) 13916 ( 0.00%) 124.25
other 44450 ( 0.25%) 4230146 ( 0.04%) 95.17
udp6 14419 ( 0.08%) 2736520 ( 0.02%) 189.79
dns 14244 ( 0.08%) 2703884 ( 0.02%) 189.83
other 175 ( 0.00%) 32636 ( 0.00%) 186.49
icmp6 4283 ( 0.02%) 496428 ( 0.00%) 115.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 39 ( 0.00%) 39066 ( 0.00%) 1001.69
tcpdump file: 200912191400.dump.gz (445.53 MB)