Traffic Trace Info
DumpFile: 200912211400.dump
FileSize: 2061.12MB
Id: 200912211400
StartTime: Mon Dec 21 14:00:01 2009
EndTime: Mon Dec 21 14:15:00 2009
TotalTime: 899.44 seconds
TotalCapSize: 1622.97MB CapLen: 96 bytes
# of packets: 28714169 (20518.07MB)
AvgRate: 191.38Mbps stddev:20.99M
IP flow (unique src/dst pair) Information
# of flows: 969623 (avg. 29.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.2% 2.7% 1.7% 1.6% 1.6% 1.5% 1.5% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 577760
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.3% 6.2% 6.2% 5.3% 5.3% 5.2% 4.3% 2.8% 2.7%
# of IPv6 addresses: 935
Top 10 bandwidth usage (bytes/total in %):
41.1% 41.1% 14.7% 9.9% 9.9% 4.5% 2.9% 2.8% 2.1% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912211400.pktlen.png)
detailed numbers
[ 32- 63]: 6114514
[ 64- 127]: 6871879
[ 128- 255]: 916642
[ 256- 511]: 639537
[ 512- 1023]: 649138
[ 1024- 2047]: 13522459
Protocol Breakdown
![[protocol breakdown chart]](200912211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28714169 (100.00%) 21514757086 (100.00%) 749.27
ip 28639812 ( 99.74%) 21504629272 ( 99.95%) 750.86
tcp 25553182 ( 88.99%) 20561743798 ( 95.57%) 804.66
http(s) 9561910 ( 33.30%) 12685710236 ( 58.96%) 1326.69
http(c) 7260499 ( 25.29%) 1043492334 ( 4.85%) 143.72
squid 216441 ( 0.75%) 67256337 ( 0.31%) 310.74
smtp 252398 ( 0.88%) 125366095 ( 0.58%) 496.70
nntp 7 ( 0.00%) 2023 ( 0.00%) 289.00
ftp 35691 ( 0.12%) 4419193 ( 0.02%) 123.82
pop3 30874 ( 0.11%) 16871306 ( 0.08%) 546.46
imap 7871 ( 0.03%) 7024474 ( 0.03%) 892.45
telnet 1521 ( 0.01%) 103012 ( 0.00%) 67.73
ssh 37206 ( 0.13%) 9906250 ( 0.05%) 266.25
dns 27908 ( 0.10%) 2458448 ( 0.01%) 88.09
bgp 188 ( 0.00%) 79708 ( 0.00%) 423.98
napster 627 ( 0.00%) 372533 ( 0.00%) 594.15
realaud 11 ( 0.00%) 1854 ( 0.00%) 168.55
rtsp 192133 ( 0.67%) 12359882 ( 0.06%) 64.33
icecast 6289 ( 0.02%) 406017 ( 0.00%) 64.56
hotline 14 ( 0.00%) 1991 ( 0.00%) 142.21
other 7921589 ( 27.59%) 6585911805 ( 30.61%) 831.39
udp 2481740 ( 8.64%) 884767245 ( 4.11%) 356.51
dns 1062960 ( 3.70%) 184523222 ( 0.86%) 173.59
realaud 21 ( 0.00%) 2918 ( 0.00%) 138.95
halflif 105 ( 0.00%) 12048 ( 0.00%) 114.74
starcra 43 ( 0.00%) 6995 ( 0.00%) 162.67
everque 200 ( 0.00%) 39758 ( 0.00%) 198.79
unreal 35 ( 0.00%) 5866 ( 0.00%) 167.60
quake 37 ( 0.00%) 4685 ( 0.00%) 126.62
cuseeme 2 ( 0.00%) 166 ( 0.00%) 83.00
other 1418258 ( 4.94%) 700115557 ( 3.25%) 493.64
icmp 419817 ( 1.46%) 34386610 ( 0.16%) 81.91
ipip 330 ( 0.00%) 41324 ( 0.00%) 125.22
ipsec 702 ( 0.00%) 144308 ( 0.00%) 205.57
ip6 55280 ( 0.19%) 7501005 ( 0.03%) 135.69
other 128761 ( 0.45%) 16044982 ( 0.07%) 124.61
frag 2349 ( 0.01%) 2142394 ( 0.01%) 912.05
ip6 74357 ( 0.26%) 10127814 ( 0.05%) 136.21
tcp6 53417 ( 0.19%) 6229922 ( 0.03%) 116.63
http(s) 923 ( 0.00%) 1175007 ( 0.01%) 1273.03
http(c) 49997 ( 0.17%) 4364060 ( 0.02%) 87.29
smtp 1107 ( 0.00%) 510565 ( 0.00%) 461.21
ssh 403 ( 0.00%) 65062 ( 0.00%) 161.44
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 111 ( 0.00%) 14361 ( 0.00%) 129.38
other 871 ( 0.00%) 99093 ( 0.00%) 113.77
udp6 16722 ( 0.06%) 3376338 ( 0.02%) 201.91
dns 16478 ( 0.06%) 3321162 ( 0.02%) 201.55
other 244 ( 0.00%) 55176 ( 0.00%) 226.13
icmp6 4157 ( 0.01%) 485180 ( 0.00%) 116.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31 ( 0.00%) 32294 ( 0.00%) 1041.74
tcpdump file: 200912211400.dump.gz (696.52 MB)