Traffic Trace Info
DumpFile: 200912221400.dump
FileSize: 2013.98MB
Id: 200912221400
StartTime: Tue Dec 22 14:00:01 2009
EndTime: Tue Dec 22 14:15:01 2009
TotalTime: 899.70 seconds
TotalCapSize: 1584.98MB CapLen: 96 bytes
# of packets: 28113994 (18289.02MB)
AvgRate: 170.52Mbps stddev:15.28M
IP flow (unique src/dst pair) Information
# of flows: 1085343 (avg. 25.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.6% 3.6% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1% 0.8%
IP address Information
# of IPv4 addresses: 669779
Top 10 bandwidth usage (bytes/total in %):
19.6% 8.0% 5.1% 5.0% 4.8% 3.8% 3.5% 3.3% 2.4% 2.2%
# of IPv6 addresses: 964
Top 10 bandwidth usage (bytes/total in %):
19.3% 19.0% 19.0% 12.0% 5.8% 5.3% 4.1% 4.0% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912221400.pktlen.png)
detailed numbers
[ 32- 63]: 6004489
[ 64- 127]: 7802470
[ 128- 255]: 1017567
[ 256- 511]: 712858
[ 512- 1023]: 707108
[ 1024- 2047]: 11869502
Protocol Breakdown
![[protocol breakdown chart]](200912221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28113994 (100.00%) 19177431404 (100.00%) 682.13
ip 28081565 ( 99.88%) 19169720137 ( 99.96%) 682.64
tcp 24097642 ( 85.71%) 17688270499 ( 92.23%) 734.02
http(s) 9492766 ( 33.77%) 12723130844 ( 66.34%) 1340.30
http(c) 7664701 ( 27.26%) 860927873 ( 4.49%) 112.32
squid 286335 ( 1.02%) 67104657 ( 0.35%) 234.36
smtp 403359 ( 1.43%) 155114067 ( 0.81%) 384.56
nntp 74 ( 0.00%) 7021 ( 0.00%) 94.88
ftp 31226 ( 0.11%) 3914902 ( 0.02%) 125.37
pop3 29281 ( 0.10%) 15233677 ( 0.08%) 520.26
imap 2839 ( 0.01%) 364540 ( 0.00%) 128.40
telnet 1059 ( 0.00%) 74828 ( 0.00%) 70.66
ssh 121392 ( 0.43%) 19584226 ( 0.10%) 161.33
dns 35702 ( 0.13%) 8479352 ( 0.04%) 237.50
bgp 204 ( 0.00%) 99626 ( 0.00%) 488.36
napster 34 ( 0.00%) 3445 ( 0.00%) 101.32
realaud 186 ( 0.00%) 118926 ( 0.00%) 639.39
rtsp 112590 ( 0.40%) 19554813 ( 0.10%) 173.68
icecast 23064 ( 0.08%) 1561427 ( 0.01%) 67.70
other 5892830 ( 20.96%) 3812996275 ( 19.88%) 647.06
udp 3268934 ( 11.63%) 1341160781 ( 6.99%) 410.27
dns 1245656 ( 4.43%) 210042004 ( 1.10%) 168.62
realaud 1870 ( 0.01%) 113125 ( 0.00%) 60.49
halflif 49 ( 0.00%) 5350 ( 0.00%) 109.18
starcra 134 ( 0.00%) 25503 ( 0.00%) 190.32
everque 166 ( 0.00%) 38193 ( 0.00%) 230.08
unreal 40 ( 0.00%) 5962 ( 0.00%) 149.05
quake 30 ( 0.00%) 3163 ( 0.00%) 105.43
cuseeme 5 ( 0.00%) 564 ( 0.00%) 112.80
other 2018792 ( 7.18%) 1130704153 ( 5.90%) 560.09
icmp 494041 ( 1.76%) 39497988 ( 0.21%) 79.95
ipip 348 ( 0.00%) 44043 ( 0.00%) 126.56
ipsec 1206 ( 0.00%) 642596 ( 0.00%) 532.83
ip6 218531 ( 0.78%) 99999665 ( 0.52%) 457.60
other 863 ( 0.00%) 104565 ( 0.00%) 121.16
frag 7559 ( 0.03%) 6241628 ( 0.03%) 825.72
ip6 32429 ( 0.12%) 7711267 ( 0.04%) 237.79
tcp6 10508 ( 0.04%) 3645907 ( 0.02%) 346.96
http(s) 443 ( 0.00%) 367018 ( 0.00%) 828.48
http(c) 2940 ( 0.01%) 270020 ( 0.00%) 91.84
smtp 1970 ( 0.01%) 979604 ( 0.01%) 497.26
ssh 4157 ( 0.01%) 1916142 ( 0.01%) 460.94
dns 7 ( 0.00%) 824 ( 0.00%) 117.71
bgp 106 ( 0.00%) 12875 ( 0.00%) 121.46
other 885 ( 0.00%) 99424 ( 0.00%) 112.34
udp6 17745 ( 0.06%) 3478861 ( 0.02%) 196.05
dns 17712 ( 0.06%) 3475027 ( 0.02%) 196.20
other 33 ( 0.00%) 3834 ( 0.00%) 116.18
icmp6 4112 ( 0.01%) 545212 ( 0.00%) 132.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 33 ( 0.00%) 37071 ( 0.00%) 1123.36
tcpdump file: 200912221400.dump.gz (713.92 MB)