Traffic Trace Info
DumpFile: 200912231400.dump
FileSize: 1989.50MB
Id: 200912231400
StartTime: Wed Dec 23 14:00:00 2009
EndTime: Wed Dec 23 14:15:01 2009
TotalTime: 900.71 seconds
TotalCapSize: 1566.81MB CapLen: 96 bytes
# of packets: 27700331 (19032.38MB)
AvgRate: 177.28Mbps stddev:19.61M
IP flow (unique src/dst pair) Information
# of flows: 728091 (avg. 38.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.0% 1.8% 1.4% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 447117
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.8% 7.6% 4.7% 4.6% 3.3% 3.1% 2.7% 2.1% 2.1%
# of IPv6 addresses: 863
Top 10 bandwidth usage (bytes/total in %):
33.3% 13.6% 8.0% 6.0% 5.7% 4.2% 4.2% 4.1% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912231400.pktlen.png)
detailed numbers
[ 32- 63]: 5245777
[ 64- 127]: 7531762
[ 128- 255]: 1211602
[ 256- 511]: 661008
[ 512- 1023]: 587262
[ 1024- 2047]: 12462920
Protocol Breakdown
![[protocol breakdown chart]](200912231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27700331 (100.00%) 19956894411 (100.00%) 720.46
ip 27674760 ( 99.91%) 19952407414 ( 99.98%) 720.96
tcp 24293835 ( 87.70%) 19177929490 ( 96.10%) 789.42
http(s) 10034313 ( 36.22%) 13704151578 ( 68.67%) 1365.73
http(c) 6288538 ( 22.70%) 597744827 ( 3.00%) 95.05
squid 320947 ( 1.16%) 129471225 ( 0.65%) 403.40
smtp 211259 ( 0.76%) 81314771 ( 0.41%) 384.91
nntp 42 ( 0.00%) 3687 ( 0.00%) 87.79
ftp 50316 ( 0.18%) 4747736 ( 0.02%) 94.36
pop3 19817 ( 0.07%) 18239841 ( 0.09%) 920.41
imap 1580 ( 0.01%) 336546 ( 0.00%) 213.00
telnet 390 ( 0.00%) 27644 ( 0.00%) 70.88
ssh 728978 ( 2.63%) 91034897 ( 0.46%) 124.88
dns 23591 ( 0.09%) 6475898 ( 0.03%) 274.51
bgp 128 ( 0.00%) 34019 ( 0.00%) 265.77
napster 39 ( 0.00%) 7464 ( 0.00%) 191.38
realaud 36 ( 0.00%) 2680 ( 0.00%) 74.44
rtsp 92148 ( 0.33%) 17647546 ( 0.09%) 191.51
icecast 763 ( 0.00%) 53499 ( 0.00%) 70.12
other 6520949 ( 23.54%) 4526635572 ( 22.68%) 694.17
udp 2601297 ( 9.39%) 704157961 ( 3.53%) 270.69
dns 1257514 ( 4.54%) 180912804 ( 0.91%) 143.87
realaud 2770 ( 0.01%) 166790 ( 0.00%) 60.21
halflif 81 ( 0.00%) 7131 ( 0.00%) 88.04
starcra 145 ( 0.00%) 24186 ( 0.00%) 166.80
everque 144 ( 0.00%) 23594 ( 0.00%) 163.85
unreal 26 ( 0.00%) 4337 ( 0.00%) 166.81
quake 19 ( 0.00%) 1759 ( 0.00%) 92.58
cuseeme 7 ( 0.00%) 736 ( 0.00%) 105.14
other 1340227 ( 4.84%) 522801296 ( 2.62%) 390.08
icmp 643310 ( 2.32%) 52613658 ( 0.26%) 81.79
ipip 328 ( 0.00%) 41052 ( 0.00%) 125.16
ipsec 198 ( 0.00%) 32036 ( 0.00%) 161.80
ip6 55808 ( 0.20%) 7425311 ( 0.04%) 133.05
other 79984 ( 0.29%) 10207906 ( 0.05%) 127.62
frag 8040 ( 0.03%) 6841987 ( 0.03%) 850.99
ip6 25571 ( 0.09%) 4486997 ( 0.02%) 175.47
tcp6 5212 ( 0.02%) 1041524 ( 0.01%) 199.83
http(s) 27 ( 0.00%) 13212 ( 0.00%) 489.33
http(c) 2826 ( 0.01%) 263055 ( 0.00%) 93.08
smtp 1283 ( 0.00%) 644296 ( 0.00%) 502.18
ssh 74 ( 0.00%) 11404 ( 0.00%) 154.11
dns 21 ( 0.00%) 6498 ( 0.00%) 309.43
bgp 115 ( 0.00%) 14455 ( 0.00%) 125.70
other 866 ( 0.00%) 88604 ( 0.00%) 102.31
udp6 15622 ( 0.06%) 2894886 ( 0.01%) 185.31
dns 15567 ( 0.06%) 2887084 ( 0.01%) 185.46
other 55 ( 0.00%) 7802 ( 0.00%) 141.85
icmp6 4689 ( 0.02%) 528124 ( 0.00%) 112.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 18383 ( 0.00%) 1021.28
tcpdump file: 200912231400.dump.gz (672.56 MB)