Traffic Trace Info
DumpFile: 200912241400.dump
FileSize: 1527.00MB
Id: 200912241400
StartTime: Thu Dec 24 14:00:01 2009
EndTime: Thu Dec 24 14:15:00 2009
TotalTime: 899.23 seconds
TotalCapSize: 1194.99MB CapLen: 96 bytes
# of packets: 21758264 (14274.37MB)
AvgRate: 133.17Mbps stddev:19.11M
IP flow (unique src/dst pair) Information
# of flows: 958566 (avg. 22.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.4% 2.2% 2.0% 1.7% 1.4% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 555814
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.6% 5.0% 5.0% 4.0% 3.9% 3.5% 2.9% 2.7% 2.7%
# of IPv6 addresses: 962
Top 10 bandwidth usage (bytes/total in %):
24.4% 9.3% 9.0% 8.4% 6.8% 5.2% 5.2% 4.6% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912241400.pktlen.png)
detailed numbers
[ 32- 63]: 5289334
[ 64- 127]: 5222225
[ 128- 255]: 968081
[ 256- 511]: 596434
[ 512- 1023]: 498903
[ 1024- 2047]: 9183287
Protocol Breakdown
![[protocol breakdown chart]](200912241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21758264 (100.00%) 14967757090 (100.00%) 687.91
ip 21727681 ( 99.86%) 14961659267 ( 99.96%) 688.60
tcp 18248127 ( 83.87%) 14010682303 ( 93.61%) 767.79
http(s) 7513692 ( 34.53%) 9930588389 ( 66.35%) 1321.67
http(c) 5289806 ( 24.31%) 842968785 ( 5.63%) 159.36
squid 318997 ( 1.47%) 64662555 ( 0.43%) 202.71
smtp 276805 ( 1.27%) 134744788 ( 0.90%) 486.79
ftp 27257 ( 0.13%) 3871312 ( 0.03%) 142.03
pop3 23004 ( 0.11%) 12017286 ( 0.08%) 522.40
imap 1972 ( 0.01%) 173160 ( 0.00%) 87.81
telnet 516 ( 0.00%) 38260 ( 0.00%) 74.15
ssh 220848 ( 1.02%) 32740267 ( 0.22%) 148.25
dns 33605 ( 0.15%) 5809255 ( 0.04%) 172.87
bgp 145 ( 0.00%) 44560 ( 0.00%) 307.31
napster 79 ( 0.00%) 14245 ( 0.00%) 180.32
realaud 41 ( 0.00%) 3666 ( 0.00%) 89.41
rtsp 77559 ( 0.36%) 4954544 ( 0.03%) 63.88
icecast 8109 ( 0.04%) 548718 ( 0.00%) 67.67
hotline 21 ( 0.00%) 2204 ( 0.00%) 104.95
other 4455670 ( 20.48%) 2977500249 ( 19.89%) 668.25
udp 2759349 ( 12.68%) 884787308 ( 5.91%) 320.65
dns 1048983 ( 4.82%) 162376660 ( 1.08%) 154.79
realaud 991 ( 0.00%) 60872 ( 0.00%) 61.42
halflif 56 ( 0.00%) 7551 ( 0.00%) 134.84
starcra 86 ( 0.00%) 15548 ( 0.00%) 180.79
everque 236 ( 0.00%) 36906 ( 0.00%) 156.38
unreal 25 ( 0.00%) 4603 ( 0.00%) 184.12
quake 30 ( 0.00%) 4426 ( 0.00%) 147.53
cuseeme 9 ( 0.00%) 1196 ( 0.00%) 132.89
other 1706991 ( 7.85%) 721005537 ( 4.82%) 422.38
icmp 602438 ( 2.77%) 49575915 ( 0.33%) 82.29
ipip 348 ( 0.00%) 43334 ( 0.00%) 124.52
ipsec 193 ( 0.00%) 30918 ( 0.00%) 160.20
ip6 72738 ( 0.33%) 9861388 ( 0.07%) 135.57
other 44488 ( 0.20%) 6678101 ( 0.04%) 150.11
frag 7836 ( 0.04%) 8233856 ( 0.06%) 1050.77
ip6 30583 ( 0.14%) 6097823 ( 0.04%) 199.39
tcp6 9202 ( 0.04%) 2098662 ( 0.01%) 228.07
http(s) 450 ( 0.00%) 573212 ( 0.00%) 1273.80
http(c) 4538 ( 0.02%) 412470 ( 0.00%) 90.89
smtp 935 ( 0.00%) 426634 ( 0.00%) 456.29
ssh 2319 ( 0.01%) 588834 ( 0.00%) 253.92
dns 21 ( 0.00%) 5903 ( 0.00%) 281.10
bgp 105 ( 0.00%) 13485 ( 0.00%) 128.43
other 834 ( 0.00%) 78124 ( 0.00%) 93.67
udp6 16606 ( 0.08%) 3271448 ( 0.02%) 197.00
dns 16578 ( 0.08%) 3266171 ( 0.02%) 197.02
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
other 27 ( 0.00%) 5160 ( 0.00%) 191.11
icmp6 4724 ( 0.02%) 700780 ( 0.00%) 148.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 22853 ( 0.00%) 1088.24
tcpdump file: 200912241400.dump.gz (544.56 MB)