Traffic Trace Info
DumpFile: 200912261400.dump
FileSize: 1296.64MB
Id: 200912261400
StartTime: Sat Dec 26 14:00:01 2009
EndTime: Sat Dec 26 14:15:00 2009
TotalTime: 899.40 seconds
TotalCapSize: 1019.67MB CapLen: 96 bytes
# of packets: 18150881 (11449.89MB)
AvgRate: 106.78Mbps stddev:18.05M
IP flow (unique src/dst pair) Information
# of flows: 1055342 (avg. 17.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.5% 2.4% 2.3% 2.0% 1.9% 1.7% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 698027
Top 10 bandwidth usage (bytes/total in %):
9.5% 5.9% 3.5% 3.5% 3.5% 3.1% 3.0% 2.6% 2.6% 2.5%
# of IPv6 addresses: 856
Top 10 bandwidth usage (bytes/total in %):
30.2% 17.8% 6.3% 5.6% 5.2% 4.8% 4.4% 4.4% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912261400.pktlen.png)
detailed numbers
[ 32- 63]: 4309204
[ 64- 127]: 5007094
[ 128- 255]: 696590
[ 256- 511]: 416670
[ 512- 1023]: 363331
[ 1024- 2047]: 7357992
Protocol Breakdown
![[protocol breakdown chart]](200912261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18150881 (100.00%) 12006082477 (100.00%) 661.46
ip 18123607 ( 99.85%) 12001149365 ( 99.96%) 662.18
tcp 15379246 ( 84.73%) 11248942314 ( 93.69%) 731.44
http(s) 6419996 ( 35.37%) 8548725717 ( 71.20%) 1331.58
http(c) 4815847 ( 26.53%) 850108663 ( 7.08%) 176.52
squid 378832 ( 2.09%) 102266166 ( 0.85%) 269.95
smtp 189578 ( 1.04%) 59159850 ( 0.49%) 312.06
ftp 33766 ( 0.19%) 4040686 ( 0.03%) 119.67
pop3 19836 ( 0.11%) 14408035 ( 0.12%) 726.36
imap 1186 ( 0.01%) 430897 ( 0.00%) 363.32
telnet 52 ( 0.00%) 6110 ( 0.00%) 117.50
ssh 17504 ( 0.10%) 4251678 ( 0.04%) 242.90
dns 33743 ( 0.19%) 4616771 ( 0.04%) 136.82
bgp 132 ( 0.00%) 37964 ( 0.00%) 287.61
napster 17 ( 0.00%) 1551 ( 0.00%) 91.24
realaud 40 ( 0.00%) 14962 ( 0.00%) 374.05
rtsp 132888 ( 0.73%) 16668525 ( 0.14%) 125.43
icecast 4606 ( 0.03%) 304038 ( 0.00%) 66.01
other 3331221 ( 18.35%) 1643900581 ( 13.69%) 493.48
udp 2070387 ( 11.41%) 677853408 ( 5.65%) 327.40
dns 903466 ( 4.98%) 124768713 ( 1.04%) 138.10
realaud 8 ( 0.00%) 786 ( 0.00%) 98.25
halflif 42 ( 0.00%) 4001 ( 0.00%) 95.26
starcra 114 ( 0.00%) 20087 ( 0.00%) 176.20
everque 107 ( 0.00%) 23153 ( 0.00%) 216.38
unreal 28 ( 0.00%) 5817 ( 0.00%) 207.75
quake 11 ( 0.00%) 1220 ( 0.00%) 110.91
cuseeme 11 ( 0.00%) 1442 ( 0.00%) 131.09
other 1166541 ( 6.43%) 552980138 ( 4.61%) 474.03
icmp 589247 ( 3.25%) 47506727 ( 0.40%) 80.62
ipip 357 ( 0.00%) 45690 ( 0.00%) 127.98
ipsec 98 ( 0.00%) 16092 ( 0.00%) 164.20
ip6 82864 ( 0.46%) 26578931 ( 0.22%) 320.75
other 1408 ( 0.01%) 206203 ( 0.00%) 146.45
frag 552 ( 0.00%) 585204 ( 0.00%) 1060.15
ip6 27274 ( 0.15%) 4933112 ( 0.04%) 180.87
tcp6 7837 ( 0.04%) 1545518 ( 0.01%) 197.21
http(s) 108 ( 0.00%) 94430 ( 0.00%) 874.35
http(c) 5004 ( 0.03%) 452783 ( 0.00%) 90.48
smtp 1848 ( 0.01%) 904864 ( 0.01%) 489.65
ssh 59 ( 0.00%) 10514 ( 0.00%) 178.20
dns 10 ( 0.00%) 1324 ( 0.00%) 132.40
bgp 111 ( 0.00%) 13989 ( 0.00%) 126.03
other 697 ( 0.00%) 67614 ( 0.00%) 97.01
udp6 15402 ( 0.08%) 2894364 ( 0.02%) 187.92
dns 15272 ( 0.08%) 2871433 ( 0.02%) 188.02
other 130 ( 0.00%) 22931 ( 0.00%) 176.39
icmp6 3980 ( 0.02%) 463221 ( 0.00%) 116.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 25 ( 0.00%) 25929 ( 0.00%) 1037.16
tcpdump file: 200912261400.dump.gz (442.12 MB)