Traffic Trace Info
DumpFile: 200912291400.dump
FileSize: 1295.33MB
Id: 200912291400
StartTime: Tue Dec 29 14:00:00 2009
EndTime: Tue Dec 29 14:15:01 2009
TotalTime: 900.45 seconds
TotalCapSize: 1013.79MB CapLen: 96 bytes
# of packets: 18450375 (11738.76MB)
AvgRate: 109.36Mbps stddev:13.51M
IP flow (unique src/dst pair) Information
# of flows: 968685 (avg. 19.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 5.9% 3.0% 2.1% 1.8% 1.7% 1.5% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 566948
Top 10 bandwidth usage (bytes/total in %):
9.9% 8.3% 8.2% 7.1% 6.1% 4.5% 3.4% 3.2% 3.2% 3.1%
# of IPv6 addresses: 910
Top 10 bandwidth usage (bytes/total in %):
41.9% 41.8% 15.4% 13.4% 3.2% 2.9% 2.8% 2.7% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912291400.pktlen.png)
detailed numbers
[ 32- 63]: 4119708
[ 64- 127]: 5071543
[ 128- 255]: 873053
[ 256- 511]: 418803
[ 512- 1023]: 344699
[ 1024- 2047]: 7622569
Protocol Breakdown
![[protocol breakdown chart]](200912291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18450375 (100.00%) 12308977804 (100.00%) 667.14
ip 18377593 ( 99.61%) 12299295245 ( 99.92%) 669.25
tcp 15040247 ( 81.52%) 11431380075 ( 92.87%) 760.05
http(s) 6496191 ( 35.21%) 8525204022 ( 69.26%) 1312.34
http(c) 3953274 ( 21.43%) 456099236 ( 3.71%) 115.37
squid 224782 ( 1.22%) 70325657 ( 0.57%) 312.86
smtp 292927 ( 1.59%) 100008106 ( 0.81%) 341.41
ftp 41147 ( 0.22%) 7829300 ( 0.06%) 190.28
pop3 16770 ( 0.09%) 13327067 ( 0.11%) 794.70
imap 1504 ( 0.01%) 714973 ( 0.01%) 475.38
telnet 2415 ( 0.01%) 179856 ( 0.00%) 74.47
ssh 96319 ( 0.52%) 19627246 ( 0.16%) 203.77
dns 21583 ( 0.12%) 5416496 ( 0.04%) 250.96
bgp 141 ( 0.00%) 43061 ( 0.00%) 305.40
napster 112 ( 0.00%) 14339 ( 0.00%) 128.03
realaud 3189 ( 0.02%) 215041 ( 0.00%) 67.43
rtsp 10290 ( 0.06%) 11572502 ( 0.09%) 1124.64
icecast 7580 ( 0.04%) 600876 ( 0.00%) 79.27
hotline 5 ( 0.00%) 352 ( 0.00%) 70.40
other 3872010 ( 20.99%) 2220201465 ( 18.04%) 573.40
udp 2700091 ( 14.63%) 809105526 ( 6.57%) 299.66
dns 964729 ( 5.23%) 138477520 ( 1.13%) 143.54
realaud 791 ( 0.00%) 48363 ( 0.00%) 61.14
halflif 130 ( 0.00%) 15391 ( 0.00%) 118.39
starcra 53 ( 0.00%) 9107 ( 0.00%) 171.83
everque 267 ( 0.00%) 39189 ( 0.00%) 146.78
unreal 34 ( 0.00%) 5376 ( 0.00%) 158.12
quake 54 ( 0.00%) 9195 ( 0.00%) 170.28
cuseeme 9 ( 0.00%) 1595 ( 0.00%) 177.22
other 1733723 ( 9.40%) 670257897 ( 5.45%) 386.60
icmp 523559 ( 2.84%) 43661774 ( 0.35%) 83.39
ipip 359 ( 0.00%) 42276 ( 0.00%) 117.76
ipsec 965 ( 0.01%) 415054 ( 0.00%) 430.11
ip6 68521 ( 0.37%) 9223766 ( 0.07%) 134.61
other 43851 ( 0.24%) 5466774 ( 0.04%) 124.67
frag 1534 ( 0.01%) 1584492 ( 0.01%) 1032.92
ip6 72782 ( 0.39%) 9682559 ( 0.08%) 133.04
tcp6 49046 ( 0.27%) 4785396 ( 0.04%) 97.57
http(s) 49 ( 0.00%) 25562 ( 0.00%) 521.67
http(c) 3683 ( 0.02%) 353133 ( 0.00%) 95.88
smtp 475 ( 0.00%) 235150 ( 0.00%) 495.05
ssh 179 ( 0.00%) 31650 ( 0.00%) 176.82
dns 6 ( 0.00%) 2258 ( 0.00%) 376.33
bgp 113 ( 0.00%) 14568 ( 0.00%) 128.92
other 44541 ( 0.24%) 4123075 ( 0.03%) 92.57
udp6 19341 ( 0.10%) 4352126 ( 0.04%) 225.02
dns 19309 ( 0.10%) 4348538 ( 0.04%) 225.21
other 32 ( 0.00%) 3588 ( 0.00%) 112.12
icmp6 4333 ( 0.02%) 508892 ( 0.00%) 117.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 32 ( 0.00%) 32065 ( 0.00%) 1002.03
tcpdump file: 200912291400.dump.gz (458.50 MB)