Traffic Trace Info
DumpFile: 200912301400.dump
FileSize: 1408.43MB
Id: 200912301400
StartTime: Wed Dec 30 14:00:00 2009
EndTime: Wed Dec 30 14:15:00 2009
TotalTime: 899.92 seconds
TotalCapSize: 1101.96MB CapLen: 96 bytes
# of packets: 20084349 (12262.48MB)
AvgRate: 114.30Mbps stddev:17.53M
IP flow (unique src/dst pair) Information
# of flows: 856004 (avg. 23.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 5.4% 2.0% 1.4% 1.2% 1.1% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 497091
Top 10 bandwidth usage (bytes/total in %):
15.3% 10.5% 9.7% 7.9% 5.5% 3.8% 2.8% 2.7% 2.5% 2.4%
# of IPv6 addresses: 931
Top 10 bandwidth usage (bytes/total in %):
24.1% 24.0% 21.5% 15.5% 6.1% 6.1% 4.3% 4.0% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912301400.pktlen.png)
detailed numbers
[ 32- 63]: 4585889
[ 64- 127]: 5812611
[ 128- 255]: 984028
[ 256- 511]: 451659
[ 512- 1023]: 330926
[ 1024- 2047]: 7919236
Protocol Breakdown
![[protocol breakdown chart]](200912301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20084349 (100.00%) 12858140382 (100.00%) 640.21
ip 20021229 ( 99.69%) 12848288917 ( 99.92%) 641.73
tcp 15216514 ( 75.76%) 10836266651 ( 84.28%) 712.14
http(s) 6650215 ( 33.11%) 8003064817 ( 62.24%) 1203.43
http(c) 4312156 ( 21.47%) 368176355 ( 2.86%) 85.38
squid 210904 ( 1.05%) 66311321 ( 0.52%) 314.41
smtp 207066 ( 1.03%) 39091387 ( 0.30%) 188.79
ftp 42825 ( 0.21%) 9964321 ( 0.08%) 232.68
pop3 8334 ( 0.04%) 8460545 ( 0.07%) 1015.18
imap 1235 ( 0.01%) 656267 ( 0.01%) 531.39
telnet 2070 ( 0.01%) 155298 ( 0.00%) 75.02
ssh 21397 ( 0.11%) 7436356 ( 0.06%) 347.54
dns 23482 ( 0.12%) 4237660 ( 0.03%) 180.46
bgp 126 ( 0.00%) 35124 ( 0.00%) 278.76
napster 87 ( 0.00%) 5672 ( 0.00%) 65.20
realaud 4 ( 0.00%) 248 ( 0.00%) 62.00
rtsp 373 ( 0.00%) 84441 ( 0.00%) 226.38
icecast 806 ( 0.00%) 63573 ( 0.00%) 78.87
hotline 14 ( 0.00%) 1459 ( 0.00%) 104.21
other 3735414 ( 18.60%) 2328521447 ( 18.11%) 623.36
udp 4076153 ( 20.30%) 1948265552 ( 15.15%) 477.97
dns 1069772 ( 5.33%) 148299124 ( 1.15%) 138.63
realaud 1860 ( 0.01%) 113426 ( 0.00%) 60.98
halflif 139 ( 0.00%) 19424 ( 0.00%) 139.74
starcra 67 ( 0.00%) 10355 ( 0.00%) 154.55
everque 133 ( 0.00%) 31370 ( 0.00%) 235.86
unreal 55 ( 0.00%) 9473 ( 0.00%) 172.24
quake 18 ( 0.00%) 1471 ( 0.00%) 81.72
cuseeme 7 ( 0.00%) 919 ( 0.00%) 131.29
other 3002777 ( 14.95%) 1799343734 ( 13.99%) 599.23
icmp 633416 ( 3.15%) 51304914 ( 0.40%) 81.00
ipip 359 ( 0.00%) 44480 ( 0.00%) 123.90
ipsec 469 ( 0.00%) 77366 ( 0.00%) 164.96
ip6 65571 ( 0.33%) 9127666 ( 0.07%) 139.20
other 28747 ( 0.14%) 3202288 ( 0.02%) 111.40
frag 16869 ( 0.08%) 13233980 ( 0.10%) 784.51
ip6 63120 ( 0.31%) 9851465 ( 0.08%) 156.08
tcp6 36256 ( 0.18%) 5086664 ( 0.04%) 140.30
http(s) 498 ( 0.00%) 631124 ( 0.00%) 1267.32
http(c) 3707 ( 0.02%) 340327 ( 0.00%) 91.81
smtp 2856 ( 0.01%) 1527425 ( 0.01%) 534.81
pop3 1688 ( 0.01%) 125863 ( 0.00%) 74.56
ssh 5 ( 0.00%) 766 ( 0.00%) 153.20
bgp 109 ( 0.00%) 13553 ( 0.00%) 124.34
other 27393 ( 0.14%) 2447606 ( 0.02%) 89.35
udp6 22289 ( 0.11%) 4217449 ( 0.03%) 189.22
dns 22275 ( 0.11%) 4215831 ( 0.03%) 189.26
other 14 ( 0.00%) 1618 ( 0.00%) 115.57
icmp6 4511 ( 0.02%) 508573 ( 0.00%) 112.74
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 33 ( 0.00%) 34563 ( 0.00%) 1047.36
tcpdump file: 200912301400.dump.gz (470.43 MB)