Traffic Trace Info
DumpFile: 200912311400.dump
FileSize: 853.30MB
Id: 200912311400
StartTime: Thu Dec 31 14:00:00 2009
EndTime: Thu Dec 31 14:15:00 2009
TotalTime: 899.62 seconds
TotalCapSize: 669.43MB CapLen: 96 bytes
# of packets: 12049730 (7181.76MB)
AvgRate: 66.97Mbps stddev:9.50M
IP flow (unique src/dst pair) Information
# of flows: 860515 (avg. 14.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 2.0% 1.7% 1.5% 1.4% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 527851
Top 10 bandwidth usage (bytes/total in %):
7.4% 6.7% 4.3% 3.6% 3.0% 2.9% 2.9% 2.6% 2.5% 2.5%
# of IPv6 addresses: 885
Top 10 bandwidth usage (bytes/total in %):
47.3% 47.3% 24.5% 24.4% 10.8% 2.1% 1.6% 1.6% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200912311400.pktlen.png)
detailed numbers
[ 32- 63]: 2616414
[ 64- 127]: 3569203
[ 128- 255]: 651008
[ 256- 511]: 410385
[ 512- 1023]: 204269
[ 1024- 2047]: 4598451
Protocol Breakdown
![[protocol breakdown chart]](200912311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12049730 (100.00%) 7530620842 (100.00%) 624.96
ip 11957561 ( 99.24%) 7510945164 ( 99.74%) 628.13
tcp 9063954 ( 75.22%) 6790230399 ( 90.17%) 749.15
http(s) 3893410 ( 32.31%) 5166903381 ( 68.61%) 1327.09
http(c) 2272284 ( 18.86%) 247963223 ( 3.29%) 109.13
squid 320057 ( 2.66%) 74627123 ( 0.99%) 233.17
smtp 214169 ( 1.78%) 82942961 ( 1.10%) 387.28
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 38011 ( 0.32%) 9549418 ( 0.13%) 251.23
pop3 4180 ( 0.03%) 2543632 ( 0.03%) 608.52
imap 1104 ( 0.01%) 630298 ( 0.01%) 570.92
telnet 294 ( 0.00%) 21606 ( 0.00%) 73.49
ssh 149506 ( 1.24%) 44679595 ( 0.59%) 298.85
dns 22941 ( 0.19%) 2898751 ( 0.04%) 126.36
bgp 132 ( 0.00%) 39949 ( 0.00%) 302.64
napster 134 ( 0.00%) 12056 ( 0.00%) 89.97
realaud 3 ( 0.00%) 180 ( 0.00%) 60.00
rtsp 94 ( 0.00%) 12749 ( 0.00%) 135.63
icecast 7392 ( 0.06%) 6424277 ( 0.09%) 869.09
other 2140237 ( 17.76%) 1150980834 ( 15.28%) 537.78
udp 2017180 ( 16.74%) 627697651 ( 8.34%) 311.18
dns 805421 ( 6.68%) 116146674 ( 1.54%) 144.21
realaud 14 ( 0.00%) 1548 ( 0.00%) 110.57
halflif 123 ( 0.00%) 15122 ( 0.00%) 122.94
starcra 73 ( 0.00%) 10778 ( 0.00%) 147.64
everque 712 ( 0.01%) 308207 ( 0.00%) 432.88
unreal 64 ( 0.00%) 13876 ( 0.00%) 216.81
quake 14 ( 0.00%) 1657 ( 0.00%) 118.36
cuseeme 4 ( 0.00%) 914 ( 0.00%) 228.50
other 1210580 ( 10.05%) 511038108 ( 6.79%) 422.14
icmp 732687 ( 6.08%) 68623480 ( 0.91%) 93.66
ipip 345 ( 0.00%) 41378 ( 0.00%) 119.94
ipsec 995 ( 0.01%) 171786 ( 0.00%) 172.65
ip6 71347 ( 0.59%) 16571607 ( 0.22%) 232.27
other 71053 ( 0.59%) 7608863 ( 0.10%) 107.09
frag 883 ( 0.01%) 975770 ( 0.01%) 1105.06
ip6 92169 ( 0.76%) 19675678 ( 0.26%) 213.47
tcp6 66349 ( 0.55%) 15155986 ( 0.20%) 228.43
http(s) 271 ( 0.00%) 178051 ( 0.00%) 657.01
http(c) 3705 ( 0.03%) 339654 ( 0.00%) 91.67
smtp 839 ( 0.01%) 425574 ( 0.01%) 507.24
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 21 ( 0.00%) 8213 ( 0.00%) 391.10
bgp 112 ( 0.00%) 14055 ( 0.00%) 125.49
other 61396 ( 0.51%) 14189657 ( 0.19%) 231.12
udp6 21893 ( 0.18%) 4041408 ( 0.05%) 184.60
dns 21865 ( 0.18%) 4038236 ( 0.05%) 184.69
other 28 ( 0.00%) 3172 ( 0.00%) 113.29
icmp6 3874 ( 0.03%) 448941 ( 0.01%) 115.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 25263 ( 0.00%) 1098.39
tcpdump file: 200912311400.dump.gz (302.93 MB)