Traffic Trace Info
DumpFile: 200901021400.dump
FileSize: 957.30MB
Id: 200901021400
StartTime: Fri Jan 2 14:00:00 2009
EndTime: Fri Jan 2 14:15:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 752.82MB CapLen: 96 bytes
# of packets: 13400433 (9638.62MB)
AvgRate: 89.85Mbps stddev:13.36M
IP flow (unique src/dst pair) Information
# of flows: 499112 (avg. 26.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 6.8% 4.8% 4.2% 4.1% 3.3% 2.1% 1.9% 1.8% 1.2%
IP address Information
# of IPv4 addresses: 304834
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.7% 8.5% 8.3% 8.0% 8.0% 5.4% 4.8% 4.8% 4.5%
# of IPv6 addresses: 1012
Top 10 bandwidth usage (bytes/total in %):
99.7% 67.2% 32.5% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901021400.pktlen.png)
detailed numbers
[ 32- 63]: 2549338
[ 64- 127]: 2942948
[ 128- 255]: 771396
[ 256- 511]: 390238
[ 512- 1023]: 439459
[ 1024- 2047]: 6307054
Protocol Breakdown
![[protocol breakdown chart]](200901021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13400433 (100.00%) 10106826991 (100.00%) 754.22
ip 12698866 ( 94.76%) 9088423346 ( 89.92%) 715.69
tcp 10455977 ( 78.03%) 8321054803 ( 82.33%) 795.82
http(s) 3889591 ( 29.03%) 5228359655 ( 51.73%) 1344.19
http(c) 1562828 ( 11.66%) 131668216 ( 1.30%) 84.25
squid 1067978 ( 7.97%) 1116753889 ( 11.05%) 1045.67
smtp 213935 ( 1.60%) 39848218 ( 0.39%) 186.26
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 99611 ( 0.74%) 47062867 ( 0.47%) 472.47
pop3 9918 ( 0.07%) 3947692 ( 0.04%) 398.03
imap 688 ( 0.01%) 99290 ( 0.00%) 144.32
telnet 815 ( 0.01%) 68057 ( 0.00%) 83.51
ssh 984332 ( 7.35%) 136222813 ( 1.35%) 138.39
dns 1074 ( 0.01%) 92462 ( 0.00%) 86.09
bgp 156 ( 0.00%) 61213 ( 0.00%) 392.39
napster 13 ( 0.00%) 1606 ( 0.00%) 123.54
realaud 30 ( 0.00%) 4191 ( 0.00%) 139.70
rtsp 8395 ( 0.06%) 6701682 ( 0.07%) 798.29
icecast 432 ( 0.00%) 33626 ( 0.00%) 77.84
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2616179 ( 19.52%) 1610129202 ( 15.93%) 615.45
udp 1864195 ( 13.91%) 722088582 ( 7.14%) 387.35
dns 855198 ( 6.38%) 164799249 ( 1.63%) 192.70
realaud 61872 ( 0.46%) 51040084 ( 0.51%) 824.93
halflif 25 ( 0.00%) 2183 ( 0.00%) 87.32
starcra 25 ( 0.00%) 4501 ( 0.00%) 180.04
everque 120 ( 0.00%) 20134 ( 0.00%) 167.78
unreal 11 ( 0.00%) 1830 ( 0.00%) 166.36
quake 7 ( 0.00%) 813 ( 0.00%) 116.14
cuseeme 1 ( 0.00%) 83 ( 0.00%) 83.00
other 946915 ( 7.07%) 506207975 ( 5.01%) 534.59
icmp 363552 ( 2.71%) 34143811 ( 0.34%) 93.92
ipip 327 ( 0.00%) 40038 ( 0.00%) 122.44
ipsec 74 ( 0.00%) 11692 ( 0.00%) 158.00
ip6 8991 ( 0.07%) 10347720 ( 0.10%) 1150.90
other 5750 ( 0.04%) 736700 ( 0.01%) 128.12
frag 1416 ( 0.01%) 1169203 ( 0.01%) 825.71
ip6 701567 ( 5.24%) 1018403645 ( 10.08%) 1451.61
tcp6 686160 ( 5.12%) 1016324442 ( 10.06%) 1481.18
http(s) 312 ( 0.00%) 273850 ( 0.00%) 877.72
http(c) 2538 ( 0.02%) 287584 ( 0.00%) 113.31
smtp 266 ( 0.00%) 108280 ( 0.00%) 407.07
ftp 40 ( 0.00%) 3604 ( 0.00%) 90.10
ssh 10 ( 0.00%) 1564 ( 0.00%) 156.40
bgp 387 ( 0.00%) 33831 ( 0.00%) 87.42
other 682607 ( 5.09%) 1015615729 ( 10.05%) 1487.85
udp6 8721 ( 0.07%) 1254361 ( 0.01%) 143.83
dns 8659 ( 0.06%) 1247541 ( 0.01%) 144.07
other 62 ( 0.00%) 6820 ( 0.00%) 110.00
icmp6 6650 ( 0.05%) 815045 ( 0.01%) 122.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5717 ( 0.00%) 952.83
tcpdump file: 200901021400.dump.gz (323.23 MB)