Traffic Trace Info
DumpFile: 200901031400.dump
FileSize: 964.77MB
Id: 200901031400
StartTime: Sat Jan 3 14:00:00 2009
EndTime: Sat Jan 3 14:15:00 2009
TotalTime: 900.11 seconds
TotalCapSize: 756.63MB CapLen: 96 bytes
# of packets: 13640163 (9808.28MB)
AvgRate: 91.40Mbps stddev:18.46M
IP flow (unique src/dst pair) Information
# of flows: 657326 (avg. 20.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.8% 2.9% 2.3% 2.2% 1.9% 1.7% 1.5% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 385694
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.2% 8.3% 5.7% 5.6% 5.1% 3.6% 3.4% 2.8% 2.6%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
99.6% 57.3% 42.2% 0.2% 0.2% 0.1% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901031400.pktlen.png)
detailed numbers
[ 32- 63]: 2895598
[ 64- 127]: 2929322
[ 128- 255]: 580116
[ 256- 511]: 320542
[ 512- 1023]: 377786
[ 1024- 2047]: 6536799
Protocol Breakdown
![[protocol breakdown chart]](200901031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13640163 (100.00%) 10284727980 (100.00%) 754.00
ip 12835892 ( 94.10%) 9119568348 ( 88.67%) 710.47
tcp 9788680 ( 71.76%) 7934401129 ( 77.15%) 810.57
http(s) 3898212 ( 28.58%) 5078949233 ( 49.38%) 1302.89
http(c) 1845651 ( 13.53%) 164964538 ( 1.60%) 89.38
squid 590834 ( 4.33%) 529707969 ( 5.15%) 896.54
smtp 381476 ( 2.80%) 48988260 ( 0.48%) 128.42
ftp 66991 ( 0.49%) 32701693 ( 0.32%) 488.15
pop3 9290 ( 0.07%) 3939600 ( 0.04%) 424.07
imap 867 ( 0.01%) 356738 ( 0.00%) 411.46
telnet 464 ( 0.00%) 108243 ( 0.00%) 233.28
ssh 280517 ( 2.06%) 35198352 ( 0.34%) 125.48
dns 1183 ( 0.01%) 103005 ( 0.00%) 87.07
bgp 142 ( 0.00%) 50837 ( 0.00%) 358.01
napster 62 ( 0.00%) 5347 ( 0.00%) 86.24
realaud 24 ( 0.00%) 3079 ( 0.00%) 128.29
rtsp 1715 ( 0.01%) 134398 ( 0.00%) 78.37
icecast 732 ( 0.01%) 70783 ( 0.00%) 96.70
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2710519 ( 19.87%) 2039118992 ( 19.83%) 752.30
udp 2494744 ( 18.29%) 1082159831 ( 10.52%) 433.78
dns 930094 ( 6.82%) 193385068 ( 1.88%) 207.92
realaud 215 ( 0.00%) 14808 ( 0.00%) 68.87
halflif 23 ( 0.00%) 2119 ( 0.00%) 92.13
starcra 13 ( 0.00%) 2360 ( 0.00%) 181.54
everque 64 ( 0.00%) 12402 ( 0.00%) 193.78
unreal 15 ( 0.00%) 2609 ( 0.00%) 173.93
quake 15 ( 0.00%) 1904 ( 0.00%) 126.93
cuseeme 6 ( 0.00%) 735 ( 0.00%) 122.50
other 1564267 ( 11.47%) 888712261 ( 8.64%) 568.13
icmp 407901 ( 2.99%) 37488722 ( 0.36%) 91.91
ipip 314 ( 0.00%) 37530 ( 0.00%) 119.52
ipsec 72 ( 0.00%) 11376 ( 0.00%) 158.00
ip6 130028 ( 0.95%) 63778671 ( 0.62%) 490.50
other 14153 ( 0.10%) 1691089 ( 0.02%) 119.49
frag 1586 ( 0.01%) 1322839 ( 0.01%) 834.07
ip6 804271 ( 5.90%) 1165159632 ( 11.33%) 1448.72
tcp6 786750 ( 5.77%) 1162743003 ( 11.31%) 1477.91
http(s) 2246 ( 0.02%) 1257995 ( 0.01%) 560.10
http(c) 4984 ( 0.04%) 900087 ( 0.01%) 180.60
smtp 211 ( 0.00%) 62475 ( 0.00%) 296.09
pop3 43 ( 0.00%) 3445 ( 0.00%) 80.12
ssh 10 ( 0.00%) 1564 ( 0.00%) 156.40
bgp 370 ( 0.00%) 31442 ( 0.00%) 84.98
other 778886 ( 5.71%) 1160485995 ( 11.28%) 1489.93
udp6 10120 ( 0.07%) 1539020 ( 0.01%) 152.08
dns 10088 ( 0.07%) 1535502 ( 0.01%) 152.21
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 30 ( 0.00%) 3300 ( 0.00%) 110.00
icmp6 7361 ( 0.05%) 865083 ( 0.01%) 117.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9 ( 0.00%) 8310 ( 0.00%) 923.33
tcpdump file: 200901031400.dump.gz (326.96 MB)