Traffic Trace Info
DumpFile: 200901041400.dump
FileSize: 978.78MB
Id: 200901041400
StartTime: Sun Jan 4 14:00:00 2009
EndTime: Sun Jan 4 14:15:01 2009
TotalTime: 900.59 seconds
TotalCapSize: 762.53MB CapLen: 96 bytes
# of packets: 14171611 (9725.46MB)
AvgRate: 90.57Mbps stddev:11.43M
IP flow (unique src/dst pair) Information
# of flows: 521619 (avg. 27.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.6% 6.8% 2.0% 1.3% 1.3% 1.3% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 316798
Top 10 bandwidth usage (bytes/total in %):
23.8% 20.3% 7.0% 7.0% 6.9% 6.4% 4.7% 4.4% 3.2% 3.0%
# of IPv6 addresses: 996
Top 10 bandwidth usage (bytes/total in %):
97.4% 97.4% 0.5% 0.5% 0.4% 0.3% 0.2% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901041400.pktlen.png)
detailed numbers
[ 32- 63]: 3299064
[ 64- 127]: 3035838
[ 128- 255]: 616841
[ 256- 511]: 432772
[ 512- 1023]: 400710
[ 1024- 2047]: 6386386
Protocol Breakdown
![[protocol breakdown chart]](200901041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14171611 (100.00%) 10197887777 (100.00%) 719.60
ip 14056601 ( 99.19%) 10060285042 ( 98.65%) 715.70
tcp 11264351 ( 79.49%) 9209071650 ( 90.30%) 817.54
http(s) 5406836 ( 38.15%) 7260713838 ( 71.20%) 1342.88
http(c) 2822340 ( 19.92%) 311494250 ( 3.05%) 110.37
squid 906140 ( 6.39%) 636000190 ( 6.24%) 701.88
smtp 228400 ( 1.61%) 43350127 ( 0.43%) 189.80
ftp 50998 ( 0.36%) 15337415 ( 0.15%) 300.75
pop3 9823 ( 0.07%) 3422046 ( 0.03%) 348.37
imap 2087 ( 0.01%) 1415323 ( 0.01%) 678.16
telnet 251 ( 0.00%) 36152 ( 0.00%) 144.03
ssh 52310 ( 0.37%) 12950365 ( 0.13%) 247.57
dns 1127 ( 0.01%) 97507 ( 0.00%) 86.52
bgp 135 ( 0.00%) 34752 ( 0.00%) 257.42
realaud 44 ( 0.00%) 3905 ( 0.00%) 88.75
rtsp 28572 ( 0.20%) 22888039 ( 0.22%) 801.07
icecast 447 ( 0.00%) 31022 ( 0.00%) 69.40
other 1754837 ( 12.38%) 901296479 ( 8.84%) 513.61
udp 2259895 ( 15.95%) 742782418 ( 7.28%) 328.68
dns 1120279 ( 7.91%) 208896598 ( 2.05%) 186.47
realaud 8901 ( 0.06%) 1026032 ( 0.01%) 115.27
halflif 21 ( 0.00%) 1974 ( 0.00%) 94.00
starcra 31 ( 0.00%) 5731 ( 0.00%) 184.87
everque 82 ( 0.00%) 13091 ( 0.00%) 159.65
unreal 14 ( 0.00%) 1400 ( 0.00%) 100.00
quake 17 ( 0.00%) 1745 ( 0.00%) 102.65
cuseeme 7 ( 0.00%) 1265 ( 0.00%) 180.71
other 1130507 ( 7.98%) 532808615 ( 5.22%) 471.30
icmp 394587 ( 2.78%) 35970943 ( 0.35%) 91.16
ipip 325 ( 0.00%) 40274 ( 0.00%) 123.92
ipsec 70 ( 0.00%) 11060 ( 0.00%) 158.00
ip6 136054 ( 0.96%) 72223378 ( 0.71%) 530.84
other 1319 ( 0.01%) 185319 ( 0.00%) 140.50
frag 1464 ( 0.01%) 1236748 ( 0.01%) 844.77
ip6 115010 ( 0.81%) 137602735 ( 1.35%) 1196.44
tcp6 98187 ( 0.69%) 135303393 ( 1.33%) 1378.02
http(s) 869 ( 0.01%) 412686 ( 0.00%) 474.90
http(c) 5482 ( 0.04%) 652821 ( 0.01%) 119.08
smtp 204 ( 0.00%) 80313 ( 0.00%) 393.69
ssh 10 ( 0.00%) 1564 ( 0.00%) 156.40
bgp 391 ( 0.00%) 34247 ( 0.00%) 87.59
other 91231 ( 0.64%) 134121762 ( 1.32%) 1470.13
udp6 10085 ( 0.07%) 1449723 ( 0.01%) 143.75
dns 10001 ( 0.07%) 1440255 ( 0.01%) 144.01
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
halflif 1 ( 0.00%) 94 ( 0.00%) 94.00
other 82 ( 0.00%) 9263 ( 0.00%) 112.96
icmp6 6685 ( 0.05%) 826167 ( 0.01%) 123.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 22 ( 0.00%) 19236 ( 0.00%) 874.36
tcpdump file: 200901041400.dump.gz (331.34 MB)