Traffic Trace Info
DumpFile: 200901051400.dump
FileSize: 898.60MB
Id: 200901051400
StartTime: Mon Jan 5 14:00:00 2009
EndTime: Mon Jan 5 14:15:00 2009
TotalTime: 900.05 seconds
TotalCapSize: 704.02MB CapLen: 96 bytes
# of packets: 12751191 (8424.77MB)
AvgRate: 78.54Mbps stddev:10.33M
IP flow (unique src/dst pair) Information
# of flows: 536661 (avg. 23.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 3.5% 1.4% 1.4% 1.3% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 313621
Top 10 bandwidth usage (bytes/total in %):
12.3% 10.5% 8.2% 5.9% 5.0% 3.8% 3.6% 3.6% 3.6% 3.3%
# of IPv6 addresses: 1155
Top 10 bandwidth usage (bytes/total in %):
16.9% 16.6% 12.9% 9.9% 9.9% 8.8% 7.5% 6.8% 4.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901051400.pktlen.png)
detailed numbers
[ 32- 63]: 2599803
[ 64- 127]: 3236943
[ 128- 255]: 736374
[ 256- 511]: 331288
[ 512- 1023]: 436582
[ 1024- 2047]: 5410201
Protocol Breakdown
![[protocol breakdown chart]](200901051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12751191 (100.00%) 8834014106 (100.00%) 692.80
ip 12703877 ( 99.63%) 8826198879 ( 99.91%) 694.76
tcp 10202792 ( 80.01%) 8134445700 ( 92.08%) 797.28
http(s) 4821782 ( 37.81%) 6413926299 ( 72.60%) 1330.20
http(c) 2716118 ( 21.30%) 280953978 ( 3.18%) 103.44
squid 138008 ( 1.08%) 79750966 ( 0.90%) 577.87
smtp 344363 ( 2.70%) 123387735 ( 1.40%) 358.31
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 132400 ( 1.04%) 103018929 ( 1.17%) 778.09
pop3 23896 ( 0.19%) 23178548 ( 0.26%) 969.98
imap 5431 ( 0.04%) 2875876 ( 0.03%) 529.53
telnet 2478 ( 0.02%) 308350 ( 0.00%) 124.44
ssh 468638 ( 3.68%) 127970948 ( 1.45%) 273.07
dns 1890 ( 0.01%) 170889 ( 0.00%) 90.42
bgp 124 ( 0.00%) 37245 ( 0.00%) 300.36
napster 12 ( 0.00%) 1441 ( 0.00%) 120.08
realaud 70 ( 0.00%) 8049 ( 0.00%) 114.99
rtsp 105332 ( 0.83%) 115728398 ( 1.31%) 1098.70
icecast 32385 ( 0.25%) 23743963 ( 0.27%) 733.18
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1409860 ( 11.06%) 839383786 ( 9.50%) 595.37
udp 1920288 ( 15.06%) 522213218 ( 5.91%) 271.95
dns 1103027 ( 8.65%) 242595216 ( 2.75%) 219.94
realaud 13 ( 0.00%) 3478 ( 0.00%) 267.54
halflif 13 ( 0.00%) 1928 ( 0.00%) 148.31
starcra 41 ( 0.00%) 8249 ( 0.00%) 201.20
everque 145 ( 0.00%) 29282 ( 0.00%) 201.94
unreal 18 ( 0.00%) 3311 ( 0.00%) 183.94
quake 13 ( 0.00%) 1627 ( 0.00%) 125.15
cuseeme 8 ( 0.00%) 772 ( 0.00%) 96.50
other 816978 ( 6.41%) 279552320 ( 3.16%) 342.18
icmp 389003 ( 3.05%) 36414909 ( 0.41%) 93.61
ipip 300 ( 0.00%) 36298 ( 0.00%) 120.99
ipsec 581 ( 0.00%) 233246 ( 0.00%) 401.46
ip6 172704 ( 1.35%) 127245996 ( 1.44%) 736.79
other 18209 ( 0.14%) 5609512 ( 0.06%) 308.06
frag 1715 ( 0.01%) 1433116 ( 0.02%) 835.64
ip6 47314 ( 0.37%) 7815227 ( 0.09%) 165.18
tcp6 23098 ( 0.18%) 4202006 ( 0.05%) 181.92
http(s) 1749 ( 0.01%) 1687968 ( 0.02%) 965.10
http(c) 18013 ( 0.14%) 1797765 ( 0.02%) 99.80
smtp 715 ( 0.01%) 346709 ( 0.00%) 484.91
ftp 37 ( 0.00%) 3458 ( 0.00%) 93.46
ssh 183 ( 0.00%) 122538 ( 0.00%) 669.61
dns 46 ( 0.00%) 7500 ( 0.00%) 163.04
bgp 386 ( 0.00%) 34100 ( 0.00%) 88.34
other 1969 ( 0.02%) 201968 ( 0.00%) 102.57
udp6 16466 ( 0.13%) 2641971 ( 0.03%) 160.45
dns 16452 ( 0.13%) 2640436 ( 0.03%) 160.49
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 7703 ( 0.06%) 952552 ( 0.01%) 123.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 14618 ( 0.00%) 859.88
tcpdump file: 200901051400.dump.gz (319.99 MB)