Traffic Trace Info
DumpFile: 200901061400.dump
FileSize: 1335.54MB
Id: 200901061400
StartTime: Tue Jan 6 14:00:00 2009
EndTime: Tue Jan 6 14:15:01 2009
TotalTime: 900.47 seconds
TotalCapSize: 1044.06MB CapLen: 96 bytes
# of packets: 19101771 (12164.28MB)
AvgRate: 113.31Mbps stddev:13.79M
IP flow (unique src/dst pair) Information
# of flows: 559702 (avg. 34.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.5% 1.5% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 321423
Top 10 bandwidth usage (bytes/total in %):
9.7% 7.3% 6.6% 6.1% 3.0% 3.0% 1.8% 1.8% 1.7% 1.7%
# of IPv6 addresses: 1139
Top 10 bandwidth usage (bytes/total in %):
54.6% 54.5% 41.1% 13.9% 13.8% 13.4% 2.6% 2.5% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901061400.pktlen.png)
detailed numbers
[ 32- 63]: 4303758
[ 64- 127]: 4767426
[ 128- 255]: 912941
[ 256- 511]: 618107
[ 512- 1023]: 704433
[ 1024- 2047]: 7795106
Protocol Breakdown
![[protocol breakdown chart]](200901061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19101771 (100.00%) 12755173888 (100.00%) 667.75
ip 18839208 ( 98.63%) 12402978280 ( 97.24%) 658.36
tcp 15497759 ( 81.13%) 11238431979 ( 88.11%) 725.16
http(s) 5208227 ( 27.27%) 6778089361 ( 53.14%) 1301.42
http(c) 3843120 ( 20.12%) 505385520 ( 3.96%) 131.50
squid 453663 ( 2.37%) 221613160 ( 1.74%) 488.50
smtp 488201 ( 2.56%) 313040219 ( 2.45%) 641.21
ftp 162499 ( 0.85%) 113204922 ( 0.89%) 696.65
pop3 18716 ( 0.10%) 3385387 ( 0.03%) 180.88
imap 6953 ( 0.04%) 1681934 ( 0.01%) 241.90
telnet 2810 ( 0.01%) 456299 ( 0.00%) 162.38
ssh 805019 ( 4.21%) 129269955 ( 1.01%) 160.58
dns 1980 ( 0.01%) 366640 ( 0.00%) 185.17
bgp 148 ( 0.00%) 49241 ( 0.00%) 332.71
napster 18 ( 0.00%) 6393 ( 0.00%) 355.17
realaud 61 ( 0.00%) 5913 ( 0.00%) 96.93
rtsp 39866 ( 0.21%) 38364513 ( 0.30%) 962.34
icecast 906 ( 0.00%) 73604 ( 0.00%) 81.24
other 4465571 ( 23.38%) 3133438858 ( 24.57%) 701.69
udp 2569393 ( 13.45%) 921031991 ( 7.22%) 358.46
dns 999060 ( 5.23%) 195995262 ( 1.54%) 196.18
realaud 939 ( 0.00%) 58105 ( 0.00%) 61.88
halflif 27 ( 0.00%) 3701 ( 0.00%) 137.07
starcra 30 ( 0.00%) 5510 ( 0.00%) 183.67
everque 123 ( 0.00%) 21278 ( 0.00%) 172.99
unreal 15 ( 0.00%) 2342 ( 0.00%) 156.13
quake 24 ( 0.00%) 2248 ( 0.00%) 93.67
cuseeme 5 ( 0.00%) 483 ( 0.00%) 96.60
other 1569093 ( 8.21%) 724883318 ( 5.68%) 461.98
icmp 362743 ( 1.90%) 34997505 ( 0.27%) 96.48
ipip 318 ( 0.00%) 37716 ( 0.00%) 118.60
ipsec 267731 ( 1.40%) 135576314 ( 1.06%) 506.39
ip6 137899 ( 0.72%) 72190752 ( 0.57%) 523.50
other 3365 ( 0.02%) 712023 ( 0.01%) 211.60
frag 5209 ( 0.03%) 3529782 ( 0.03%) 677.63
ip6 262563 ( 1.37%) 352195608 ( 2.76%) 1341.38
tcp6 239268 ( 1.25%) 348794986 ( 2.73%) 1457.76
http(s) 103876 ( 0.54%) 154808381 ( 1.21%) 1490.32
http(c) 2199 ( 0.01%) 243751 ( 0.00%) 110.85
smtp 1045 ( 0.01%) 356030 ( 0.00%) 340.70
ftp 207 ( 0.00%) 35532 ( 0.00%) 171.65
pop3 18 ( 0.00%) 1680 ( 0.00%) 93.33
ssh 70 ( 0.00%) 15604 ( 0.00%) 222.91
bgp 393 ( 0.00%) 34540 ( 0.00%) 87.89
other 131460 ( 0.69%) 193299468 ( 1.52%) 1470.41
udp6 15429 ( 0.08%) 2372723 ( 0.02%) 153.78
dns 15402 ( 0.08%) 2369753 ( 0.02%) 153.86
other 27 ( 0.00%) 2970 ( 0.00%) 110.00
icmp6 7816 ( 0.04%) 1005538 ( 0.01%) 128.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 18281 ( 0.00%) 914.05
tcpdump file: 200901061400.dump.gz (491.22 MB)