Traffic Trace Info
DumpFile: 200901081400.dump
FileSize: 1501.81MB
Id: 200901081400
StartTime: Thu Jan 8 14:00:01 2009
EndTime: Thu Jan 8 14:15:00 2009
TotalTime: 899.68 seconds
TotalCapSize: 1186.28MB CapLen: 96 bytes
# of packets: 20678159 (12257.89MB)
AvgRate: 114.28Mbps stddev:12.29M
IP flow (unique src/dst pair) Information
# of flows: 984550 (avg. 21.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 4.0% 3.9% 3.2% 2.2% 2.1% 1.2% 1.2% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 506820
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.0% 6.9% 4.6% 4.6% 4.5% 3.8% 3.7% 2.6% 2.5%
# of IPv6 addresses: 1165
Top 10 bandwidth usage (bytes/total in %):
99.5% 66.4% 33.1% 0.2% 0.2% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901081400.pktlen.png)
detailed numbers
[ 32- 63]: 4262791
[ 64- 127]: 6170132
[ 128- 255]: 1254672
[ 256- 511]: 587613
[ 512- 1023]: 803173
[ 1024- 2047]: 7599778
Protocol Breakdown
![[protocol breakdown chart]](200901081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20678159 (100.00%) 12853332056 (100.00%) 621.59
ip 19613133 ( 94.85%) 11300878381 ( 87.92%) 576.19
tcp 16052353 ( 77.63%) 10238676465 ( 79.66%) 637.83
http(s) 5467269 ( 26.44%) 6894904037 ( 53.64%) 1261.12
http(c) 4595825 ( 22.23%) 692486851 ( 5.39%) 150.68
squid 358991 ( 1.74%) 128202859 ( 1.00%) 357.12
smtp 375525 ( 1.82%) 80582697 ( 0.63%) 214.59
nntp 2 ( 0.00%) 122 ( 0.00%) 61.00
ftp 229585 ( 1.11%) 210817773 ( 1.64%) 918.26
pop3 28963 ( 0.14%) 4780396 ( 0.04%) 165.05
imap 6337 ( 0.03%) 1088845 ( 0.01%) 171.82
telnet 2292 ( 0.01%) 309362 ( 0.00%) 134.97
ssh 1768805 ( 8.55%) 264134802 ( 2.05%) 149.33
dns 2675 ( 0.01%) 216849 ( 0.00%) 81.07
bgp 146 ( 0.00%) 52502 ( 0.00%) 359.60
napster 29 ( 0.00%) 3699 ( 0.00%) 127.55
realaud 92 ( 0.00%) 10458 ( 0.00%) 113.67
rtsp 30551 ( 0.15%) 29039175 ( 0.23%) 950.51
icecast 27037 ( 0.13%) 23395374 ( 0.18%) 865.31
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3158183 ( 15.27%) 1908647904 ( 14.85%) 604.35
udp 2645261 ( 12.79%) 903411820 ( 7.03%) 341.52
dns 1363132 ( 6.59%) 224857696 ( 1.75%) 164.96
realaud 1037 ( 0.01%) 63494 ( 0.00%) 61.23
halflif 175 ( 0.00%) 18395 ( 0.00%) 105.11
starcra 256 ( 0.00%) 24065 ( 0.00%) 94.00
everque 89 ( 0.00%) 15359 ( 0.00%) 172.57
unreal 37 ( 0.00%) 4670 ( 0.00%) 126.22
quake 14 ( 0.00%) 1619 ( 0.00%) 115.64
cuseeme 12 ( 0.00%) 2251 ( 0.00%) 187.58
other 1280454 ( 6.19%) 678385311 ( 5.28%) 529.80
icmp 448042 ( 2.17%) 41020626 ( 0.32%) 91.56
ipip 327 ( 0.00%) 41030 ( 0.00%) 125.47
ipsec 1940 ( 0.01%) 561448 ( 0.00%) 289.41
ip6 451193 ( 2.18%) 113903032 ( 0.89%) 252.45
other 14017 ( 0.07%) 3263960 ( 0.03%) 232.86
frag 2835 ( 0.01%) 2314363 ( 0.02%) 816.35
ip6 1065026 ( 5.15%) 1552453675 ( 12.08%) 1457.67
tcp6 1043125 ( 5.04%) 1549265001 ( 12.05%) 1485.22
http(s) 2504 ( 0.01%) 3252924 ( 0.03%) 1299.09
http(c) 3008 ( 0.01%) 361776 ( 0.00%) 120.27
smtp 606 ( 0.00%) 191151 ( 0.00%) 315.43
ftp 78 ( 0.00%) 7196 ( 0.00%) 92.26
ssh 155 ( 0.00%) 56706 ( 0.00%) 365.85
dns 12 ( 0.00%) 2436 ( 0.00%) 203.00
bgp 387 ( 0.00%) 33964 ( 0.00%) 87.76
other 1036375 ( 5.01%) 1545358848 ( 12.02%) 1491.12
udp6 14258 ( 0.07%) 2194676 ( 0.02%) 153.93
dns 14233 ( 0.07%) 2192310 ( 0.02%) 154.03
other 25 ( 0.00%) 2366 ( 0.00%) 94.64
icmp6 7599 ( 0.04%) 977538 ( 0.01%) 128.64
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 13 ( 0.00%) 12244 ( 0.00%) 941.85
tcpdump file: 200901081400.dump.gz (534.31 MB)