Traffic Trace Info
DumpFile: 200901091400.dump
FileSize: 1444.46MB
Id: 200901091400
StartTime: Fri Jan 9 14:00:00 2009
EndTime: Fri Jan 9 14:15:00 2009
TotalTime: 900.18 seconds
TotalCapSize: 1131.37MB CapLen: 96 bytes
# of packets: 20518350 (14434.42MB)
AvgRate: 134.52Mbps stddev:14.94M
IP flow (unique src/dst pair) Information
# of flows: 775091 (avg. 26.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 2.4% 1.7% 1.7% 1.5% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 487340
Top 10 bandwidth usage (bytes/total in %):
7.1% 5.2% 5.2% 4.5% 4.0% 3.6% 3.2% 3.1% 3.1% 2.8%
# of IPv6 addresses: 1123
Top 10 bandwidth usage (bytes/total in %):
99.1% 66.6% 32.5% 0.2% 0.2% 0.1% 0.1% 0.1% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901091400.pktlen.png)
detailed numbers
[ 32- 63]: 4238967
[ 64- 127]: 5020285
[ 128- 255]: 740568
[ 256- 511]: 539501
[ 512- 1023]: 595884
[ 1024- 2047]: 9383145
Protocol Breakdown
![[protocol breakdown chart]](200901091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20518350 (100.00%) 15135588975 (100.00%) 737.66
ip 20129536 ( 98.11%) 14591708544 ( 96.41%) 724.89
tcp 16437366 ( 80.11%) 13340236787 ( 88.14%) 811.58
http(s) 7590791 ( 37.00%) 10070670877 ( 66.54%) 1326.70
http(c) 4616383 ( 22.50%) 683291993 ( 4.51%) 148.01
squid 477890 ( 2.33%) 344262275 ( 2.27%) 720.38
smtp 336826 ( 1.64%) 130908029 ( 0.86%) 388.65
nntp 183 ( 0.00%) 24833 ( 0.00%) 135.70
ftp 79999 ( 0.39%) 48855857 ( 0.32%) 610.71
pop3 37977 ( 0.19%) 25943704 ( 0.17%) 683.14
imap 5458 ( 0.03%) 835581 ( 0.01%) 153.09
telnet 2435 ( 0.01%) 307569 ( 0.00%) 126.31
ssh 15889 ( 0.08%) 4440191 ( 0.03%) 279.45
dns 1433 ( 0.01%) 124418 ( 0.00%) 86.82
bgp 140 ( 0.00%) 43619 ( 0.00%) 311.56
napster 10 ( 0.00%) 910 ( 0.00%) 91.00
realaud 24 ( 0.00%) 5764 ( 0.00%) 240.17
rtsp 80404 ( 0.39%) 30350124 ( 0.20%) 377.47
icecast 32169 ( 0.16%) 30948668 ( 0.20%) 962.06
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3159347 ( 15.40%) 1969221895 ( 13.01%) 623.30
udp 3009690 ( 14.67%) 1158727527 ( 7.66%) 385.00
dns 934699 ( 4.56%) 174194622 ( 1.15%) 186.36
realaud 7402 ( 0.04%) 487112 ( 0.00%) 65.81
halflif 28 ( 0.00%) 2748 ( 0.00%) 98.14
starcra 50 ( 0.00%) 9751 ( 0.00%) 195.02
everque 87 ( 0.00%) 17308 ( 0.00%) 198.94
unreal 30 ( 0.00%) 5100 ( 0.00%) 170.00
quake 8 ( 0.00%) 732 ( 0.00%) 91.50
cuseeme 8 ( 0.00%) 2068 ( 0.00%) 258.50
other 2067161 ( 10.07%) 983966499 ( 6.50%) 476.00
icmp 495648 ( 2.42%) 47063187 ( 0.31%) 94.95
ipip 307 ( 0.00%) 38018 ( 0.00%) 123.84
ipsec 41270 ( 0.20%) 11625172 ( 0.08%) 281.69
ip6 21453 ( 0.10%) 3295034 ( 0.02%) 153.59
other 123802 ( 0.60%) 30722819 ( 0.20%) 248.16
frag 2579 ( 0.01%) 1977440 ( 0.01%) 766.75
ip6 388814 ( 1.89%) 543880431 ( 3.59%) 1398.82
tcp6 367794 ( 1.79%) 540842455 ( 3.57%) 1470.50
http(s) 1020 ( 0.00%) 899982 ( 0.01%) 882.34
http(c) 2861 ( 0.01%) 387390 ( 0.00%) 135.40
smtp 392 ( 0.00%) 134358 ( 0.00%) 342.75
ftp 80 ( 0.00%) 6888 ( 0.00%) 86.10
imap 77 ( 0.00%) 43682 ( 0.00%) 567.30
ssh 28 ( 0.00%) 3896 ( 0.00%) 139.14
bgp 406 ( 0.00%) 36364 ( 0.00%) 89.57
other 362930 ( 1.77%) 539329895 ( 3.56%) 1486.04
udp6 12909 ( 0.06%) 1964196 ( 0.01%) 152.16
dns 12846 ( 0.06%) 1957266 ( 0.01%) 152.36
other 63 ( 0.00%) 6930 ( 0.00%) 110.00
icmp6 8068 ( 0.04%) 1060158 ( 0.01%) 131.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 9542 ( 0.00%) 734.00
tcpdump file: 200901091400.dump.gz (494.90 MB)