Traffic Trace Info
DumpFile: 200901101400.dump
FileSize: 1387.00MB
Id: 200901101400
StartTime: Sat Jan 10 14:00:00 2009
EndTime: Sat Jan 10 14:15:00 2009
TotalTime: 899.61 seconds
TotalCapSize: 1081.00MB CapLen: 96 bytes
# of packets: 20053477 (14263.56MB)
AvgRate: 133.00Mbps stddev:20.80M
IP flow (unique src/dst pair) Information
# of flows: 606142 (avg. 33.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 5.8% 3.7% 2.6% 2.2% 1.8% 1.5% 1.5% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 375847
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.1% 8.7% 8.7% 7.0% 5.9% 4.1% 3.2% 2.8% 2.3%
# of IPv6 addresses: 1048
Top 10 bandwidth usage (bytes/total in %):
98.8% 71.2% 27.6% 0.4% 0.4% 0.4% 0.4% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901101400.pktlen.png)
detailed numbers
[ 32- 63]: 4250741
[ 64- 127]: 4254597
[ 128- 255]: 871011
[ 256- 511]: 526704
[ 512- 1023]: 961954
[ 1024- 2047]: 9188470
Protocol Breakdown
![[protocol breakdown chart]](200901101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20053477 (100.00%) 14956431168 (100.00%) 745.83
ip 19160817 ( 95.55%) 13737378004 ( 91.85%) 716.95
tcp 14528263 ( 72.45%) 11713699815 ( 78.32%) 806.27
http(s) 6247531 ( 31.15%) 8118294511 ( 54.28%) 1299.44
http(c) 3750817 ( 18.70%) 618867673 ( 4.14%) 165.00
squid 431950 ( 2.15%) 300220581 ( 2.01%) 695.04
smtp 277626 ( 1.38%) 74134013 ( 0.50%) 267.03
nntp 12 ( 0.00%) 986 ( 0.00%) 82.17
ftp 98398 ( 0.49%) 69409310 ( 0.46%) 705.39
pop3 14181 ( 0.07%) 3167468 ( 0.02%) 223.36
imap 2435 ( 0.01%) 686024 ( 0.00%) 281.73
telnet 3086 ( 0.02%) 363881 ( 0.00%) 117.91
ssh 7965 ( 0.04%) 3504049 ( 0.02%) 439.93
dns 1256 ( 0.01%) 111179 ( 0.00%) 88.52
bgp 137 ( 0.00%) 44979 ( 0.00%) 328.31
napster 26 ( 0.00%) 8656 ( 0.00%) 332.92
realaud 57 ( 0.00%) 7021 ( 0.00%) 123.18
rtsp 61461 ( 0.31%) 59878461 ( 0.40%) 974.25
icecast 6667 ( 0.03%) 473026 ( 0.00%) 70.95
hotline 6 ( 0.00%) 735 ( 0.00%) 122.50
other 3624651 ( 18.07%) 2464527202 ( 16.48%) 679.94
udp 4096803 ( 20.43%) 1961007152 ( 13.11%) 478.67
dns 1009165 ( 5.03%) 176507855 ( 1.18%) 174.90
realaud 2353 ( 0.01%) 145396 ( 0.00%) 61.79
halflif 33 ( 0.00%) 3222 ( 0.00%) 97.64
starcra 228 ( 0.00%) 20392 ( 0.00%) 89.44
everque 97 ( 0.00%) 18958 ( 0.00%) 195.44
unreal 800 ( 0.00%) 249988 ( 0.00%) 312.49
quake 17 ( 0.00%) 1808 ( 0.00%) 106.35
cuseeme 5 ( 0.00%) 410 ( 0.00%) 82.00
other 3083997 ( 15.38%) 1783989272 ( 11.93%) 578.47
icmp 437811 ( 2.18%) 39887683 ( 0.27%) 91.11
ipip 302 ( 0.00%) 36498 ( 0.00%) 120.85
ipsec 86 ( 0.00%) 13588 ( 0.00%) 158.00
ip6 29465 ( 0.15%) 13162483 ( 0.09%) 446.72
other 68087 ( 0.34%) 9570785 ( 0.06%) 140.57
frag 2035 ( 0.01%) 1776544 ( 0.01%) 872.99
ip6 892660 ( 4.45%) 1219053164 ( 8.15%) 1365.64
tcp6 875034 ( 4.36%) 1216559448 ( 8.13%) 1390.30
http(s) 2836 ( 0.01%) 2601179 ( 0.02%) 917.20
http(c) 7956 ( 0.04%) 745487 ( 0.00%) 93.70
smtp 127 ( 0.00%) 34821 ( 0.00%) 274.18
pop3 47 ( 0.00%) 3741 ( 0.00%) 79.60
ssh 3566 ( 0.02%) 4701444 ( 0.03%) 1318.41
bgp 380 ( 0.00%) 33351 ( 0.00%) 87.77
other 860122 ( 4.29%) 1208439425 ( 8.08%) 1404.96
udp6 10784 ( 0.05%) 1567785 ( 0.01%) 145.38
dns 10763 ( 0.05%) 1565481 ( 0.01%) 145.45
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 6795 ( 0.03%) 900739 ( 0.01%) 132.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 21112 ( 0.00%) 1241.88
tcpdump file: 200901101400.dump.gz (466.88 MB)