Traffic Trace Info
DumpFile: 200901111400.dump
FileSize: 1108.58MB
Id: 200901111400
StartTime: Sun Jan 11 14:00:01 2009
EndTime: Sun Jan 11 14:15:00 2009
TotalTime: 899.25 seconds
TotalCapSize: 870.23MB CapLen: 96 bytes
# of packets: 15619935 (11278.28MB)
AvgRate: 105.23Mbps stddev:14.53M
IP flow (unique src/dst pair) Information
# of flows: 675187 (avg. 23.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 6.7% 4.5% 2.8% 1.7% 1.6% 1.6% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 363897
Top 10 bandwidth usage (bytes/total in %):
17.7% 7.8% 7.7% 5.8% 5.2% 5.1% 3.3% 2.6% 2.6% 2.2%
# of IPv6 addresses: 1422
Top 10 bandwidth usage (bytes/total in %):
99.4% 75.5% 23.9% 0.3% 0.3% 0.1% 0.1% 0.1% 0.1% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901111400.pktlen.png)
detailed numbers
[ 32- 63]: 3453836
[ 64- 127]: 3155189
[ 128- 255]: 681874
[ 256- 511]: 466275
[ 512- 1023]: 440238
[ 1024- 2047]: 7422523
Protocol Breakdown
![[protocol breakdown chart]](200901111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15619935 (100.00%) 11826131531 (100.00%) 757.12
ip 14599500 ( 93.47%) 10423187355 ( 88.14%) 713.94
tcp 11781639 ( 75.43%) 9570094492 ( 80.92%) 812.29
http(s) 4919344 ( 31.49%) 6530438909 ( 55.22%) 1327.50
http(c) 2968652 ( 19.01%) 270633975 ( 2.29%) 91.16
squid 509875 ( 3.26%) 429155081 ( 3.63%) 841.69
smtp 281755 ( 1.80%) 94463496 ( 0.80%) 335.27
ftp 124167 ( 0.79%) 108485773 ( 0.92%) 873.71
pop3 13666 ( 0.09%) 4100439 ( 0.03%) 300.05
imap 1896 ( 0.01%) 349191 ( 0.00%) 184.17
telnet 583 ( 0.00%) 85308 ( 0.00%) 146.33
ssh 392192 ( 2.51%) 540943362 ( 4.57%) 1379.28
dns 6924 ( 0.04%) 684729 ( 0.01%) 98.89
bgp 136 ( 0.00%) 42701 ( 0.00%) 313.98
napster 6 ( 0.00%) 1010 ( 0.00%) 168.33
rtsp 91965 ( 0.59%) 68847523 ( 0.58%) 748.63
icecast 631 ( 0.00%) 113247 ( 0.00%) 179.47
hotline 5 ( 0.00%) 674 ( 0.00%) 134.80
other 2469839 ( 15.81%) 1521748894 ( 12.87%) 616.13
udp 2219758 ( 14.21%) 648388433 ( 5.48%) 292.10
dns 1054235 ( 6.75%) 195508785 ( 1.65%) 185.45
realaud 1864 ( 0.01%) 113956 ( 0.00%) 61.14
halflif 27 ( 0.00%) 2988 ( 0.00%) 110.67
starcra 26 ( 0.00%) 4135 ( 0.00%) 159.04
everque 87 ( 0.00%) 16714 ( 0.00%) 192.11
unreal 169 ( 0.00%) 50993 ( 0.00%) 301.73
quake 31 ( 0.00%) 3018 ( 0.00%) 97.35
cuseeme 10 ( 0.00%) 1338 ( 0.00%) 133.80
other 1160433 ( 7.43%) 452405027 ( 3.83%) 389.86
icmp 414954 ( 2.66%) 36790555 ( 0.31%) 88.66
ipip 340 ( 0.00%) 38022 ( 0.00%) 111.83
ipsec 86 ( 0.00%) 13588 ( 0.00%) 158.00
ip6 138696 ( 0.89%) 159847150 ( 1.35%) 1152.50
other 44027 ( 0.28%) 8015115 ( 0.07%) 182.05
frag 47359 ( 0.30%) 41288442 ( 0.35%) 871.82
ip6 1020435 ( 6.53%) 1402944176 ( 11.86%) 1374.85
tcp6 1002924 ( 6.42%) 1400073528 ( 11.84%) 1395.99
http(s) 1063 ( 0.01%) 553834 ( 0.00%) 521.01
http(c) 13746 ( 0.09%) 1257900 ( 0.01%) 91.51
smtp 196 ( 0.00%) 50298 ( 0.00%) 256.62
ftp 1 ( 0.00%) 74 ( 0.00%) 74.00
pop3 9 ( 0.00%) 702 ( 0.00%) 78.00
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
bgp 387 ( 0.00%) 34405 ( 0.00%) 88.90
other 987515 ( 6.32%) 1398175361 ( 11.82%) 1415.85
udp6 10551 ( 0.07%) 1612347 ( 0.01%) 152.81
dns 9894 ( 0.06%) 1511870 ( 0.01%) 152.81
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
other 656 ( 0.00%) 100371 ( 0.00%) 153.00
icmp6 6489 ( 0.04%) 833525 ( 0.01%) 128.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 440 ( 0.00%) 420560 ( 0.00%) 955.82
tcpdump file: 200901111400.dump.gz (362.81 MB)