Traffic Trace Info
DumpFile: 200901121400.dump
FileSize: 1352.62MB
Id: 200901121400
StartTime: Mon Jan 12 14:00:01 2009
EndTime: Mon Jan 12 14:15:00 2009
TotalTime: 899.43 seconds
TotalCapSize: 1057.81MB CapLen: 96 bytes
# of packets: 19320079 (13356.81MB)
AvgRate: 124.57Mbps stddev:14.01M
IP flow (unique src/dst pair) Information
# of flows: 674536 (avg. 28.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 4.9% 3.1% 2.4% 1.6% 1.5% 1.5% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 420873
Top 10 bandwidth usage (bytes/total in %):
10.7% 8.7% 6.6% 6.5% 5.5% 3.6% 3.4% 3.1% 3.0% 2.7%
# of IPv6 addresses: 1646
Top 10 bandwidth usage (bytes/total in %):
99.6% 66.1% 33.6% 0.1% 0.1% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901121400.pktlen.png)
detailed numbers
[ 32- 63]: 4023451
[ 64- 127]: 4703328
[ 128- 255]: 863894
[ 256- 511]: 520326
[ 512- 1023]: 515058
[ 1024- 2047]: 8694022
Protocol Breakdown
![[protocol breakdown chart]](200901121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19320079 (100.00%) 14005627705 (100.00%) 724.93
ip 18424956 ( 95.37%) 12707834626 ( 90.73%) 689.71
tcp 13873573 ( 71.81%) 11157286042 ( 79.66%) 804.21
http(s) 5765584 ( 29.84%) 7683973672 ( 54.86%) 1332.73
http(c) 3589274 ( 18.58%) 466887019 ( 3.33%) 130.08
squid 443750 ( 2.30%) 290226315 ( 2.07%) 654.03
smtp 309805 ( 1.60%) 177852864 ( 1.27%) 574.08
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 110758 ( 0.57%) 56715017 ( 0.40%) 512.06
pop3 39418 ( 0.20%) 6330539 ( 0.05%) 160.60
imap 2674 ( 0.01%) 386536 ( 0.00%) 144.55
telnet 4076 ( 0.02%) 589189 ( 0.00%) 144.55
ssh 65048 ( 0.34%) 16520032 ( 0.12%) 253.97
dns 8359 ( 0.04%) 835811 ( 0.01%) 99.99
bgp 129 ( 0.00%) 36624 ( 0.00%) 283.91
napster 9 ( 0.00%) 1102 ( 0.00%) 122.44
realaud 45 ( 0.00%) 3991 ( 0.00%) 88.69
rtsp 112266 ( 0.58%) 141661924 ( 1.01%) 1261.84
icecast 24402 ( 0.13%) 23180227 ( 0.17%) 949.93
hotline 12 ( 0.00%) 911 ( 0.00%) 75.92
other 3397958 ( 17.59%) 2292083909 ( 16.37%) 674.55
udp 3568214 ( 18.47%) 1459203714 ( 10.42%) 408.95
dns 1169925 ( 6.06%) 225318939 ( 1.61%) 192.59
realaud 1519 ( 0.01%) 93734 ( 0.00%) 61.71
halflif 43 ( 0.00%) 4614 ( 0.00%) 107.30
starcra 77 ( 0.00%) 15667 ( 0.00%) 203.47
everque 206 ( 0.00%) 44667 ( 0.00%) 216.83
unreal 24 ( 0.00%) 6493 ( 0.00%) 270.54
quake 20 ( 0.00%) 2067 ( 0.00%) 103.35
cuseeme 6 ( 0.00%) 1067 ( 0.00%) 177.83
other 2390035 ( 12.37%) 1233258375 ( 8.81%) 516.00
icmp 867940 ( 4.49%) 70454208 ( 0.50%) 81.17
ipip 299 ( 0.00%) 34314 ( 0.00%) 114.76
ipsec 82 ( 0.00%) 12956 ( 0.00%) 158.00
ip6 26889 ( 0.14%) 8082524 ( 0.06%) 300.59
other 87959 ( 0.46%) 12760868 ( 0.09%) 145.08
frag 66909 ( 0.35%) 57741047 ( 0.41%) 862.98
ip6 895123 ( 4.63%) 1297793079 ( 9.27%) 1449.85
tcp6 874670 ( 4.53%) 1294546215 ( 9.24%) 1480.04
http(s) 1115 ( 0.01%) 819829 ( 0.01%) 735.27
http(c) 4844 ( 0.03%) 597225 ( 0.00%) 123.29
smtp 203 ( 0.00%) 63496 ( 0.00%) 312.79
ftp 33 ( 0.00%) 3050 ( 0.00%) 92.42
pop3 34 ( 0.00%) 2802 ( 0.00%) 82.41
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
bgp 374 ( 0.00%) 31943 ( 0.00%) 85.41
other 868060 ( 4.49%) 1293026916 ( 9.23%) 1489.56
udp6 15043 ( 0.08%) 2361618 ( 0.02%) 156.99
dns 13855 ( 0.07%) 2184564 ( 0.02%) 157.67
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1187 ( 0.01%) 176950 ( 0.00%) 149.07
icmp6 5154 ( 0.03%) 670112 ( 0.00%) 130.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 225 ( 0.00%) 210918 ( 0.00%) 937.41
tcpdump file: 200901121400.dump.gz (459.85 MB)