Traffic Trace Info
DumpFile: 200901131400.dump
FileSize: 1455.60MB
Id: 200901131400
StartTime: Tue Jan 13 14:00:00 2009
EndTime: Tue Jan 13 14:15:00 2009
TotalTime: 899.92 seconds
TotalCapSize: 1140.04MB CapLen: 96 bytes
# of packets: 20679956 (13674.07MB)
AvgRate: 127.45Mbps stddev:14.39M
IP flow (unique src/dst pair) Information
# of flows: 731650 (avg. 28.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.8% 2.5% 2.5% 2.4% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 419134
Top 10 bandwidth usage (bytes/total in %):
8.2% 6.4% 5.6% 5.1% 4.9% 4.0% 3.7% 3.1% 3.0% 2.8%
# of IPv6 addresses: 1747
Top 10 bandwidth usage (bytes/total in %):
99.0% 58.8% 40.2% 0.1% 0.1% 0.1% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901131400.pktlen.png)
detailed numbers
[ 32- 63]: 5288268
[ 64- 127]: 4329992
[ 128- 255]: 867376
[ 256- 511]: 668432
[ 512- 1023]: 859380
[ 1024- 2047]: 8666508
Protocol Breakdown
![[protocol breakdown chart]](200901131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20679956 (100.00%) 14338301757 (100.00%) 693.34
ip 20065253 ( 97.03%) 13484574060 ( 94.05%) 672.04
tcp 17141608 ( 82.89%) 12673581826 ( 88.39%) 739.35
http(s) 6450148 ( 31.19%) 8163616982 ( 56.94%) 1265.65
http(c) 5614485 ( 27.15%) 1219552952 ( 8.51%) 217.22
squid 565039 ( 2.73%) 374558820 ( 2.61%) 662.89
smtp 303534 ( 1.47%) 97801980 ( 0.68%) 322.21
nntp 165 ( 0.00%) 98503 ( 0.00%) 596.99
ftp 94046 ( 0.45%) 47455462 ( 0.33%) 504.60
pop3 20821 ( 0.10%) 4733394 ( 0.03%) 227.34
imap 7078 ( 0.03%) 3779316 ( 0.03%) 533.95
telnet 4006 ( 0.02%) 573881 ( 0.00%) 143.26
ssh 16080 ( 0.08%) 3261505 ( 0.02%) 202.83
dns 7491 ( 0.04%) 734070 ( 0.01%) 97.99
bgp 156 ( 0.00%) 55716 ( 0.00%) 357.15
napster 2100 ( 0.01%) 1901507 ( 0.01%) 905.48
realaud 24 ( 0.00%) 4889 ( 0.00%) 203.71
rtsp 231275 ( 1.12%) 62581721 ( 0.44%) 270.59
icecast 30916 ( 0.15%) 16469344 ( 0.11%) 532.71
hotline 6 ( 0.00%) 490 ( 0.00%) 81.67
other 3794207 ( 18.35%) 2676399434 ( 18.67%) 705.39
udp 2364340 ( 11.43%) 710377129 ( 4.95%) 300.45
dns 1165839 ( 5.64%) 221037320 ( 1.54%) 189.60
realaud 1528 ( 0.01%) 94604 ( 0.00%) 61.91
halflif 29 ( 0.00%) 3162 ( 0.00%) 109.03
starcra 142 ( 0.00%) 29110 ( 0.00%) 205.00
everque 171 ( 0.00%) 28632 ( 0.00%) 167.44
unreal 40 ( 0.00%) 8113 ( 0.00%) 202.82
quake 29 ( 0.00%) 5089 ( 0.00%) 175.48
cuseeme 6 ( 0.00%) 957 ( 0.00%) 159.50
other 1196452 ( 5.79%) 489120672 ( 3.41%) 408.81
icmp 434155 ( 2.10%) 42384324 ( 0.30%) 97.62
ipip 311 ( 0.00%) 38456 ( 0.00%) 123.65
ipsec 111 ( 0.00%) 16338 ( 0.00%) 147.19
ip6 50667 ( 0.25%) 42680078 ( 0.30%) 842.36
other 74061 ( 0.36%) 15495909 ( 0.11%) 209.23
frag 50262 ( 0.24%) 44455510 ( 0.31%) 884.48
ip6 614703 ( 2.97%) 853727697 ( 5.95%) 1388.85
tcp6 592372 ( 2.86%) 849783455 ( 5.93%) 1434.54
http(s) 2167 ( 0.01%) 2646078 ( 0.02%) 1221.08
http(c) 18506 ( 0.09%) 1598947 ( 0.01%) 86.40
smtp 348 ( 0.00%) 116828 ( 0.00%) 335.71
ftp 75 ( 0.00%) 7210 ( 0.00%) 96.13
ssh 86 ( 0.00%) 9536 ( 0.00%) 110.88
bgp 396 ( 0.00%) 34971 ( 0.00%) 88.31
other 570794 ( 2.76%) 845369885 ( 5.90%) 1481.04
udp6 16018 ( 0.08%) 2691092 ( 0.02%) 168.00
dns 14609 ( 0.07%) 2326343 ( 0.02%) 159.24
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1407 ( 0.01%) 364543 ( 0.00%) 259.09
icmp6 5800 ( 0.03%) 779870 ( 0.01%) 134.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 483 ( 0.00%) 469200 ( 0.00%) 971.43
tcpdump file: 200901131400.dump.gz (508.99 MB)