Traffic Trace Info
DumpFile: 200901141400.dump
FileSize: 1330.73MB
Id: 200901141400
StartTime: Wed Jan 14 14:00:00 2009
EndTime: Wed Jan 14 14:15:00 2009
TotalTime: 899.65 seconds
TotalCapSize: 1044.61MB CapLen: 96 bytes
# of packets: 18750819 (13330.72MB)
AvgRate: 124.30Mbps stddev:14.78M
IP flow (unique src/dst pair) Information
# of flows: 598887 (avg. 31.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.6% 3.4% 2.4% 2.1% 1.8% 1.7% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 349764
Top 10 bandwidth usage (bytes/total in %):
7.7% 7.2% 6.9% 6.7% 5.4% 5.3% 5.3% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1135
Top 10 bandwidth usage (bytes/total in %):
99.3% 66.3% 33.0% 0.3% 0.2% 0.1% 0.1% 0.1% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901141400.pktlen.png)
detailed numbers
[ 32- 63]: 4149736
[ 64- 127]: 4133659
[ 128- 255]: 750252
[ 256- 511]: 607537
[ 512- 1023]: 429022
[ 1024- 2047]: 8680613
Protocol Breakdown
![[protocol breakdown chart]](200901141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18750819 (100.00%) 13978276509 (100.00%) 745.48
ip 17745280 ( 94.64%) 12520410865 ( 89.57%) 705.56
tcp 14657813 ( 78.17%) 11609159443 ( 83.05%) 792.01
http(s) 5595901 ( 29.84%) 7409809582 ( 53.01%) 1324.15
http(c) 3902113 ( 20.81%) 461832121 ( 3.30%) 118.35
squid 394609 ( 2.10%) 237511213 ( 1.70%) 601.89
smtp 383841 ( 2.05%) 178263180 ( 1.28%) 464.42
nntp 41 ( 0.00%) 3314 ( 0.00%) 80.83
ftp 53581 ( 0.29%) 21350339 ( 0.15%) 398.47
pop3 31811 ( 0.17%) 10614430 ( 0.08%) 333.67
imap 7531 ( 0.04%) 1414364 ( 0.01%) 187.81
telnet 4645 ( 0.02%) 734011 ( 0.01%) 158.02
ssh 41596 ( 0.22%) 40347654 ( 0.29%) 969.99
dns 10370 ( 0.06%) 961386 ( 0.01%) 92.71
bgp 157 ( 0.00%) 64666 ( 0.00%) 411.89
napster 33 ( 0.00%) 2098 ( 0.00%) 63.58
realaud 4 ( 0.00%) 246 ( 0.00%) 61.50
rtsp 83454 ( 0.45%) 13076343 ( 0.09%) 156.69
icecast 12385 ( 0.07%) 824200 ( 0.01%) 66.55
other 4135739 ( 22.06%) 3232350176 ( 23.12%) 781.57
udp 2325851 ( 12.40%) 679878476 ( 4.86%) 292.31
dns 1063890 ( 5.67%) 205145240 ( 1.47%) 192.83
realaud 23 ( 0.00%) 2755 ( 0.00%) 119.78
halflif 33 ( 0.00%) 3494 ( 0.00%) 105.88
starcra 25 ( 0.00%) 4406 ( 0.00%) 176.24
everque 146 ( 0.00%) 28336 ( 0.00%) 194.08
unreal 32 ( 0.00%) 8985 ( 0.00%) 280.78
quake 27 ( 0.00%) 2154 ( 0.00%) 79.78
cuseeme 11 ( 0.00%) 1423 ( 0.00%) 129.36
other 1261546 ( 6.73%) 474621613 ( 3.40%) 376.22
icmp 387749 ( 2.07%) 54976763 ( 0.39%) 141.78
ipip 304 ( 0.00%) 36476 ( 0.00%) 119.99
ipsec 304457 ( 1.62%) 154698790 ( 1.11%) 508.11
ip6 26664 ( 0.14%) 12839548 ( 0.09%) 481.53
other 42442 ( 0.23%) 8821369 ( 0.06%) 207.85
frag 45416 ( 0.24%) 40763823 ( 0.29%) 897.57
ip6 1005539 ( 5.36%) 1457865644 ( 10.43%) 1449.84
tcp6 986398 ( 5.26%) 1454959819 ( 10.41%) 1475.02
http(s) 6751 ( 0.04%) 6146487 ( 0.04%) 910.46
http(c) 8200 ( 0.04%) 804491 ( 0.01%) 98.11
smtp 295 ( 0.00%) 102063 ( 0.00%) 345.98
ftp 34 ( 0.00%) 3136 ( 0.00%) 92.24
imap 15 ( 0.00%) 1979 ( 0.00%) 131.93
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
bgp 408 ( 0.00%) 38278 ( 0.00%) 93.82
other 970688 ( 5.18%) 1447862431 ( 10.36%) 1491.58
udp6 13969 ( 0.07%) 2195908 ( 0.02%) 157.20
dns 13912 ( 0.07%) 2189639 ( 0.02%) 157.39
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 56 ( 0.00%) 6160 ( 0.00%) 110.00
icmp6 5137 ( 0.03%) 703188 ( 0.01%) 136.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 2649 ( 0.00%) 529.80
tcpdump file: 200901141400.dump.gz (453.35 MB)