Traffic Trace Info
DumpFile: 200901151400.dump
FileSize: 1396.05MB
Id: 200901151400
StartTime: Thu Jan 15 14:00:01 2009
EndTime: Thu Jan 15 14:15:00 2009
TotalTime: 899.66 seconds
TotalCapSize: 1101.94MB CapLen: 96 bytes
# of packets: 19274528 (13070.84MB)
AvgRate: 121.89Mbps stddev:12.94M
IP flow (unique src/dst pair) Information
# of flows: 797805 (avg. 24.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.4% 5.9% 3.6% 1.8% 1.7% 1.5% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 469758
Top 10 bandwidth usage (bytes/total in %):
5.9% 4.6% 4.4% 4.4% 4.3% 3.8% 3.5% 2.4% 2.1% 2.1%
# of IPv6 addresses: 1222
Top 10 bandwidth usage (bytes/total in %):
99.5% 61.2% 38.3% 0.1% 0.1% 0.1% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901151400.pktlen.png)
detailed numbers
[ 32- 63]: 3975314
[ 64- 127]: 4952694
[ 128- 255]: 797301
[ 256- 511]: 589309
[ 512- 1023]: 540556
[ 1024- 2047]: 8419354
Protocol Breakdown
![[protocol breakdown chart]](200901151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19274528 (100.00%) 13705772702 (100.00%) 711.08
ip 17810256 ( 92.40%) 11597806613 ( 84.62%) 651.19
tcp 14434261 ( 74.89%) 10483178899 ( 76.49%) 726.27
http(s) 5443965 ( 28.24%) 7067193625 ( 51.56%) 1298.17
http(c) 4035713 ( 20.94%) 521043483 ( 3.80%) 129.11
squid 478638 ( 2.48%) 256383277 ( 1.87%) 535.65
smtp 424192 ( 2.20%) 186627833 ( 1.36%) 439.96
ftp 190830 ( 0.99%) 149686345 ( 1.09%) 784.40
pop3 41764 ( 0.22%) 7367573 ( 0.05%) 176.41
imap 6197 ( 0.03%) 2211545 ( 0.02%) 356.87
telnet 3890 ( 0.02%) 678082 ( 0.00%) 174.31
ssh 30391 ( 0.16%) 24462449 ( 0.18%) 804.92
dns 7704 ( 0.04%) 752070 ( 0.01%) 97.62
bgp 154 ( 0.00%) 68233 ( 0.00%) 443.07
napster 6 ( 0.00%) 804 ( 0.00%) 134.00
realaud 35 ( 0.00%) 5491 ( 0.00%) 156.89
rtsp 154020 ( 0.80%) 67183073 ( 0.49%) 436.20
icecast 385 ( 0.00%) 27906 ( 0.00%) 72.48
other 3616372 ( 18.76%) 2199486810 ( 16.05%) 608.20
udp 2763590 ( 14.34%) 975668279 ( 7.12%) 353.04
dns 1178166 ( 6.11%) 221004792 ( 1.61%) 187.58
realaud 984 ( 0.01%) 62575 ( 0.00%) 63.59
halflif 23 ( 0.00%) 2744 ( 0.00%) 119.30
starcra 30 ( 0.00%) 5954 ( 0.00%) 198.47
everque 130 ( 0.00%) 29346 ( 0.00%) 225.74
unreal 18 ( 0.00%) 3679 ( 0.00%) 204.39
quake 20 ( 0.00%) 2224 ( 0.00%) 111.20
cuseeme 9 ( 0.00%) 758 ( 0.00%) 84.22
other 1584092 ( 8.22%) 754507470 ( 5.51%) 476.30
icmp 488275 ( 2.53%) 53393182 ( 0.39%) 109.35
ipip 293 ( 0.00%) 34406 ( 0.00%) 117.43
ipsec 10006 ( 0.05%) 2009596 ( 0.01%) 200.84
ip6 72001 ( 0.37%) 74522375 ( 0.54%) 1035.02
other 41830 ( 0.22%) 8999876 ( 0.07%) 215.15
frag 46212 ( 0.24%) 41518614 ( 0.30%) 898.44
ip6 1464272 ( 7.60%) 2107966089 ( 15.38%) 1439.60
tcp6 1439856 ( 7.47%) 2104169046 ( 15.35%) 1461.37
http(s) 3403 ( 0.02%) 4100207 ( 0.03%) 1204.88
http(c) 29662 ( 0.15%) 2435798 ( 0.02%) 82.12
smtp 239 ( 0.00%) 53068 ( 0.00%) 222.04
ftp 44 ( 0.00%) 3900 ( 0.00%) 88.64
ssh 254 ( 0.00%) 36139 ( 0.00%) 142.28
dns 16 ( 0.00%) 1635 ( 0.00%) 102.19
bgp 373 ( 0.00%) 32192 ( 0.00%) 86.31
other 1405865 ( 7.29%) 2097506107 ( 15.30%) 1491.97
udp6 17910 ( 0.09%) 2793164 ( 0.02%) 155.96
dns 17839 ( 0.09%) 2785347 ( 0.02%) 156.14
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 69 ( 0.00%) 7590 ( 0.00%) 110.00
icmp6 6472 ( 0.03%) 997641 ( 0.01%) 154.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 2158 ( 0.00%) 539.50
tcpdump file: 200901151400.dump.gz (477.57 MB)