Traffic Trace Info
DumpFile: 200901171400.dump
FileSize: 1404.47MB
Id: 200901171400
StartTime: Sat Jan 17 14:00:01 2009
EndTime: Sat Jan 17 14:15:00 2009
TotalTime: 899.42 seconds
TotalCapSize: 1103.64MB CapLen: 96 bytes
# of packets: 19714758 (12191.45MB)
AvgRate: 113.70Mbps stddev:15.72M
IP flow (unique src/dst pair) Information
# of flows: 859828 (avg. 22.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.6% 4.1% 1.3% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 517212
Top 10 bandwidth usage (bytes/total in %):
9.3% 6.6% 6.5% 6.1% 5.1% 5.0% 4.5% 3.1% 2.9% 2.6%
# of IPv6 addresses: 1082
Top 10 bandwidth usage (bytes/total in %):
99.4% 75.4% 24.0% 0.1% 0.1% 0.1% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901171400.pktlen.png)
detailed numbers
[ 32- 63]: 4841952
[ 64- 127]: 5490024
[ 128- 255]: 586659
[ 256- 511]: 483403
[ 512- 1023]: 439253
[ 1024- 2047]: 7873467
Protocol Breakdown
![[protocol breakdown chart]](200901171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19714758 (100.00%) 12783664961 (100.00%) 648.43
ip 19226136 ( 97.52%) 12087477874 ( 94.55%) 628.70
tcp 14633940 ( 74.23%) 11075918990 ( 86.64%) 756.87
http(s) 5319102 ( 26.98%) 7151472032 ( 55.94%) 1344.49
http(c) 3352715 ( 17.01%) 370182479 ( 2.90%) 110.41
squid 537770 ( 2.73%) 368706247 ( 2.88%) 685.62
smtp 395977 ( 2.01%) 87188067 ( 0.68%) 220.18
nntp 46 ( 0.00%) 3190 ( 0.00%) 69.35
ftp 128383 ( 0.65%) 85769704 ( 0.67%) 668.08
pop3 12355 ( 0.06%) 6062399 ( 0.05%) 490.68
imap 3203 ( 0.02%) 729162 ( 0.01%) 227.65
telnet 2847 ( 0.01%) 230848 ( 0.00%) 81.08
ssh 39093 ( 0.20%) 5660163 ( 0.04%) 144.79
dns 8640 ( 0.04%) 928615 ( 0.01%) 107.48
bgp 195 ( 0.00%) 74823 ( 0.00%) 383.71
napster 41 ( 0.00%) 8975 ( 0.00%) 218.90
realaud 21 ( 0.00%) 1272 ( 0.00%) 60.57
rtsp 105550 ( 0.54%) 126038923 ( 0.99%) 1194.12
icecast 12719 ( 0.06%) 862567 ( 0.01%) 67.82
hotline 10 ( 0.00%) 600 ( 0.00%) 60.00
other 4715273 ( 23.92%) 2871998924 ( 22.47%) 609.08
udp 2562787 ( 13.00%) 845890047 ( 6.62%) 330.07
dns 1198531 ( 6.08%) 239691681 ( 1.87%) 199.99
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 20072 ( 0.10%) 8385531 ( 0.07%) 417.77
halflif 35 ( 0.00%) 3623 ( 0.00%) 103.51
starcra 50 ( 0.00%) 8253 ( 0.00%) 165.06
everque 80 ( 0.00%) 15300 ( 0.00%) 191.25
unreal 48 ( 0.00%) 11359 ( 0.00%) 236.65
quake 22 ( 0.00%) 2127 ( 0.00%) 96.68
cuseeme 12 ( 0.00%) 1436 ( 0.00%) 119.67
other 1343812 ( 6.82%) 597719558 ( 4.68%) 444.79
icmp 1972448 ( 10.00%) 149158966 ( 1.17%) 75.62
ipip 302 ( 0.00%) 37056 ( 0.00%) 122.70
ipsec 102 ( 0.00%) 16116 ( 0.00%) 158.00
ip6 13567 ( 0.07%) 1563397 ( 0.01%) 115.24
other 42990 ( 0.22%) 14893302 ( 0.12%) 346.44
frag 45875 ( 0.23%) 41227639 ( 0.32%) 898.70
ip6 488622 ( 2.48%) 696187087 ( 5.45%) 1424.80
tcp6 471347 ( 2.39%) 693591308 ( 5.43%) 1471.51
http(s) 112 ( 0.00%) 81787 ( 0.00%) 730.24
http(c) 2203 ( 0.01%) 227092 ( 0.00%) 103.08
smtp 931 ( 0.00%) 312300 ( 0.00%) 335.45
ssh 2445 ( 0.01%) 473639 ( 0.00%) 193.72
dns 5 ( 0.00%) 601 ( 0.00%) 120.20
bgp 389 ( 0.00%) 34283 ( 0.00%) 88.13
other 465262 ( 2.36%) 692461606 ( 5.42%) 1488.33
udp6 11342 ( 0.06%) 1692359 ( 0.01%) 149.21
dns 11311 ( 0.06%) 1688936 ( 0.01%) 149.32
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
other 30 ( 0.00%) 3308 ( 0.00%) 110.27
icmp6 5882 ( 0.03%) 880728 ( 0.01%) 149.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 18612 ( 0.00%) 886.29
tcpdump file: 200901171400.dump.gz (476.14 MB)