Traffic Trace Info
DumpFile: 200901191400.dump
FileSize: 1406.64MB
Id: 200901191400
StartTime: Mon Jan 19 14:00:00 2009
EndTime: Mon Jan 19 14:15:00 2009
TotalTime: 900.06 seconds
TotalCapSize: 1097.80MB CapLen: 96 bytes
# of packets: 20239144 (12734.18MB)
AvgRate: 118.70Mbps stddev:18.18M
IP flow (unique src/dst pair) Information
# of flows: 674483 (avg. 30.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 4.0% 2.8% 2.7% 2.3% 1.8% 1.5% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 404293
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.8% 6.2% 5.9% 4.4% 4.2% 4.0% 3.0% 2.9% 2.9%
# of IPv6 addresses: 1136
Top 10 bandwidth usage (bytes/total in %):
14.9% 12.2% 10.6% 8.5% 7.6% 7.5% 7.5% 3.8% 3.7% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901191400.pktlen.png)
detailed numbers
[ 32- 63]: 4597325
[ 64- 127]: 5402871
[ 128- 255]: 949755
[ 256- 511]: 614907
[ 512- 1023]: 620447
[ 1024- 2047]: 8053839
Protocol Breakdown
![[protocol breakdown chart]](200901191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20239144 (100.00%) 13352754224 (100.00%) 659.75
ip 20210073 ( 99.86%) 13347348312 ( 99.96%) 660.43
tcp 16153203 ( 79.81%) 12215776975 ( 91.49%) 756.24
http(s) 6248356 ( 30.87%) 8196447477 ( 61.38%) 1311.78
http(c) 4878805 ( 24.11%) 763661820 ( 5.72%) 156.53
squid 342940 ( 1.69%) 187718808 ( 1.41%) 547.38
smtp 414022 ( 2.05%) 141894967 ( 1.06%) 342.72
ftp 82804 ( 0.41%) 45380573 ( 0.34%) 548.05
pop3 21421 ( 0.11%) 7113913 ( 0.05%) 332.10
imap 4004 ( 0.02%) 429782 ( 0.00%) 107.34
telnet 4216 ( 0.02%) 662852 ( 0.00%) 157.22
ssh 115429 ( 0.57%) 75001744 ( 0.56%) 649.77
dns 2971 ( 0.01%) 245107 ( 0.00%) 82.50
bgp 139 ( 0.00%) 45492 ( 0.00%) 327.28
napster 5 ( 0.00%) 740 ( 0.00%) 148.00
realaud 82 ( 0.00%) 20968 ( 0.00%) 255.71
rtsp 76085 ( 0.38%) 19373639 ( 0.15%) 254.63
icecast 11649 ( 0.06%) 841944 ( 0.01%) 72.28
other 3950275 ( 19.52%) 2776937149 ( 20.80%) 702.97
udp 3321546 ( 16.41%) 942646271 ( 7.06%) 283.80
dns 1484143 ( 7.33%) 269243487 ( 2.02%) 181.41
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 988 ( 0.00%) 61634 ( 0.00%) 62.38
halflif 34 ( 0.00%) 3344 ( 0.00%) 98.35
starcra 71 ( 0.00%) 10948 ( 0.00%) 154.20
everque 114 ( 0.00%) 20316 ( 0.00%) 178.21
unreal 55 ( 0.00%) 12959 ( 0.00%) 235.62
quake 31 ( 0.00%) 3203 ( 0.00%) 103.32
cuseeme 3 ( 0.00%) 215 ( 0.00%) 71.67
other 1836062 ( 9.07%) 673266523 ( 5.04%) 366.69
icmp 373091 ( 1.84%) 35531742 ( 0.27%) 95.24
ipip 350 ( 0.00%) 44056 ( 0.00%) 125.87
ipsec 252943 ( 1.25%) 124924074 ( 0.94%) 493.88
ip6 4410 ( 0.02%) 1234524 ( 0.01%) 279.94
other 104530 ( 0.52%) 27190670 ( 0.20%) 260.12
frag 2332 ( 0.01%) 1893628 ( 0.01%) 812.02
ip6 29071 ( 0.14%) 5405912 ( 0.04%) 185.96
tcp6 6554 ( 0.03%) 1978459 ( 0.01%) 301.87
http(s) 1193 ( 0.01%) 1257849 ( 0.01%) 1054.36
http(c) 2467 ( 0.01%) 312697 ( 0.00%) 126.75
smtp 235 ( 0.00%) 65408 ( 0.00%) 278.33
ftp 66 ( 0.00%) 6068 ( 0.00%) 91.94
ssh 719 ( 0.00%) 135341 ( 0.00%) 188.24
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 400 ( 0.00%) 36343 ( 0.00%) 90.86
other 1469 ( 0.01%) 164208 ( 0.00%) 111.78
udp6 16492 ( 0.08%) 2517437 ( 0.02%) 152.65
dns 16456 ( 0.08%) 2512146 ( 0.02%) 152.66
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 34 ( 0.00%) 5080 ( 0.00%) 149.41
icmp6 5991 ( 0.03%) 901641 ( 0.01%) 150.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4295 ( 0.00%) 1073.75
tcpdump file: 200901191400.dump.gz (494.41 MB)