Traffic Trace Info
DumpFile: 200901211400.dump
FileSize: 1286.77MB
Id: 200901211400
StartTime: Wed Jan 21 14:00:01 2009
EndTime: Wed Jan 21 14:15:01 2009
TotalTime: 900.18 seconds
TotalCapSize: 1005.03MB CapLen: 96 bytes
# of packets: 18463298 (11545.51MB)
AvgRate: 107.59Mbps stddev:15.17M
IP flow (unique src/dst pair) Information
# of flows: 648382 (avg. 28.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.6% 2.3% 2.1% 2.0% 1.6% 1.5% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 362070
Top 10 bandwidth usage (bytes/total in %):
6.6% 5.0% 4.8% 4.4% 3.2% 3.2% 3.1% 2.8% 2.6% 2.4%
# of IPv6 addresses: 1154
Top 10 bandwidth usage (bytes/total in %):
30.2% 30.2% 10.2% 10.2% 8.5% 5.9% 5.9% 5.7% 5.3% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901211400.pktlen.png)
detailed numbers
[ 32- 63]: 3793626
[ 64- 127]: 4699674
[ 128- 255]: 1221943
[ 256- 511]: 707483
[ 512- 1023]: 700610
[ 1024- 2047]: 7339962
Protocol Breakdown
![[protocol breakdown chart]](200901211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18463298 (100.00%) 12106345245 (100.00%) 655.70
ip 18426434 ( 99.80%) 12096960647 ( 99.92%) 656.50
tcp 13919240 ( 75.39%) 10776868308 ( 89.02%) 774.24
http(s) 5208198 ( 28.21%) 6837360160 ( 56.48%) 1312.81
http(c) 3695750 ( 20.02%) 496799689 ( 4.10%) 134.42
squid 379960 ( 2.06%) 240176908 ( 1.98%) 632.11
smtp 422883 ( 2.29%) 124003273 ( 1.02%) 293.23
ftp 160633 ( 0.87%) 105784015 ( 0.87%) 658.54
pop3 16160 ( 0.09%) 6453486 ( 0.05%) 399.35
imap 21095 ( 0.11%) 2747920 ( 0.02%) 130.26
telnet 4369 ( 0.02%) 623197 ( 0.01%) 142.64
ssh 31987 ( 0.17%) 6771392 ( 0.06%) 211.69
dns 2409 ( 0.01%) 320212 ( 0.00%) 132.92
bgp 154 ( 0.00%) 61800 ( 0.00%) 401.30
napster 9 ( 0.00%) 558 ( 0.00%) 62.00
realaud 18 ( 0.00%) 3714 ( 0.00%) 206.33
rtsp 20375 ( 0.11%) 1337254 ( 0.01%) 65.63
icecast 52473 ( 0.28%) 17356189 ( 0.14%) 330.76
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3902761 ( 21.14%) 2937067161 ( 24.26%) 752.56
udp 4055872 ( 21.97%) 1275678575 ( 10.54%) 314.53
dns 1754185 ( 9.50%) 286511309 ( 2.37%) 163.33
rip 5 ( 0.00%) 300 ( 0.00%) 60.00
realaud 1216 ( 0.01%) 110602 ( 0.00%) 90.96
halflif 147 ( 0.00%) 25425 ( 0.00%) 172.96
starcra 312 ( 0.00%) 62763 ( 0.00%) 201.16
everque 1475 ( 0.01%) 292988 ( 0.00%) 198.64
unreal 67 ( 0.00%) 18410 ( 0.00%) 274.78
quake 4517 ( 0.02%) 829003 ( 0.01%) 183.53
cuseeme 7 ( 0.00%) 665 ( 0.00%) 95.00
other 2292591 ( 12.42%) 987314026 ( 8.16%) 430.65
icmp 437132 ( 2.37%) 42394212 ( 0.35%) 96.98
ipip 311 ( 0.00%) 37414 ( 0.00%) 120.30
ipsec 4177 ( 0.02%) 505158 ( 0.00%) 120.94
ip6 2661 ( 0.01%) 513345 ( 0.00%) 192.91
other 7041 ( 0.04%) 963635 ( 0.01%) 136.86
frag 10199 ( 0.06%) 9389628 ( 0.08%) 920.64
ip6 36864 ( 0.20%) 9384598 ( 0.08%) 254.57
tcp6 11497 ( 0.06%) 5676218 ( 0.05%) 493.71
http(s) 3574 ( 0.02%) 3956137 ( 0.03%) 1106.92
http(c) 2747 ( 0.01%) 391681 ( 0.00%) 142.59
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 344 ( 0.00%) 146798 ( 0.00%) 426.74
ftp 80 ( 0.00%) 7348 ( 0.00%) 91.85
ssh 2786 ( 0.02%) 959260 ( 0.01%) 344.31
dns 4 ( 0.00%) 460 ( 0.00%) 115.00
bgp 400 ( 0.00%) 35568 ( 0.00%) 88.92
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1559 ( 0.01%) 178744 ( 0.00%) 114.65
udp6 19359 ( 0.10%) 2764791 ( 0.02%) 142.82
dns 19343 ( 0.10%) 2763050 ( 0.02%) 142.84
everque 1 ( 0.00%) 98 ( 0.00%) 98.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 5974 ( 0.03%) 934920 ( 0.01%) 156.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4589 ( 0.00%) 1147.25
tcpdump file: 200901211400.dump.gz (457.73 MB)