Traffic Trace Info
DumpFile: 200901221400.dump
FileSize: 1430.33MB
Id: 200901221400
StartTime: Thu Jan 22 14:00:01 2009
EndTime: Thu Jan 22 14:15:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 1117.01MB CapLen: 96 bytes
# of packets: 20533466 (13313.67MB)
AvgRate: 124.10Mbps stddev:14.09M
IP flow (unique src/dst pair) Information
# of flows: 639519 (avg. 32.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 1.7% 1.5% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 379777
Top 10 bandwidth usage (bytes/total in %):
11.2% 7.4% 5.5% 4.2% 4.1% 3.6% 3.5% 2.7% 2.6% 2.0%
# of IPv6 addresses: 1109
Top 10 bandwidth usage (bytes/total in %):
32.5% 29.5% 29.5% 21.7% 10.8% 5.2% 4.4% 4.4% 3.8% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901221400.pktlen.png)
detailed numbers
[ 32- 63]: 4727452
[ 64- 127]: 4663182
[ 128- 255]: 1315622
[ 256- 511]: 740029
[ 512- 1023]: 604581
[ 1024- 2047]: 8482600
Protocol Breakdown
![[protocol breakdown chart]](200901221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20533466 (100.00%) 13960398962 (100.00%) 679.89
ip 20489020 ( 99.78%) 13945369869 ( 99.89%) 680.63
tcp 16365521 ( 79.70%) 12723954019 ( 91.14%) 777.49
http(s) 5536201 ( 26.96%) 7216245525 ( 51.69%) 1303.47
http(c) 3863433 ( 18.82%) 478482516 ( 3.43%) 123.85
squid 586827 ( 2.86%) 270999519 ( 1.94%) 461.80
smtp 376618 ( 1.83%) 157069544 ( 1.13%) 417.05
ftp 221516 ( 1.08%) 183124196 ( 1.31%) 826.69
pop3 17765 ( 0.09%) 4057138 ( 0.03%) 228.38
imap 15174 ( 0.07%) 14177325 ( 0.10%) 934.32
telnet 4556 ( 0.02%) 530466 ( 0.00%) 116.43
ssh 172250 ( 0.84%) 29713225 ( 0.21%) 172.50
dns 3940 ( 0.02%) 774508 ( 0.01%) 196.58
bgp 139 ( 0.00%) 52111 ( 0.00%) 374.90
napster 91 ( 0.00%) 55456 ( 0.00%) 609.41
realaud 45 ( 0.00%) 7756 ( 0.00%) 172.36
rtsp 30393 ( 0.15%) 6305743 ( 0.05%) 207.47
icecast 17614 ( 0.09%) 13190849 ( 0.09%) 748.88
other 5518873 ( 26.88%) 4349145142 ( 31.15%) 788.05
udp 3624421 ( 17.65%) 1142290475 ( 8.18%) 315.16
dns 1583159 ( 7.71%) 266827261 ( 1.91%) 168.54
rip 5 ( 0.00%) 634 ( 0.00%) 126.80
realaud 351 ( 0.00%) 24439 ( 0.00%) 69.63
halflif 33 ( 0.00%) 2944 ( 0.00%) 89.21
starcra 50 ( 0.00%) 8228 ( 0.00%) 164.56
everque 129 ( 0.00%) 41732 ( 0.00%) 323.50
unreal 50 ( 0.00%) 14513 ( 0.00%) 290.26
quake 22 ( 0.00%) 1965 ( 0.00%) 89.32
cuseeme 10 ( 0.00%) 768 ( 0.00%) 76.80
other 2040506 ( 9.94%) 875289248 ( 6.27%) 428.96
icmp 422322 ( 2.06%) 42501972 ( 0.30%) 100.64
ipip 295 ( 0.00%) 34858 ( 0.00%) 118.16
ipsec 307 ( 0.00%) 39938 ( 0.00%) 130.09
ip6 18190 ( 0.09%) 22953664 ( 0.16%) 1261.88
other 57964 ( 0.28%) 13594943 ( 0.10%) 234.54
frag 2385 ( 0.01%) 2075618 ( 0.01%) 870.28
ip6 44444 ( 0.22%) 15028973 ( 0.11%) 338.16
tcp6 18549 ( 0.09%) 11155054 ( 0.08%) 601.38
http(s) 1194 ( 0.01%) 1301554 ( 0.01%) 1090.08
http(c) 1865 ( 0.01%) 213349 ( 0.00%) 114.40
smtp 273 ( 0.00%) 88282 ( 0.00%) 323.38
ftp 39 ( 0.00%) 6622 ( 0.00%) 169.79
ssh 9805 ( 0.05%) 4902266 ( 0.04%) 499.98
bgp 395 ( 0.00%) 35216 ( 0.00%) 89.15
other 4978 ( 0.02%) 4607765 ( 0.03%) 925.63
udp6 19965 ( 0.10%) 2894101 ( 0.02%) 144.96
dns 19934 ( 0.10%) 2891370 ( 0.02%) 145.05
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 30 ( 0.00%) 2616 ( 0.00%) 87.20
icmp6 5898 ( 0.03%) 974285 ( 0.01%) 165.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1453 ( 0.00%) 726.50
tcpdump file: 200901221400.dump.gz (510.04 MB)