Traffic Trace Info
DumpFile: 200901231400.dump
FileSize: 1360.89MB
Id: 200901231400
StartTime: Fri Jan 23 14:00:00 2009
EndTime: Fri Jan 23 14:15:00 2009
TotalTime: 899.87 seconds
TotalCapSize: 1059.15MB CapLen: 96 bytes
# of packets: 19774682 (12363.85MB)
AvgRate: 115.28Mbps stddev:16.07M
IP flow (unique src/dst pair) Information
# of flows: 744635 (avg. 26.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.3% 1.3% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 435783
Top 10 bandwidth usage (bytes/total in %):
6.7% 5.6% 5.5% 4.6% 4.1% 3.1% 2.5% 2.0% 1.8% 1.7%
# of IPv6 addresses: 1165
Top 10 bandwidth usage (bytes/total in %):
97.5% 97.5% 0.5% 0.2% 0.2% 0.2% 0.2% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901231400.pktlen.png)
detailed numbers
[ 32- 63]: 4887833
[ 64- 127]: 4844346
[ 128- 255]: 845397
[ 256- 511]: 689039
[ 512- 1023]: 651825
[ 1024- 2047]: 7856242
Protocol Breakdown
![[protocol breakdown chart]](200901231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19774682 (100.00%) 12964432540 (100.00%) 655.61
ip 19606541 ( 99.15%) 12752227001 ( 98.36%) 650.41
tcp 15183426 ( 76.78%) 11091866833 ( 85.56%) 730.52
http(s) 5105476 ( 25.82%) 6668287137 ( 51.44%) 1306.10
http(c) 3684240 ( 18.63%) 578561678 ( 4.46%) 157.04
squid 731344 ( 3.70%) 431905792 ( 3.33%) 590.56
smtp 390823 ( 1.98%) 170199324 ( 1.31%) 435.49
ftp 137491 ( 0.70%) 115909036 ( 0.89%) 843.03
pop3 14995 ( 0.08%) 6874265 ( 0.05%) 458.44
imap 8040 ( 0.04%) 6482664 ( 0.05%) 806.30
telnet 1154 ( 0.01%) 118036 ( 0.00%) 102.28
ssh 28511 ( 0.14%) 5740711 ( 0.04%) 201.35
dns 2174 ( 0.01%) 180831 ( 0.00%) 83.18
bgp 145 ( 0.00%) 54334 ( 0.00%) 374.72
napster 42 ( 0.00%) 6657 ( 0.00%) 158.50
realaud 48 ( 0.00%) 8600 ( 0.00%) 179.17
rtsp 72323 ( 0.37%) 92253837 ( 0.71%) 1275.58
icecast 20970 ( 0.11%) 23014408 ( 0.18%) 1097.49
other 4985638 ( 25.21%) 2992268641 ( 23.08%) 600.18
udp 3960726 ( 20.03%) 1614114401 ( 12.45%) 407.53
dns 1419683 ( 7.18%) 255422582 ( 1.97%) 179.92
rip 5 ( 0.00%) 300 ( 0.00%) 60.00
realaud 4435 ( 0.02%) 268112 ( 0.00%) 60.45
halflif 41 ( 0.00%) 4143 ( 0.00%) 101.05
starcra 96 ( 0.00%) 15885 ( 0.00%) 165.47
everque 209 ( 0.00%) 36989 ( 0.00%) 176.98
unreal 78 ( 0.00%) 23288 ( 0.00%) 298.56
quake 36 ( 0.00%) 4854 ( 0.00%) 134.83
cuseeme 8 ( 0.00%) 768 ( 0.00%) 96.00
other 2536012 ( 12.82%) 1358254188 ( 10.48%) 535.59
icmp 450681 ( 2.28%) 44242028 ( 0.34%) 98.17
ipip 304 ( 0.00%) 37982 ( 0.00%) 124.94
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 2034 ( 0.01%) 485504 ( 0.00%) 238.69
other 9258 ( 0.05%) 1462557 ( 0.01%) 157.98
frag 7760 ( 0.04%) 4212792 ( 0.03%) 542.89
ip6 168139 ( 0.85%) 212205419 ( 1.64%) 1262.08
tcp6 142605 ( 0.72%) 208678037 ( 1.61%) 1463.33
http(s) 931 ( 0.00%) 972081 ( 0.01%) 1044.13
http(c) 2535 ( 0.01%) 313524 ( 0.00%) 123.68
smtp 510 ( 0.00%) 228555 ( 0.00%) 448.15
ssh 14 ( 0.00%) 1764 ( 0.00%) 126.00
bgp 393 ( 0.00%) 35524 ( 0.00%) 90.39
other 138222 ( 0.70%) 207126589 ( 1.60%) 1498.51
udp6 20186 ( 0.10%) 2818100 ( 0.02%) 139.61
dns 20167 ( 0.10%) 2816022 ( 0.02%) 139.64
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 16 ( 0.00%) 1760 ( 0.00%) 110.00
icmp6 5317 ( 0.03%) 705066 ( 0.01%) 132.61
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200901231400.dump.gz (482.58 MB)