Traffic Trace Info
DumpFile: 200901241400.dump
FileSize: 1023.16MB
Id: 200901241400
StartTime: Sat Jan 24 14:00:00 2009
EndTime: Sat Jan 24 14:15:00 2009
TotalTime: 899.45 seconds
TotalCapSize: 796.92MB CapLen: 96 bytes
# of packets: 14826079 (8821.67MB)
AvgRate: 82.28Mbps stddev:13.16M
IP flow (unique src/dst pair) Information
# of flows: 605685 (avg. 24.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.8% 1.4% 1.3% 1.3% 1.3% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 385588
Top 10 bandwidth usage (bytes/total in %):
11.6% 8.4% 6.8% 5.0% 3.5% 2.9% 2.6% 2.4% 1.9% 1.7%
# of IPv6 addresses: 1044
Top 10 bandwidth usage (bytes/total in %):
32.4% 27.2% 14.9% 8.2% 7.5% 7.5% 6.8% 5.1% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901241400.pktlen.png)
detailed numbers
[ 32- 63]: 3425441
[ 64- 127]: 4078322
[ 128- 255]: 665827
[ 256- 511]: 587581
[ 512- 1023]: 529160
[ 1024- 2047]: 5539748
Protocol Breakdown
![[protocol breakdown chart]](200901241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14826079 (100.00%) 9250192860 (100.00%) 623.91
ip 14773439 ( 99.64%) 9244405227 ( 99.94%) 625.74
tcp 11222593 ( 75.69%) 8291084291 ( 89.63%) 738.79
http(s) 3862665 ( 26.05%) 5016536794 ( 54.23%) 1298.72
http(c) 2596571 ( 17.51%) 288340357 ( 3.12%) 111.05
squid 392729 ( 2.65%) 145528871 ( 1.57%) 370.56
smtp 253953 ( 1.71%) 68799360 ( 0.74%) 270.91
ftp 119707 ( 0.81%) 80250026 ( 0.87%) 670.39
pop3 9084 ( 0.06%) 2333485 ( 0.03%) 256.88
imap 3140 ( 0.02%) 798955 ( 0.01%) 254.44
telnet 916 ( 0.01%) 76125 ( 0.00%) 83.11
ssh 92578 ( 0.62%) 22752402 ( 0.25%) 245.76
dns 1822 ( 0.01%) 158711 ( 0.00%) 87.11
bgp 156 ( 0.00%) 49695 ( 0.00%) 318.56
napster 9 ( 0.00%) 558 ( 0.00%) 62.00
realaud 21 ( 0.00%) 1290 ( 0.00%) 61.43
rtsp 122323 ( 0.83%) 128694521 ( 1.39%) 1052.09
icecast 672 ( 0.00%) 57897 ( 0.00%) 86.16
other 3766174 ( 25.40%) 2536700864 ( 27.42%) 673.55
udp 3072300 ( 20.72%) 901568526 ( 9.75%) 293.45
dns 1118096 ( 7.54%) 180418827 ( 1.95%) 161.36
rip 8 ( 0.00%) 814 ( 0.00%) 101.75
realaud 5249 ( 0.04%) 316545 ( 0.00%) 60.31
halflif 19 ( 0.00%) 1963 ( 0.00%) 103.32
starcra 24 ( 0.00%) 4353 ( 0.00%) 181.38
everque 101 ( 0.00%) 17580 ( 0.00%) 174.06
unreal 34 ( 0.00%) 9863 ( 0.00%) 290.09
quake 25 ( 0.00%) 1788 ( 0.00%) 71.52
cuseeme 3 ( 0.00%) 180 ( 0.00%) 60.00
other 1948690 ( 13.14%) 720764860 ( 7.79%) 369.87
icmp 436378 ( 2.94%) 39796278 ( 0.43%) 91.20
ipip 316 ( 0.00%) 40012 ( 0.00%) 126.62
ip6 7417 ( 0.05%) 7454985 ( 0.08%) 1005.12
other 34435 ( 0.23%) 4461135 ( 0.05%) 129.55
frag 1548 ( 0.01%) 1239120 ( 0.01%) 800.47
ip6 52640 ( 0.36%) 5787633 ( 0.06%) 109.95
tcp6 8086 ( 0.05%) 1183512 ( 0.01%) 146.37
http(s) 707 ( 0.00%) 353035 ( 0.00%) 499.34
http(c) 4626 ( 0.03%) 438827 ( 0.00%) 94.86
smtp 530 ( 0.00%) 154236 ( 0.00%) 291.01
pop3 24 ( 0.00%) 1983 ( 0.00%) 82.62
ssh 37 ( 0.00%) 6654 ( 0.00%) 179.84
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 383 ( 0.00%) 34142 ( 0.00%) 89.14
other 1772 ( 0.01%) 194000 ( 0.00%) 109.48
udp6 17761 ( 0.12%) 2382464 ( 0.03%) 134.14
dns 17694 ( 0.12%) 2374614 ( 0.03%) 134.20
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 65 ( 0.00%) 7620 ( 0.00%) 117.23
icmp6 26762 ( 0.18%) 2216419 ( 0.02%) 82.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 1158 ( 0.00%) 1158.00
tcpdump file: 200901241400.dump.gz (363.01 MB)