Traffic Trace Info
DumpFile: 200901281400.dump
FileSize: 1357.55MB
Id: 200901281400
StartTime: Wed Jan 28 14:00:00 2009
EndTime: Wed Jan 28 14:15:00 2009
TotalTime: 900.02 seconds
TotalCapSize: 1059.21MB CapLen: 96 bytes
# of packets: 19550810 (14122.30MB)
AvgRate: 131.66Mbps stddev:29.74M
IP flow (unique src/dst pair) Information
# of flows: 578894 (avg. 33.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 6.5% 3.6% 1.9% 1.8% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 322144
Top 10 bandwidth usage (bytes/total in %):
16.4% 9.8% 6.6% 5.3% 4.9% 4.3% 3.9% 3.6% 3.6% 3.2%
# of IPv6 addresses: 1139
Top 10 bandwidth usage (bytes/total in %):
21.6% 20.8% 9.4% 5.5% 5.3% 4.6% 4.4% 4.2% 4.2% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200901281400.pktlen.png)
detailed numbers
[ 32- 63]: 4106143
[ 64- 127]: 4181951
[ 128- 255]: 670487
[ 256- 511]: 524545
[ 512- 1023]: 876037
[ 1024- 2047]: 9191647
Protocol Breakdown
![[protocol breakdown chart]](200901281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19550810 (100.00%) 14808303208 (100.00%) 757.43
ip 19514502 ( 99.81%) 14800553781 ( 99.95%) 758.44
tcp 15802445 ( 80.83%) 13425187997 ( 90.66%) 849.56
http(s) 5330434 ( 27.26%) 6749354033 ( 45.58%) 1266.19
http(c) 3215856 ( 16.45%) 440077727 ( 2.97%) 136.85
squid 327727 ( 1.68%) 255277568 ( 1.72%) 778.93
smtp 481259 ( 2.46%) 300557489 ( 2.03%) 624.52
ftp 144112 ( 0.74%) 97444270 ( 0.66%) 676.17
pop3 18352 ( 0.09%) 9877098 ( 0.07%) 538.20
imap 5552 ( 0.03%) 3020266 ( 0.02%) 544.00
telnet 28500 ( 0.15%) 2356665 ( 0.02%) 82.69
ssh 2245166 ( 11.48%) 2460497785 ( 16.62%) 1095.91
dns 1532 ( 0.01%) 142224 ( 0.00%) 92.84
bgp 146 ( 0.00%) 55300 ( 0.00%) 378.77
napster 9 ( 0.00%) 558 ( 0.00%) 62.00
realaud 16 ( 0.00%) 1709 ( 0.00%) 106.81
rtsp 73996 ( 0.38%) 89908813 ( 0.61%) 1215.05
icecast 26876 ( 0.14%) 23396994 ( 0.16%) 870.55
other 3902909 ( 19.96%) 2993219318 ( 20.21%) 766.92
udp 3249596 ( 16.62%) 1321955664 ( 8.93%) 406.81
dns 1292313 ( 6.61%) 219020824 ( 1.48%) 169.48
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 1299 ( 0.01%) 80240 ( 0.00%) 61.77
halflif 38 ( 0.00%) 4512 ( 0.00%) 118.74
starcra 30 ( 0.00%) 5575 ( 0.00%) 185.83
everque 147 ( 0.00%) 23027 ( 0.00%) 156.65
unreal 20 ( 0.00%) 5802 ( 0.00%) 290.10
quake 19 ( 0.00%) 2096 ( 0.00%) 110.32
cuseeme 8 ( 0.00%) 629 ( 0.00%) 78.62
other 1955588 ( 10.00%) 1102719931 ( 7.45%) 563.88
icmp 395941 ( 2.03%) 37830854 ( 0.26%) 95.55
ipip 306 ( 0.00%) 39036 ( 0.00%) 127.57
ipsec 116 ( 0.00%) 18328 ( 0.00%) 158.00
ip6 4679 ( 0.02%) 1799299 ( 0.01%) 384.55
other 61419 ( 0.31%) 13722603 ( 0.09%) 223.43
frag 2242 ( 0.01%) 1964772 ( 0.01%) 876.35
ip6 36308 ( 0.19%) 7749427 ( 0.05%) 213.44
tcp6 11713 ( 0.06%) 3969678 ( 0.03%) 338.91
http(s) 2273 ( 0.01%) 2420172 ( 0.02%) 1064.75
http(c) 2219 ( 0.01%) 253638 ( 0.00%) 114.30
smtp 530 ( 0.00%) 215167 ( 0.00%) 405.98
ftp 1896 ( 0.01%) 197062 ( 0.00%) 103.94
imap 438 ( 0.00%) 280242 ( 0.00%) 639.82
ssh 205 ( 0.00%) 81546 ( 0.00%) 397.79
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 352 ( 0.00%) 28986 ( 0.00%) 82.35
other 3793 ( 0.02%) 492230 ( 0.00%) 129.77
udp6 18965 ( 0.10%) 2966453 ( 0.02%) 156.42
dns 18946 ( 0.10%) 2964367 ( 0.02%) 156.46
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 17 ( 0.00%) 1870 ( 0.00%) 110.00
icmp6 5594 ( 0.03%) 804101 ( 0.01%) 143.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5115 ( 0.00%) 852.50
tcpdump file: 200901281400.dump.gz (472.95 MB)