Traffic Trace Info
DumpFile: 200902011400.dump
FileSize: 965.19MB
Id: 200902011400
StartTime: Sun Feb 1 14:00:00 2009
EndTime: Sun Feb 1 14:15:01 2009
TotalTime: 900.35 seconds
TotalCapSize: 753.48MB CapLen: 96 bytes
# of packets: 13874096 (9970.31MB)
AvgRate: 92.90Mbps stddev:19.07M
IP flow (unique src/dst pair) Information
# of flows: 652457 (avg. 21.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 3.4% 3.1% 2.2% 2.0% 1.6% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 402095
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.8% 6.5% 6.1% 5.1% 4.7% 3.6% 3.6% 3.1% 3.1%
# of IPv6 addresses: 1059
Top 10 bandwidth usage (bytes/total in %):
97.7% 97.0% 0.7% 0.5% 0.3% 0.3% 0.2% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902011400.pktlen.png)
detailed numbers
[ 32- 63]: 2757599
[ 64- 127]: 2941108
[ 128- 255]: 698599
[ 256- 511]: 516186
[ 512- 1023]: 499770
[ 1024- 2047]: 6460834
Protocol Breakdown
![[protocol breakdown chart]](200902011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13874096 (100.00%) 10454627555 (100.00%) 753.54
ip 13682149 ( 98.62%) 10234944472 ( 97.90%) 748.05
tcp 10525078 ( 75.86%) 9314246767 ( 89.09%) 884.96
http(s) 4337603 ( 31.26%) 5787959304 ( 55.36%) 1334.37
http(c) 2004319 ( 14.45%) 206231536 ( 1.97%) 102.89
squid 268032 ( 1.93%) 203031501 ( 1.94%) 757.49
smtp 208912 ( 1.51%) 39124764 ( 0.37%) 187.28
ftp 232182 ( 1.67%) 190774153 ( 1.82%) 821.66
pop3 8971 ( 0.06%) 3706820 ( 0.04%) 413.20
imap 1702 ( 0.01%) 774264 ( 0.01%) 454.91
telnet 15858 ( 0.11%) 1366497 ( 0.01%) 86.17
ssh 19568 ( 0.14%) 6558456 ( 0.06%) 335.16
dns 4493 ( 0.03%) 381773 ( 0.00%) 84.97
bgp 148 ( 0.00%) 52183 ( 0.00%) 352.59
napster 9 ( 0.00%) 1328 ( 0.00%) 147.56
realaud 15 ( 0.00%) 1046 ( 0.00%) 69.73
rtsp 102050 ( 0.74%) 74422422 ( 0.71%) 729.27
icecast 843 ( 0.01%) 184758 ( 0.00%) 219.17
other 3320372 ( 23.93%) 2799675902 ( 26.78%) 843.18
udp 2761824 ( 19.91%) 882044003 ( 8.44%) 319.37
dns 1329380 ( 9.58%) 288372019 ( 2.76%) 216.92
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 2838 ( 0.02%) 174869 ( 0.00%) 61.62
halflif 65 ( 0.00%) 8838 ( 0.00%) 135.97
starcra 137 ( 0.00%) 26650 ( 0.00%) 194.53
everque 194 ( 0.00%) 31267 ( 0.00%) 161.17
unreal 247 ( 0.00%) 121877 ( 0.00%) 493.43
quake 20 ( 0.00%) 2345 ( 0.00%) 117.25
cuseeme 11 ( 0.00%) 1189 ( 0.00%) 108.09
other 1427146 ( 10.29%) 593153389 ( 5.67%) 415.62
icmp 384477 ( 2.77%) 36910894 ( 0.35%) 96.00
ipip 316 ( 0.00%) 38028 ( 0.00%) 120.34
ip6 2638 ( 0.02%) 737245 ( 0.01%) 279.47
other 7816 ( 0.06%) 967535 ( 0.01%) 123.79
frag 33576 ( 0.24%) 26147446 ( 0.25%) 778.75
ip6 191947 ( 1.38%) 219683083 ( 2.10%) 1144.50
tcp6 171666 ( 1.24%) 216784985 ( 2.07%) 1262.83
http(s) 1402 ( 0.01%) 889660 ( 0.01%) 634.56
http(c) 22666 ( 0.16%) 1979979 ( 0.02%) 87.35
smtp 326 ( 0.00%) 107202 ( 0.00%) 328.84
ftp 2498 ( 0.02%) 255578 ( 0.00%) 102.31
imap 40 ( 0.00%) 4842 ( 0.00%) 121.05
ssh 70 ( 0.00%) 8520 ( 0.00%) 121.71
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 362 ( 0.00%) 30531 ( 0.00%) 84.34
other 144295 ( 1.04%) 213508038 ( 2.04%) 1479.66
udp6 14739 ( 0.11%) 2093258 ( 0.02%) 142.02
dns 14722 ( 0.11%) 2091388 ( 0.02%) 142.06
other 17 ( 0.00%) 1870 ( 0.00%) 110.00
icmp6 5507 ( 0.04%) 798325 ( 0.01%) 144.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 2435 ( 0.00%) 487.00
tcpdump file: 200902011400.dump.gz (327.71 MB)