Traffic Trace Info
DumpFile: 200902021400.dump
FileSize: 1239.35MB
Id: 200902021400
StartTime: Mon Feb 2 14:00:00 2009
EndTime: Mon Feb 2 14:15:00 2009
TotalTime: 900.25 seconds
TotalCapSize: 966.14MB CapLen: 96 bytes
# of packets: 17904276 (11585.40MB)
AvgRate: 107.93Mbps stddev:22.22M
IP flow (unique src/dst pair) Information
# of flows: 724185 (avg. 24.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 2.1% 1.9% 1.6% 1.5% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 428325
Top 10 bandwidth usage (bytes/total in %):
7.7% 5.7% 5.6% 4.9% 3.6% 3.5% 3.0% 3.0% 2.9% 2.8%
# of IPv6 addresses: 1800
Top 10 bandwidth usage (bytes/total in %):
60.2% 60.2% 9.6% 9.6% 6.8% 6.2% 4.4% 2.4% 1.7% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902021400.pktlen.png)
detailed numbers
[ 32- 63]: 4119342
[ 64- 127]: 4390818
[ 128- 255]: 870673
[ 256- 511]: 492828
[ 512- 1023]: 562656
[ 1024- 2047]: 7467959
Protocol Breakdown
![[protocol breakdown chart]](200902021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17904276 (100.00%) 12148171348 (100.00%) 678.51
ip 17833151 ( 99.60%) 12130446770 ( 99.85%) 680.22
tcp 13821676 ( 77.20%) 10571000032 ( 87.02%) 764.81
http(s) 5442766 ( 30.40%) 7131465752 ( 58.70%) 1310.26
http(c) 3803668 ( 21.24%) 636621822 ( 5.24%) 167.37
squid 174927 ( 0.98%) 129213227 ( 1.06%) 738.67
smtp 293599 ( 1.64%) 119095088 ( 0.98%) 405.64
nntp 71 ( 0.00%) 6360 ( 0.00%) 89.58
ftp 116544 ( 0.65%) 74890812 ( 0.62%) 642.60
pop3 16224 ( 0.09%) 4863568 ( 0.04%) 299.78
imap 5145 ( 0.03%) 1233380 ( 0.01%) 239.72
telnet 3459 ( 0.02%) 485039 ( 0.00%) 140.23
ssh 158582 ( 0.89%) 103641136 ( 0.85%) 653.55
dns 1524 ( 0.01%) 133042 ( 0.00%) 87.30
bgp 137 ( 0.00%) 48619 ( 0.00%) 354.88
napster 5 ( 0.00%) 302 ( 0.00%) 60.40
realaud 73 ( 0.00%) 21096 ( 0.00%) 288.99
rtsp 205624 ( 1.15%) 97877063 ( 0.81%) 476.00
icecast 27325 ( 0.15%) 17433956 ( 0.14%) 638.02
other 3572000 ( 19.95%) 2253969590 ( 18.55%) 631.01
udp 3158565 ( 17.64%) 1466075634 ( 12.07%) 464.16
dns 1040937 ( 5.81%) 238178545 ( 1.96%) 228.81
realaud 1174 ( 0.01%) 142936 ( 0.00%) 121.75
halflif 155 ( 0.00%) 45340 ( 0.00%) 292.52
starcra 137 ( 0.00%) 23998 ( 0.00%) 175.17
everque 3478 ( 0.02%) 841639 ( 0.01%) 241.99
unreal 93 ( 0.00%) 22707 ( 0.00%) 244.16
quake 44 ( 0.00%) 5663 ( 0.00%) 128.70
cuseeme 11 ( 0.00%) 1265 ( 0.00%) 115.00
other 2112506 ( 11.80%) 1226798437 ( 10.10%) 580.73
icmp 715590 ( 4.00%) 69560939 ( 0.57%) 97.21
ipip 330 ( 0.00%) 39720 ( 0.00%) 120.36
ip6 22003 ( 0.12%) 5945317 ( 0.05%) 270.20
other 114987 ( 0.64%) 17825128 ( 0.15%) 155.02
frag 1994 ( 0.01%) 1620077 ( 0.01%) 812.48
ip6 71125 ( 0.40%) 17724578 ( 0.15%) 249.20
tcp6 48607 ( 0.27%) 14288053 ( 0.12%) 293.95
http(s) 8563 ( 0.05%) 10904102 ( 0.09%) 1273.40
http(c) 25438 ( 0.14%) 1973312 ( 0.02%) 77.57
smtp 171 ( 0.00%) 53221 ( 0.00%) 311.23
ftp 54 ( 0.00%) 4947 ( 0.00%) 91.61
ssh 91 ( 0.00%) 13010 ( 0.00%) 142.97
bgp 366 ( 0.00%) 30791 ( 0.00%) 84.13
other 13924 ( 0.08%) 1308670 ( 0.01%) 93.99
udp6 16851 ( 0.09%) 2508398 ( 0.02%) 148.86
dns 15663 ( 0.09%) 2309002 ( 0.02%) 147.42
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 3 ( 0.00%) 329 ( 0.00%) 109.67
other 1184 ( 0.01%) 198962 ( 0.00%) 168.04
icmp6 5530 ( 0.03%) 854931 ( 0.01%) 154.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 107 ( 0.00%) 69116 ( 0.00%) 645.94
tcpdump file: 200902021400.dump.gz (433.11 MB)