Traffic Trace Info
DumpFile: 200902031400.dump
FileSize: 1282.46MB
Id: 200902031400
StartTime: Tue Feb 3 14:00:01 2009
EndTime: Tue Feb 3 14:15:00 2009
TotalTime: 899.42 seconds
TotalCapSize: 1000.26MB CapLen: 96 bytes
# of packets: 18493600 (11451.47MB)
AvgRate: 106.80Mbps stddev:10.45M
IP flow (unique src/dst pair) Information
# of flows: 757438 (avg. 24.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.5% 2.5% 1.4% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 448971
Top 10 bandwidth usage (bytes/total in %):
6.8% 5.2% 5.1% 4.4% 3.7% 3.7% 2.8% 2.7% 2.7% 2.6%
# of IPv6 addresses: 1697
Top 10 bandwidth usage (bytes/total in %):
26.5% 21.1% 21.1% 20.4% 6.9% 6.9% 6.8% 6.1% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902031400.pktlen.png)
detailed numbers
[ 32- 63]: 4198491
[ 64- 127]: 4890849
[ 128- 255]: 905029
[ 256- 511]: 579659
[ 512- 1023]: 634809
[ 1024- 2047]: 7284763
Protocol Breakdown
![[protocol breakdown chart]](200902031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18493600 (100.00%) 12007740973 (100.00%) 649.29
ip 18432428 ( 99.67%) 11997548333 ( 99.92%) 650.89
tcp 14478816 ( 78.29%) 10513678112 ( 87.56%) 726.14
http(s) 5191214 ( 28.07%) 6844106735 ( 57.00%) 1318.40
http(c) 4184604 ( 22.63%) 475554450 ( 3.96%) 113.64
squid 426728 ( 2.31%) 362739853 ( 3.02%) 850.05
smtp 712054 ( 3.85%) 215593673 ( 1.80%) 302.78
nntp 371 ( 0.00%) 46289 ( 0.00%) 124.77
ftp 169194 ( 0.91%) 105792971 ( 0.88%) 625.28
pop3 46605 ( 0.25%) 34821031 ( 0.29%) 747.15
imap 6850 ( 0.04%) 889152 ( 0.01%) 129.80
telnet 3173 ( 0.02%) 329839 ( 0.00%) 103.95
ssh 16940 ( 0.09%) 2563116 ( 0.02%) 151.31
dns 1805 ( 0.01%) 167440 ( 0.00%) 92.76
bgp 142 ( 0.00%) 53761 ( 0.00%) 378.60
napster 6 ( 0.00%) 366 ( 0.00%) 61.00
realaud 36 ( 0.00%) 4041 ( 0.00%) 112.25
rtsp 187599 ( 1.01%) 69072289 ( 0.58%) 368.19
icecast 24182 ( 0.13%) 23168806 ( 0.19%) 958.10
other 3507299 ( 18.96%) 2378773460 ( 19.81%) 678.24
udp 3460712 ( 18.71%) 1429074967 ( 11.90%) 412.94
dns 1202655 ( 6.50%) 255106318 ( 2.12%) 212.12
realaud 947 ( 0.01%) 60408 ( 0.00%) 63.79
halflif 138 ( 0.00%) 19236 ( 0.00%) 139.39
starcra 386 ( 0.00%) 200972 ( 0.00%) 520.65
everque 3114 ( 0.02%) 689143 ( 0.01%) 221.30
unreal 106 ( 0.00%) 25118 ( 0.00%) 236.96
quake 27 ( 0.00%) 2680 ( 0.00%) 99.26
cuseeme 4 ( 0.00%) 401 ( 0.00%) 100.25
other 2253202 ( 12.18%) 1172915051 ( 9.77%) 520.55
icmp 400368 ( 2.16%) 37133792 ( 0.31%) 92.75
ipip 332 ( 0.00%) 43072 ( 0.00%) 129.73
ipsec 106 ( 0.00%) 16748 ( 0.00%) 158.00
ip6 26777 ( 0.14%) 3667498 ( 0.03%) 136.96
other 65317 ( 0.35%) 13934144 ( 0.12%) 213.33
frag 2250 ( 0.01%) 1788199 ( 0.01%) 794.76
ip6 61172 ( 0.33%) 10192640 ( 0.08%) 166.62
tcp6 39893 ( 0.22%) 6778300 ( 0.06%) 169.91
http(s) 1157 ( 0.01%) 1176509 ( 0.01%) 1016.86
http(c) 30959 ( 0.17%) 2412043 ( 0.02%) 77.91
smtp 568 ( 0.00%) 267977 ( 0.00%) 471.79
ftp 58 ( 0.00%) 5299 ( 0.00%) 91.36
ssh 113 ( 0.00%) 22998 ( 0.00%) 203.52
bgp 364 ( 0.00%) 30492 ( 0.00%) 83.77
other 6674 ( 0.04%) 2862982 ( 0.02%) 428.98
udp6 15741 ( 0.09%) 2385446 ( 0.02%) 151.54
dns 14831 ( 0.08%) 2217359 ( 0.02%) 149.51
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 2 ( 0.00%) 686 ( 0.00%) 343.00
other 907 ( 0.00%) 167292 ( 0.00%) 184.45
icmp6 5191 ( 0.03%) 742721 ( 0.01%) 143.08
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 316 ( 0.00%) 281957 ( 0.00%) 892.27
tcpdump file: 200902031400.dump.gz (455.74 MB)