Traffic Trace Info
DumpFile: 200902041400.dump
FileSize: 1384.33MB
Id: 200902041400
StartTime: Wed Feb 4 14:00:01 2009
EndTime: Wed Feb 4 14:15:01 2009
TotalTime: 900.21 seconds
TotalCapSize: 1082.64MB CapLen: 96 bytes
# of packets: 19771238 (12364.50MB)
AvgRate: 115.23Mbps stddev:10.09M
IP flow (unique src/dst pair) Information
# of flows: 863472 (avg. 22.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 1.7% 1.4% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 548715
Top 10 bandwidth usage (bytes/total in %):
19.3% 7.9% 6.8% 4.6% 2.8% 2.8% 2.5% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1148
Top 10 bandwidth usage (bytes/total in %):
19.7% 19.7% 10.4% 10.4% 7.7% 7.0% 5.7% 5.7% 4.6% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902041400.pktlen.png)
detailed numbers
[ 32- 63]: 4866820
[ 64- 127]: 5090948
[ 128- 255]: 768403
[ 256- 511]: 557096
[ 512- 1023]: 536257
[ 1024- 2047]: 7951714
Protocol Breakdown
![[protocol breakdown chart]](200902041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19771238 (100.00%) 12965117961 (100.00%) 655.76
ip 19710832 ( 99.69%) 12956064832 ( 99.93%) 657.31
tcp 16415102 ( 83.03%) 12055025633 ( 92.98%) 734.39
http(s) 6768029 ( 34.23%) 9120271207 ( 70.34%) 1347.55
http(c) 5339398 ( 27.01%) 553675601 ( 4.27%) 103.70
squid 442740 ( 2.24%) 237189365 ( 1.83%) 535.73
smtp 390811 ( 1.98%) 125724812 ( 0.97%) 321.70
nntp 140 ( 0.00%) 12803 ( 0.00%) 91.45
ftp 89899 ( 0.45%) 32471166 ( 0.25%) 361.20
pop3 18885 ( 0.10%) 5618774 ( 0.04%) 297.53
imap 17066 ( 0.09%) 13165521 ( 0.10%) 771.45
telnet 3446 ( 0.02%) 444666 ( 0.00%) 129.04
ssh 149546 ( 0.76%) 32571937 ( 0.25%) 217.81
dns 2122 ( 0.01%) 180607 ( 0.00%) 85.11
bgp 158 ( 0.00%) 63641 ( 0.00%) 402.79
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 82440 ( 0.42%) 106484980 ( 0.82%) 1291.67
icecast 2681 ( 0.01%) 239179 ( 0.00%) 89.21
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3107725 ( 15.72%) 1826910274 ( 14.09%) 587.86
udp 2522407 ( 12.76%) 641162928 ( 4.95%) 254.19
dns 1356169 ( 6.86%) 270998158 ( 2.09%) 199.83
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 2598 ( 0.01%) 160571 ( 0.00%) 61.81
halflif 45 ( 0.00%) 6146 ( 0.00%) 136.58
starcra 111 ( 0.00%) 21146 ( 0.00%) 190.50
everque 135 ( 0.00%) 21588 ( 0.00%) 159.91
unreal 147 ( 0.00%) 43133 ( 0.00%) 293.42
quake 14 ( 0.00%) 1724 ( 0.00%) 123.14
cuseeme 5 ( 0.00%) 574 ( 0.00%) 114.80
other 1163061 ( 5.88%) 369828633 ( 2.85%) 317.98
icmp 454663 ( 2.30%) 41734013 ( 0.32%) 91.79
ipip 353 ( 0.00%) 46238 ( 0.00%) 130.99
ipsec 106 ( 0.00%) 16748 ( 0.00%) 158.00
ip6 143653 ( 0.73%) 187017680 ( 1.44%) 1301.87
other 174548 ( 0.88%) 31061592 ( 0.24%) 177.95
frag 2445 ( 0.01%) 2103483 ( 0.02%) 860.32
ip6 60406 ( 0.31%) 9053129 ( 0.07%) 149.87
tcp6 38198 ( 0.19%) 5756419 ( 0.04%) 150.70
http(s) 1561 ( 0.01%) 1678105 ( 0.01%) 1075.02
http(c) 27756 ( 0.14%) 2364654 ( 0.02%) 85.19
smtp 585 ( 0.00%) 229218 ( 0.00%) 391.83
ftp 2060 ( 0.01%) 212597 ( 0.00%) 103.20
ssh 2984 ( 0.02%) 942360 ( 0.01%) 315.80
dns 16 ( 0.00%) 1557 ( 0.00%) 97.31
bgp 359 ( 0.00%) 29602 ( 0.00%) 82.46
other 2877 ( 0.01%) 298326 ( 0.00%) 103.69
udp6 16024 ( 0.08%) 2478894 ( 0.02%) 154.70
dns 16009 ( 0.08%) 2477250 ( 0.02%) 154.74
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 6140 ( 0.03%) 810823 ( 0.01%) 132.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 2913 ( 0.00%) 208.07
tcpdump file: 200902041400.dump.gz (521.44 MB)