Traffic Trace Info
DumpFile: 200902051400.dump
FileSize: 1438.61MB
Id: 200902051400
StartTime: Thu Feb 5 14:00:01 2009
EndTime: Thu Feb 5 14:15:00 2009
TotalTime: 899.55 seconds
TotalCapSize: 1120.14MB CapLen: 96 bytes
# of packets: 20871213 (13047.29MB)
AvgRate: 121.68Mbps stddev:11.06M
IP flow (unique src/dst pair) Information
# of flows: 751118 (avg. 27.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.1% 0.9% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 435124
Top 10 bandwidth usage (bytes/total in %):
13.5% 10.3% 9.2% 8.2% 5.7% 2.9% 1.6% 1.6% 1.3% 1.3%
# of IPv6 addresses: 1105
Top 10 bandwidth usage (bytes/total in %):
14.3% 11.8% 10.4% 9.1% 9.0% 6.9% 5.1% 4.1% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902051400.pktlen.png)
detailed numbers
[ 32- 63]: 4533155
[ 64- 127]: 5696388
[ 128- 255]: 913400
[ 256- 511]: 627562
[ 512- 1023]: 900564
[ 1024- 2047]: 8200144
Protocol Breakdown
![[protocol breakdown chart]](200902051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20871213 (100.00%) 13681073713 (100.00%) 655.50
ip 20839642 ( 99.85%) 13675280424 ( 99.96%) 656.21
tcp 16005926 ( 76.69%) 11669303932 ( 85.30%) 729.06
http(s) 6652970 ( 31.88%) 8819062410 ( 64.46%) 1325.58
http(c) 4530944 ( 21.71%) 533258760 ( 3.90%) 117.69
squid 336970 ( 1.61%) 158125143 ( 1.16%) 469.26
smtp 346914 ( 1.66%) 147490003 ( 1.08%) 425.15
nntp 91 ( 0.00%) 10587 ( 0.00%) 116.34
ftp 169619 ( 0.81%) 130155186 ( 0.95%) 767.34
pop3 21196 ( 0.10%) 10936629 ( 0.08%) 515.98
imap 38817 ( 0.19%) 51007855 ( 0.37%) 1314.06
telnet 3886 ( 0.02%) 651699 ( 0.00%) 167.70
ssh 961445 ( 4.61%) 187040069 ( 1.37%) 194.54
dns 6192 ( 0.03%) 3929476 ( 0.03%) 634.61
bgp 173 ( 0.00%) 63517 ( 0.00%) 367.15
napster 24 ( 0.00%) 1666 ( 0.00%) 69.42
realaud 39 ( 0.00%) 4206 ( 0.00%) 107.85
rtsp 88753 ( 0.43%) 31048251 ( 0.23%) 349.83
icecast 7768 ( 0.04%) 3546827 ( 0.03%) 456.59
other 2840122 ( 13.61%) 1592971468 ( 11.64%) 560.88
udp 4123241 ( 19.76%) 1899421421 ( 13.88%) 460.66
dns 1487839 ( 7.13%) 293706457 ( 2.15%) 197.40
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 11219 ( 0.05%) 7875008 ( 0.06%) 701.93
halflif 96 ( 0.00%) 9140 ( 0.00%) 95.21
starcra 46 ( 0.00%) 7432 ( 0.00%) 161.57
everque 164 ( 0.00%) 31329 ( 0.00%) 191.03
unreal 102 ( 0.00%) 27488 ( 0.00%) 269.49
quake 21 ( 0.00%) 1913 ( 0.00%) 91.10
cuseeme 12 ( 0.00%) 1479 ( 0.00%) 123.25
other 2623112 ( 12.57%) 1597585213 ( 11.68%) 609.04
icmp 526557 ( 2.52%) 45488250 ( 0.33%) 86.39
ipip 332 ( 0.00%) 44568 ( 0.00%) 134.24
ipsec 102 ( 0.00%) 16116 ( 0.00%) 158.00
ip6 38739 ( 0.19%) 25070202 ( 0.18%) 647.16
other 144745 ( 0.69%) 35935935 ( 0.26%) 248.27
frag 6312 ( 0.03%) 5122586 ( 0.04%) 811.56
ip6 31571 ( 0.15%) 5793289 ( 0.04%) 183.50
tcp6 7806 ( 0.04%) 2122356 ( 0.02%) 271.89
http(s) 1414 ( 0.01%) 1159103 ( 0.01%) 819.73
http(c) 3547 ( 0.02%) 485881 ( 0.00%) 136.98
smtp 741 ( 0.00%) 239611 ( 0.00%) 323.36
ftp 62 ( 0.00%) 5676 ( 0.00%) 91.55
ssh 177 ( 0.00%) 27030 ( 0.00%) 152.71
dns 10 ( 0.00%) 1090 ( 0.00%) 109.00
bgp 394 ( 0.00%) 36598 ( 0.00%) 92.89
other 1461 ( 0.01%) 167367 ( 0.00%) 114.56
udp6 18443 ( 0.09%) 2967752 ( 0.02%) 160.91
dns 18423 ( 0.09%) 2965552 ( 0.02%) 160.97
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 5279 ( 0.03%) 691712 ( 0.01%) 131.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 7389 ( 0.00%) 568.38
tcpdump file: 200902051400.dump.gz (533.92 MB)