Traffic Trace Info
DumpFile: 200902081400.dump
FileSize: 1102.78MB
Id: 200902081400
StartTime: Sun Feb 8 14:00:00 2009
EndTime: Sun Feb 8 14:15:00 2009
TotalTime: 900.42 seconds
TotalCapSize: 845.82MB CapLen: 96 bytes
# of packets: 16838897 (10105.64MB)
AvgRate: 94.16Mbps stddev:9.93M
IP flow (unique src/dst pair) Information
# of flows: 596698 (avg. 28.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.5% 1.2% 1.2% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 364263
Top 10 bandwidth usage (bytes/total in %):
17.9% 10.6% 8.1% 6.7% 4.5% 3.7% 3.0% 2.9% 2.4% 2.1%
# of IPv6 addresses: 1559
Top 10 bandwidth usage (bytes/total in %):
19.9% 10.8% 9.7% 9.3% 7.3% 6.4% 5.8% 5.3% 4.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902081400.pktlen.png)
detailed numbers
[ 32- 63]: 4412902
[ 64- 127]: 3597358
[ 128- 255]: 985684
[ 256- 511]: 467718
[ 512- 1023]: 452297
[ 1024- 2047]: 6922938
Protocol Breakdown
![[protocol breakdown chart]](200902081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16838897 (100.00%) 10596535579 (100.00%) 629.29
ip 16809961 ( 99.83%) 10591293985 ( 99.95%) 630.06
tcp 9785987 ( 58.12%) 7093745287 ( 66.94%) 724.89
http(s) 3820462 ( 22.69%) 5127963479 ( 48.39%) 1342.24
http(c) 2528397 ( 15.02%) 267129443 ( 2.52%) 105.65
squid 599650 ( 3.56%) 318834388 ( 3.01%) 531.70
smtp 326106 ( 1.94%) 59510679 ( 0.56%) 182.49
ftp 112467 ( 0.67%) 82419107 ( 0.78%) 732.83
pop3 6895 ( 0.04%) 3096634 ( 0.03%) 449.11
imap 10214 ( 0.06%) 10531250 ( 0.10%) 1031.06
telnet 1893 ( 0.01%) 142445 ( 0.00%) 75.25
ssh 95341 ( 0.57%) 13483117 ( 0.13%) 141.42
dns 1618 ( 0.01%) 242593 ( 0.00%) 149.93
bgp 151 ( 0.00%) 57225 ( 0.00%) 378.97
napster 14 ( 0.00%) 3415 ( 0.00%) 243.93
realaud 18 ( 0.00%) 1368 ( 0.00%) 76.00
rtsp 138 ( 0.00%) 44094 ( 0.00%) 319.52
icecast 6541 ( 0.04%) 445731 ( 0.00%) 68.14
other 2275868 ( 13.52%) 1209827479 ( 11.42%) 531.59
udp 6565910 ( 38.99%) 3434835669 ( 32.41%) 523.13
dns 1193721 ( 7.09%) 234772734 ( 2.22%) 196.67
realaud 10322 ( 0.06%) 10016811 ( 0.09%) 970.43
halflif 40 ( 0.00%) 4013 ( 0.00%) 100.33
starcra 56 ( 0.00%) 12703 ( 0.00%) 226.84
everque 2343 ( 0.01%) 2570362 ( 0.02%) 1097.04
unreal 62 ( 0.00%) 18634 ( 0.00%) 300.55
quake 25 ( 0.00%) 2833 ( 0.00%) 113.32
cuseeme 8 ( 0.00%) 1239 ( 0.00%) 154.88
other 5359246 ( 31.83%) 3187372025 ( 30.08%) 594.74
icmp 424325 ( 2.52%) 37933633 ( 0.36%) 89.40
ipip 320 ( 0.00%) 40528 ( 0.00%) 126.65
ipsec 100 ( 0.00%) 15800 ( 0.00%) 158.00
ip6 11218 ( 0.07%) 9309034 ( 0.09%) 829.83
other 22101 ( 0.13%) 15414034 ( 0.15%) 697.44
frag 2050 ( 0.01%) 1772582 ( 0.02%) 864.67
ip6 28936 ( 0.17%) 5241594 ( 0.05%) 181.14
tcp6 5892 ( 0.03%) 1060661 ( 0.01%) 180.02
http(s) 442 ( 0.00%) 202640 ( 0.00%) 458.46
http(c) 2627 ( 0.02%) 340561 ( 0.00%) 129.64
smtp 319 ( 0.00%) 121124 ( 0.00%) 379.70
ftp 51 ( 0.00%) 7505 ( 0.00%) 147.16
pop3 49 ( 0.00%) 5633 ( 0.00%) 114.96
ssh 422 ( 0.00%) 75316 ( 0.00%) 178.47
dns 14 ( 0.00%) 1273 ( 0.00%) 90.93
bgp 363 ( 0.00%) 30484 ( 0.00%) 83.98
other 1605 ( 0.01%) 276125 ( 0.00%) 172.04
udp6 17722 ( 0.11%) 3327535 ( 0.03%) 187.76
dns 16627 ( 0.10%) 3033743 ( 0.03%) 182.46
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 122 ( 0.00%) 122.00
other 1093 ( 0.01%) 293563 ( 0.00%) 268.58
icmp6 5080 ( 0.03%) 648090 ( 0.01%) 127.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 212 ( 0.00%) 201228 ( 0.00%) 949.19
tcpdump file: 200902081400.dump.gz (380.20 MB)