Traffic Trace Info
DumpFile: 200902101400.dump
FileSize: 1138.90MB
Id: 200902101400
StartTime: Tue Feb 10 14:00:01 2009
EndTime: Tue Feb 10 14:15:00 2009
TotalTime: 899.38 seconds
TotalCapSize: 888.40MB CapLen: 96 bytes
# of packets: 16416596 (10559.21MB)
AvgRate: 98.48Mbps stddev:13.16M
IP flow (unique src/dst pair) Information
# of flows: 744792 (avg. 22.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.7% 1.5% 1.3% 1.3% 1.3% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 396620
Top 10 bandwidth usage (bytes/total in %):
13.2% 8.6% 8.5% 6.6% 3.4% 2.9% 2.3% 2.2% 2.0% 1.7%
# of IPv6 addresses: 1121
Top 10 bandwidth usage (bytes/total in %):
92.2% 47.6% 44.7% 1.0% 0.9% 0.6% 0.5% 0.5% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902101400.pktlen.png)
detailed numbers
[ 32- 63]: 4223493
[ 64- 127]: 3620811
[ 128- 255]: 783651
[ 256- 511]: 505670
[ 512- 1023]: 434529
[ 1024- 2047]: 6848442
Protocol Breakdown
![[protocol breakdown chart]](200902101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16416596 (100.00%) 11072132519 (100.00%) 674.45
ip 16326365 ( 99.45%) 11000996825 ( 99.36%) 673.82
tcp 13383594 ( 81.52%) 10183590453 ( 91.97%) 760.90
http(s) 6006772 ( 36.59%) 7922043457 ( 71.55%) 1318.85
http(c) 3854695 ( 23.48%) 386429130 ( 3.49%) 100.25
squid 339160 ( 2.07%) 170578213 ( 1.54%) 502.94
smtp 406373 ( 2.48%) 168059482 ( 1.52%) 413.56
nntp 185 ( 0.00%) 17957 ( 0.00%) 97.06
ftp 57114 ( 0.35%) 24032027 ( 0.22%) 420.77
pop3 26849 ( 0.16%) 13415305 ( 0.12%) 499.66
imap 3769 ( 0.02%) 939255 ( 0.01%) 249.21
telnet 5224 ( 0.03%) 966941 ( 0.01%) 185.10
ssh 10979 ( 0.07%) 3377794 ( 0.03%) 307.66
dns 20272 ( 0.12%) 20362302 ( 0.18%) 1004.45
bgp 166 ( 0.00%) 66642 ( 0.00%) 401.46
realaud 17 ( 0.00%) 1292 ( 0.00%) 76.00
rtsp 68346 ( 0.42%) 42719797 ( 0.39%) 625.05
icecast 11053 ( 0.07%) 7827862 ( 0.07%) 708.21
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2572611 ( 15.67%) 1422752457 ( 12.85%) 553.04
udp 2430175 ( 14.80%) 757799551 ( 6.84%) 311.83
dns 1236008 ( 7.53%) 280364275 ( 2.53%) 226.83
realaud 48 ( 0.00%) 9451 ( 0.00%) 196.90
halflif 43 ( 0.00%) 4752 ( 0.00%) 110.51
starcra 27 ( 0.00%) 4023 ( 0.00%) 149.00
everque 80 ( 0.00%) 14451 ( 0.00%) 180.64
unreal 62 ( 0.00%) 21513 ( 0.00%) 346.98
quake 24 ( 0.00%) 3254 ( 0.00%) 135.58
cuseeme 9 ( 0.00%) 1280 ( 0.00%) 142.22
other 1193761 ( 7.27%) 477323659 ( 4.31%) 399.85
icmp 467249 ( 2.85%) 42147507 ( 0.38%) 90.20
ipip 381 ( 0.00%) 44838 ( 0.00%) 117.69
ipsec 102 ( 0.00%) 16276 ( 0.00%) 159.57
ip6 10299 ( 0.06%) 5969492 ( 0.05%) 579.62
other 34565 ( 0.21%) 11428708 ( 0.10%) 330.64
frag 32716 ( 0.20%) 30643618 ( 0.28%) 936.66
ip6 90231 ( 0.55%) 71135694 ( 0.64%) 788.37
tcp6 65573 ( 0.40%) 67331722 ( 0.61%) 1026.82
http(s) 486 ( 0.00%) 378999 ( 0.00%) 779.83
http(c) 10483 ( 0.06%) 894168 ( 0.01%) 85.30
smtp 333 ( 0.00%) 121484 ( 0.00%) 364.82
ftp 58 ( 0.00%) 5299 ( 0.00%) 91.36
imap 30 ( 0.00%) 19849 ( 0.00%) 661.63
ssh 148 ( 0.00%) 29248 ( 0.00%) 197.62
dns 15 ( 0.00%) 1635 ( 0.00%) 109.00
bgp 383 ( 0.00%) 33218 ( 0.00%) 86.73
rtsp 52356 ( 0.32%) 65620413 ( 0.59%) 1253.35
other 1281 ( 0.01%) 227409 ( 0.00%) 177.52
udp6 19343 ( 0.12%) 3107363 ( 0.03%) 160.65
dns 19325 ( 0.12%) 3105321 ( 0.03%) 160.69
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 17 ( 0.00%) 1935 ( 0.00%) 113.82
icmp6 5270 ( 0.03%) 675547 ( 0.01%) 128.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 16982 ( 0.00%) 1132.13
tcpdump file: 200902101400.dump.gz (410.63 MB)