Traffic Trace Info
DumpFile: 200902111400.dump
FileSize: 1227.80MB
Id: 200902111400
StartTime: Wed Feb 11 14:00:00 2009
EndTime: Wed Feb 11 14:15:00 2009
TotalTime: 899.68 seconds
TotalCapSize: 961.77MB CapLen: 96 bytes
# of packets: 17434301 (11777.45MB)
AvgRate: 109.81Mbps stddev:10.87M
IP flow (unique src/dst pair) Information
# of flows: 527093 (avg. 33.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.4% 3.4% 3.1% 2.3% 1.7% 1.5% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 310604
Top 10 bandwidth usage (bytes/total in %):
16.0% 11.2% 6.6% 6.2% 6.2% 4.7% 4.5% 3.5% 3.3% 3.2%
# of IPv6 addresses: 1068
Top 10 bandwidth usage (bytes/total in %):
43.1% 43.0% 18.8% 7.8% 7.3% 6.9% 5.8% 3.9% 3.8% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902111400.pktlen.png)
detailed numbers
[ 32- 63]: 3592594
[ 64- 127]: 4379002
[ 128- 255]: 711633
[ 256- 511]: 484756
[ 512- 1023]: 455616
[ 1024- 2047]: 7810700
Protocol Breakdown
![[protocol breakdown chart]](200902111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17434301 (100.00%) 12349546804 (100.00%) 708.35
ip 17319320 ( 99.34%) 12332654796 ( 99.86%) 712.08
tcp 13413326 ( 76.94%) 10900742836 ( 88.27%) 812.68
http(s) 5594441 ( 32.09%) 7616777038 ( 61.68%) 1361.49
http(c) 3321258 ( 19.05%) 301901935 ( 2.44%) 90.90
squid 642792 ( 3.69%) 414659029 ( 3.36%) 645.09
smtp 343652 ( 1.97%) 84814431 ( 0.69%) 246.80
ftp 158561 ( 0.91%) 183928636 ( 1.49%) 1159.99
pop3 12131 ( 0.07%) 7939261 ( 0.06%) 654.46
imap 2887 ( 0.02%) 524804 ( 0.00%) 181.78
telnet 4480 ( 0.03%) 648627 ( 0.01%) 144.78
ssh 113153 ( 0.65%) 23862855 ( 0.19%) 210.89
dns 3276 ( 0.02%) 451922 ( 0.00%) 137.95
bgp 155 ( 0.00%) 56096 ( 0.00%) 361.91
realaud 16 ( 0.00%) 2092 ( 0.00%) 130.75
rtsp 27285 ( 0.16%) 27351799 ( 0.22%) 1002.45
icecast 32140 ( 0.18%) 38260250 ( 0.31%) 1190.42
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 3157087 ( 18.11%) 2199562114 ( 17.81%) 696.71
udp 2966208 ( 17.01%) 1218278854 ( 9.86%) 410.72
dns 1303760 ( 7.48%) 303788716 ( 2.46%) 233.01
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1183 ( 0.01%) 72150 ( 0.00%) 60.99
halflif 37 ( 0.00%) 3384 ( 0.00%) 91.46
starcra 35 ( 0.00%) 6096 ( 0.00%) 174.17
everque 75 ( 0.00%) 13394 ( 0.00%) 178.59
unreal 74 ( 0.00%) 16772 ( 0.00%) 226.65
quake 20 ( 0.00%) 2180 ( 0.00%) 109.00
cuseeme 10 ( 0.00%) 1393 ( 0.00%) 139.30
other 1660890 ( 9.53%) 914301529 ( 7.40%) 550.49
icmp 801408 ( 4.60%) 65391576 ( 0.53%) 81.60
ipip 329 ( 0.00%) 41530 ( 0.00%) 126.23
ipsec 96 ( 0.00%) 15168 ( 0.00%) 158.00
ip6 130125 ( 0.75%) 147038598 ( 1.19%) 1129.98
other 7828 ( 0.04%) 1146234 ( 0.01%) 146.43
frag 37862 ( 0.22%) 35426853 ( 0.29%) 935.68
ip6 114981 ( 0.66%) 16892008 ( 0.14%) 146.91
tcp6 84114 ( 0.48%) 9098142 ( 0.07%) 108.16
http(s) 682 ( 0.00%) 424327 ( 0.00%) 622.18
http(c) 3699 ( 0.02%) 532415 ( 0.00%) 143.93
smtp 287 ( 0.00%) 87288 ( 0.00%) 304.14
ftp 54 ( 0.00%) 4947 ( 0.00%) 91.61
pop3 55 ( 0.00%) 6188 ( 0.00%) 112.51
ssh 77 ( 0.00%) 8770 ( 0.00%) 113.90
dns 18 ( 0.00%) 1572 ( 0.00%) 87.33
bgp 397 ( 0.00%) 35751 ( 0.00%) 90.05
other 78845 ( 0.45%) 7996884 ( 0.06%) 101.43
udp6 25227 ( 0.14%) 6998743 ( 0.06%) 277.43
dns 25199 ( 0.14%) 6995708 ( 0.06%) 277.62
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
halflif 2 ( 0.00%) 182 ( 0.00%) 91.00
starcra 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 23 ( 0.00%) 2530 ( 0.00%) 110.00
icmp6 5592 ( 0.03%) 770446 ( 0.01%) 137.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 20597 ( 0.00%) 1144.28
tcpdump file: 200902111400.dump.gz (421.23 MB)