Traffic Trace Info
DumpFile: 200902121400.dump
FileSize: 1208.66MB
Id: 200902121400
StartTime: Thu Feb 12 14:00:01 2009
EndTime: Thu Feb 12 14:15:00 2009
TotalTime: 899.85 seconds
TotalCapSize: 947.45MB CapLen: 96 bytes
# of packets: 17117717 (10751.84MB)
AvgRate: 100.23Mbps stddev:14.17M
IP flow (unique src/dst pair) Information
# of flows: 611034 (avg. 28.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 2.0% 1.4% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 355108
Top 10 bandwidth usage (bytes/total in %):
12.4% 6.7% 5.2% 4.8% 4.2% 3.7% 3.6% 3.6% 3.3% 2.7%
# of IPv6 addresses: 1119
Top 10 bandwidth usage (bytes/total in %):
63.3% 63.2% 4.0% 2.9% 2.6% 2.3% 2.3% 2.3% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902121400.pktlen.png)
detailed numbers
[ 32- 63]: 4359562
[ 64- 127]: 4170293
[ 128- 255]: 655816
[ 256- 511]: 546804
[ 512- 1023]: 487411
[ 1024- 2047]: 6897831
Protocol Breakdown
![[protocol breakdown chart]](200902121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17117717 (100.00%) 11274122737 (100.00%) 658.62
ip 16967329 ( 99.12%) 11257064927 ( 99.85%) 663.46
tcp 14353777 ( 83.85%) 10625173081 ( 94.24%) 740.24
http(s) 5670644 ( 33.13%) 7505066114 ( 66.57%) 1323.49
http(c) 4133862 ( 24.15%) 645527931 ( 5.73%) 156.16
squid 476445 ( 2.78%) 220826974 ( 1.96%) 463.49
smtp 369641 ( 2.16%) 153106099 ( 1.36%) 414.20
nntp 151 ( 0.00%) 16633 ( 0.00%) 110.15
ftp 108050 ( 0.63%) 70324559 ( 0.62%) 650.85
pop3 19406 ( 0.11%) 6321939 ( 0.06%) 325.77
imap 3938 ( 0.02%) 1000979 ( 0.01%) 254.18
telnet 10128 ( 0.06%) 915032 ( 0.01%) 90.35
ssh 87624 ( 0.51%) 53933348 ( 0.48%) 615.51
dns 6829 ( 0.04%) 5593992 ( 0.05%) 819.15
bgp 158 ( 0.00%) 51343 ( 0.00%) 324.96
napster 6 ( 0.00%) 362 ( 0.00%) 60.33
realaud 26 ( 0.00%) 2716 ( 0.00%) 104.46
rtsp 184790 ( 1.08%) 66939121 ( 0.59%) 362.24
icecast 14288 ( 0.08%) 8140109 ( 0.07%) 569.72
other 3267775 ( 19.09%) 1887404870 ( 16.74%) 577.58
udp 1766270 ( 10.32%) 479099886 ( 4.25%) 271.25
dns 1028866 ( 6.01%) 211638210 ( 1.88%) 205.70
realaud 2357 ( 0.01%) 164411 ( 0.00%) 69.75
halflif 30 ( 0.00%) 2928 ( 0.00%) 97.60
starcra 24 ( 0.00%) 3877 ( 0.00%) 161.54
everque 7225 ( 0.04%) 7845380 ( 0.07%) 1085.87
unreal 62 ( 0.00%) 20576 ( 0.00%) 331.87
quake 15 ( 0.00%) 1621 ( 0.00%) 108.07
cuseeme 4 ( 0.00%) 662 ( 0.00%) 165.50
other 727610 ( 4.25%) 259367123 ( 2.30%) 356.46
icmp 664171 ( 3.88%) 55436689 ( 0.49%) 83.47
ipip 299 ( 0.00%) 37032 ( 0.00%) 123.85
ipsec 6 ( 0.00%) 708 ( 0.00%) 118.00
ip6 75643 ( 0.44%) 71190409 ( 0.63%) 941.14
other 107163 ( 0.63%) 26127122 ( 0.23%) 243.81
frag 2135 ( 0.01%) 1804396 ( 0.02%) 845.15
ip6 150388 ( 0.88%) 17057810 ( 0.15%) 113.43
tcp6 127795 ( 0.75%) 13524069 ( 0.12%) 105.83
http(s) 936 ( 0.01%) 1042429 ( 0.01%) 1113.71
http(c) 2330 ( 0.01%) 279550 ( 0.00%) 119.98
smtp 1059 ( 0.01%) 421211 ( 0.00%) 397.74
ftp 2303 ( 0.01%) 236602 ( 0.00%) 102.74
ssh 1208 ( 0.01%) 396664 ( 0.00%) 328.36
dns 29 ( 0.00%) 2668 ( 0.00%) 92.00
bgp 393 ( 0.00%) 35304 ( 0.00%) 89.83
other 119537 ( 0.70%) 11109641 ( 0.10%) 92.94
udp6 17049 ( 0.10%) 2797989 ( 0.02%) 164.11
dns 17026 ( 0.10%) 2795459 ( 0.02%) 164.19
other 23 ( 0.00%) 2530 ( 0.00%) 110.00
icmp6 5511 ( 0.03%) 729281 ( 0.01%) 132.33
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 2255 ( 0.00%) 1127.50
tcpdump file: 200902121400.dump.gz (423.31 MB)