Traffic Trace Info
DumpFile: 200902131400.dump
FileSize: 1237.88MB
Id: 200902131400
StartTime: Fri Feb 13 14:00:00 2009
EndTime: Fri Feb 13 14:15:00 2009
TotalTime: 900.28 seconds
TotalCapSize: 971.26MB CapLen: 96 bytes
# of packets: 17472522 (11727.61MB)
AvgRate: 109.27Mbps stddev:11.34M
IP flow (unique src/dst pair) Information
# of flows: 602577 (avg. 29.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.2% 2.9% 2.8% 1.5% 1.2% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 347429
Top 10 bandwidth usage (bytes/total in %):
11.1% 7.8% 6.4% 5.9% 5.5% 5.4% 3.5% 3.5% 3.1% 2.8%
# of IPv6 addresses: 1110
Top 10 bandwidth usage (bytes/total in %):
95.7% 48.4% 47.2% 1.6% 1.6% 1.1% 1.1% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902131400.pktlen.png)
detailed numbers
[ 32- 63]: 3937940
[ 64- 127]: 3972232
[ 128- 255]: 937013
[ 256- 511]: 470232
[ 512- 1023]: 554171
[ 1024- 2047]: 7600934
Protocol Breakdown
![[protocol breakdown chart]](200902131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17472522 (100.00%) 12297292352 (100.00%) 703.81
ip 16853544 ( 96.46%) 11559928820 ( 94.00%) 685.90
tcp 14040666 ( 80.36%) 10794992703 ( 87.78%) 768.84
http(s) 5994819 ( 34.31%) 7775567771 ( 63.23%) 1297.05
http(c) 4061243 ( 23.24%) 428386522 ( 3.48%) 105.48
squid 441922 ( 2.53%) 238980921 ( 1.94%) 540.78
smtp 418020 ( 2.39%) 215520483 ( 1.75%) 515.57
ftp 160865 ( 0.92%) 126332308 ( 1.03%) 785.33
pop3 20514 ( 0.12%) 6585220 ( 0.05%) 321.01
imap 5362 ( 0.03%) 1600109 ( 0.01%) 298.42
telnet 4025 ( 0.02%) 504142 ( 0.00%) 125.25
ssh 13658 ( 0.08%) 2008496 ( 0.02%) 147.06
dns 1907 ( 0.01%) 163314 ( 0.00%) 85.64
bgp 139 ( 0.00%) 48601 ( 0.00%) 349.65
napster 13 ( 0.00%) 1058 ( 0.00%) 81.38
realaud 11 ( 0.00%) 814 ( 0.00%) 74.00
rtsp 139765 ( 0.80%) 72928379 ( 0.59%) 521.79
icecast 6844 ( 0.04%) 581507 ( 0.00%) 84.97
other 2771535 ( 15.86%) 1925781618 ( 15.66%) 694.84
udp 2068425 ( 11.84%) 591808776 ( 4.81%) 286.12
dns 1031840 ( 5.91%) 236222262 ( 1.92%) 228.93
realaud 767 ( 0.00%) 46685 ( 0.00%) 60.87
halflif 24 ( 0.00%) 2367 ( 0.00%) 98.62
starcra 43 ( 0.00%) 8680 ( 0.00%) 201.86
everque 127 ( 0.00%) 28760 ( 0.00%) 226.46
unreal 42 ( 0.00%) 13730 ( 0.00%) 326.90
quake 15 ( 0.00%) 1603 ( 0.00%) 106.87
cuseeme 5 ( 0.00%) 457 ( 0.00%) 91.40
other 1035449 ( 5.93%) 355431984 ( 2.89%) 343.26
icmp 508093 ( 2.91%) 47207442 ( 0.38%) 92.91
ipip 302 ( 0.00%) 35734 ( 0.00%) 118.32
ip6 88281 ( 0.51%) 94639736 ( 0.77%) 1072.03
other 147777 ( 0.85%) 31244429 ( 0.25%) 211.43
frag 3129 ( 0.02%) 2560261 ( 0.02%) 818.24
ip6 618978 ( 3.54%) 737363532 ( 6.00%) 1191.26
tcp6 597444 ( 3.42%) 734209013 ( 5.97%) 1228.92
http(s) 2952 ( 0.02%) 3213334 ( 0.03%) 1088.53
http(c) 18968 ( 0.11%) 1611576 ( 0.01%) 84.96
smtp 518 ( 0.00%) 197749 ( 0.00%) 381.75
ftp 22 ( 0.00%) 4026 ( 0.00%) 183.00
imap 284 ( 0.00%) 278902 ( 0.00%) 982.05
ssh 6189 ( 0.04%) 1844950 ( 0.02%) 298.10
dns 49 ( 0.00%) 4954 ( 0.00%) 101.10
bgp 378 ( 0.00%) 33120 ( 0.00%) 87.62
other 568084 ( 3.25%) 727020402 ( 5.91%) 1279.78
udp6 16575 ( 0.09%) 2489346 ( 0.02%) 150.19
dns 16559 ( 0.09%) 2487591 ( 0.02%) 150.23
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 103 ( 0.00%) 103.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 4923 ( 0.03%) 657114 ( 0.01%) 133.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 3979 ( 0.00%) 663.17
tcpdump file: 200902131400.dump.gz (425.91 MB)