Traffic Trace Info
DumpFile: 200902141400.dump
FileSize: 1191.66MB
Id: 200902141400
StartTime: Sat Feb 14 14:00:00 2009
EndTime: Sat Feb 14 14:15:00 2009
TotalTime: 899.99 seconds
TotalCapSize: 934.98MB CapLen: 96 bytes
# of packets: 16821630 (11048.52MB)
AvgRate: 102.97Mbps stddev:11.31M
IP flow (unique src/dst pair) Information
# of flows: 516500 (avg. 32.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 4.5% 2.1% 2.1% 1.8% 1.6% 1.5% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 299450
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.9% 6.3% 6.3% 3.9% 3.9% 3.3% 2.9% 2.8% 2.4%
# of IPv6 addresses: 1024
Top 10 bandwidth usage (bytes/total in %):
99.1% 60.6% 38.5% 0.5% 0.5% 0.1% 0.1% 0.1% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902141400.pktlen.png)
detailed numbers
[ 32- 63]: 3615483
[ 64- 127]: 4392524
[ 128- 255]: 698316
[ 256- 511]: 506355
[ 512- 1023]: 551079
[ 1024- 2047]: 7057873
Protocol Breakdown
![[protocol breakdown chart]](200902141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16821630 (100.00%) 11585214301 (100.00%) 688.71
ip 15806238 ( 93.96%) 10220417669 ( 88.22%) 646.61
tcp 11970320 ( 71.16%) 8654279099 ( 74.70%) 722.98
http(s) 4594646 ( 27.31%) 6242091949 ( 53.88%) 1358.56
http(c) 3427772 ( 20.38%) 328854969 ( 2.84%) 95.94
squid 541199 ( 3.22%) 305695614 ( 2.64%) 564.85
smtp 262689 ( 1.56%) 57498697 ( 0.50%) 218.89
ftp 104170 ( 0.62%) 71958368 ( 0.62%) 690.78
pop3 14199 ( 0.08%) 6978119 ( 0.06%) 491.45
imap 2556 ( 0.02%) 1159095 ( 0.01%) 453.48
telnet 1360 ( 0.01%) 138621 ( 0.00%) 101.93
ssh 205015 ( 1.22%) 41657965 ( 0.36%) 203.19
dns 1437 ( 0.01%) 143545 ( 0.00%) 99.89
bgp 135 ( 0.00%) 46209 ( 0.00%) 342.29
napster 50 ( 0.00%) 4678 ( 0.00%) 93.56
realaud 34 ( 0.00%) 2294 ( 0.00%) 67.47
rtsp 72210 ( 0.43%) 86541542 ( 0.75%) 1198.47
icecast 913 ( 0.01%) 115201 ( 0.00%) 126.18
other 2741932 ( 16.30%) 1511392053 ( 13.05%) 551.21
udp 3194869 ( 18.99%) 1325051295 ( 11.44%) 414.74
dns 1488203 ( 8.85%) 286614554 ( 2.47%) 192.59
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 29596 ( 0.18%) 16121922 ( 0.14%) 544.73
halflif 55 ( 0.00%) 6587 ( 0.00%) 119.76
starcra 36 ( 0.00%) 6680 ( 0.00%) 185.56
everque 65 ( 0.00%) 12905 ( 0.00%) 198.54
unreal 52 ( 0.00%) 13987 ( 0.00%) 268.98
quake 20 ( 0.00%) 1588 ( 0.00%) 79.40
cuseeme 6 ( 0.00%) 837 ( 0.00%) 139.50
other 1676317 ( 9.97%) 1022204592 ( 8.82%) 609.79
icmp 404427 ( 2.40%) 38388096 ( 0.33%) 94.92
ipip 333 ( 0.00%) 42140 ( 0.00%) 126.55
ip6 145418 ( 0.86%) 187623984 ( 1.62%) 1290.24
other 90871 ( 0.54%) 15033055 ( 0.13%) 165.43
frag 7257 ( 0.04%) 5519556 ( 0.05%) 760.58
ip6 1015392 ( 6.04%) 1364796632 ( 11.78%) 1344.11
tcp6 996307 ( 5.92%) 1362057019 ( 11.76%) 1367.11
http(s) 987 ( 0.01%) 683036 ( 0.01%) 692.03
http(c) 3003 ( 0.02%) 382937 ( 0.00%) 127.52
smtp 290 ( 0.00%) 125591 ( 0.00%) 433.07
ftp 191 ( 0.00%) 35264 ( 0.00%) 184.63
pop3 50 ( 0.00%) 5744 ( 0.00%) 114.88
ssh 3264 ( 0.02%) 355076 ( 0.00%) 108.79
dns 18 ( 0.00%) 1572 ( 0.00%) 87.33
bgp 389 ( 0.00%) 35578 ( 0.00%) 91.46
other 988115 ( 5.87%) 1360432221 ( 11.74%) 1376.80
udp6 14094 ( 0.08%) 2066197 ( 0.02%) 146.60
dns 14073 ( 0.08%) 2063889 ( 0.02%) 146.66
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 4952 ( 0.03%) 661008 ( 0.01%) 133.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 8328 ( 0.00%) 925.33
tcpdump file: 200902141400.dump.gz (408.62 MB)