Traffic Trace Info
DumpFile: 200902151400.dump
FileSize: 949.97MB
Id: 200902151400
StartTime: Sun Feb 15 14:00:01 2009
EndTime: Sun Feb 15 14:15:00 2009
TotalTime: 899.91 seconds
TotalCapSize: 741.34MB CapLen: 96 bytes
# of packets: 13672375 (8871.25MB)
AvgRate: 82.69Mbps stddev:11.67M
IP flow (unique src/dst pair) Information
# of flows: 494226 (avg. 27.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 3.9% 2.1% 1.9% 1.9% 1.8% 1.2% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 289772
Top 10 bandwidth usage (bytes/total in %):
13.7% 8.5% 7.7% 7.5% 6.4% 4.2% 3.9% 3.3% 2.6% 2.4%
# of IPv6 addresses: 999
Top 10 bandwidth usage (bytes/total in %):
93.3% 49.7% 43.6% 3.7% 2.2% 1.9% 1.8% 1.4% 0.7% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902151400.pktlen.png)
detailed numbers
[ 32- 63]: 3306338
[ 64- 127]: 3168230
[ 128- 255]: 552466
[ 256- 511]: 418332
[ 512- 1023]: 396161
[ 1024- 2047]: 5830848
Protocol Breakdown
![[protocol breakdown chart]](200902151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13672375 (100.00%) 9302178522 (100.00%) 680.36
ip 13214099 ( 96.65%) 8914313648 ( 95.83%) 674.61
tcp 10209684 ( 74.67%) 7830627524 ( 84.18%) 766.98
http(s) 3822112 ( 27.95%) 5118178241 ( 55.02%) 1339.10
http(c) 2221989 ( 16.25%) 241657442 ( 2.60%) 108.76
squid 387644 ( 2.84%) 172396787 ( 1.85%) 444.73
smtp 253497 ( 1.85%) 39544601 ( 0.43%) 156.00
ftp 80788 ( 0.59%) 27074996 ( 0.29%) 335.14
pop3 7822 ( 0.06%) 3091123 ( 0.03%) 395.18
imap 2363 ( 0.02%) 933017 ( 0.01%) 394.84
telnet 732 ( 0.01%) 88847 ( 0.00%) 121.38
ssh 13042 ( 0.10%) 7246634 ( 0.08%) 555.64
dns 1203 ( 0.01%) 132282 ( 0.00%) 109.96
bgp 144 ( 0.00%) 46943 ( 0.00%) 325.99
napster 10 ( 0.00%) 604 ( 0.00%) 60.40
realaud 57 ( 0.00%) 4628 ( 0.00%) 81.19
rtsp 40104 ( 0.29%) 30802405 ( 0.33%) 768.06
icecast 358 ( 0.00%) 27347 ( 0.00%) 76.39
other 3377819 ( 24.71%) 2189401627 ( 23.54%) 648.17
udp 2489053 ( 18.20%) 1027315975 ( 11.04%) 412.73
dns 1034063 ( 7.56%) 224876842 ( 2.42%) 217.47
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1242 ( 0.01%) 77608 ( 0.00%) 62.49
halflif 32 ( 0.00%) 3102 ( 0.00%) 96.94
starcra 50 ( 0.00%) 8425 ( 0.00%) 168.50
everque 66 ( 0.00%) 12200 ( 0.00%) 184.85
unreal 37 ( 0.00%) 7969 ( 0.00%) 215.38
quake 9 ( 0.00%) 769 ( 0.00%) 85.44
cuseeme 5 ( 0.00%) 362 ( 0.00%) 72.40
other 1453476 ( 10.63%) 802277568 ( 8.62%) 551.97
icmp 474817 ( 3.47%) 43593530 ( 0.47%) 91.81
ipip 332 ( 0.00%) 43088 ( 0.00%) 129.78
ip6 20255 ( 0.15%) 3200672 ( 0.03%) 158.02
other 19958 ( 0.15%) 9532859 ( 0.10%) 477.65
frag 3487 ( 0.03%) 2869942 ( 0.03%) 823.04
ip6 458276 ( 3.35%) 387864874 ( 4.17%) 846.36
tcp6 442233 ( 3.23%) 385656835 ( 4.15%) 872.07
http(s) 10975 ( 0.08%) 6615399 ( 0.07%) 602.77
http(c) 108444 ( 0.79%) 9878563 ( 0.11%) 91.09
smtp 133 ( 0.00%) 48055 ( 0.00%) 361.32
ftp 22 ( 0.00%) 1863 ( 0.00%) 84.68
pop3 77 ( 0.00%) 7867 ( 0.00%) 102.17
ssh 17 ( 0.00%) 2246 ( 0.00%) 132.12
dns 43 ( 0.00%) 3779 ( 0.00%) 87.88
bgp 381 ( 0.00%) 36537 ( 0.00%) 95.90
other 322141 ( 2.36%) 369062526 ( 3.97%) 1145.66
udp6 11385 ( 0.08%) 1583119 ( 0.02%) 139.05
dns 11316 ( 0.08%) 1575516 ( 0.02%) 139.23
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 116 ( 0.00%) 116.00
other 65 ( 0.00%) 7150 ( 0.00%) 110.00
icmp6 4627 ( 0.03%) 620626 ( 0.01%) 134.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 214 ( 0.00%) 214.00
tcpdump file: 200902151400.dump.gz (330.03 MB)