Traffic Trace Info
DumpFile: 200902161400.dump
FileSize: 1358.74MB
Id: 200902161400
StartTime: Mon Feb 16 14:00:01 2009
EndTime: Mon Feb 16 14:15:01 2009
TotalTime: 900.26 seconds
TotalCapSize: 1059.94MB CapLen: 96 bytes
# of packets: 19581603 (14270.19MB)
AvgRate: 132.97Mbps stddev:15.94M
IP flow (unique src/dst pair) Information
# of flows: 549932 (avg. 35.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 3.7% 2.9% 2.3% 2.3% 2.2% 2.2% 1.7% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 313154
Top 10 bandwidth usage (bytes/total in %):
13.1% 7.7% 6.5% 5.0% 4.5% 4.4% 4.0% 4.0% 3.4% 3.4%
# of IPv6 addresses: 1624
Top 10 bandwidth usage (bytes/total in %):
96.4% 48.3% 48.0% 1.1% 1.1% 1.0% 1.0% 0.7% 0.5% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902161400.pktlen.png)
detailed numbers
[ 32- 63]: 4159248
[ 64- 127]: 4212189
[ 128- 255]: 766199
[ 256- 511]: 457917
[ 512- 1023]: 637176
[ 1024- 2047]: 9348874
Protocol Breakdown
![[protocol breakdown chart]](200902161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19581603 (100.00%) 14963383170 (100.00%) 764.16
ip 18984517 ( 96.95%) 14237179290 ( 95.15%) 749.94
tcp 14872355 ( 75.95%) 12504178267 ( 83.57%) 840.77
http(s) 7144294 ( 36.48%) 9720889527 ( 64.96%) 1360.65
http(c) 4226159 ( 21.58%) 385919429 ( 2.58%) 91.32
squid 408449 ( 2.09%) 222255271 ( 1.49%) 544.14
smtp 236611 ( 1.21%) 54482363 ( 0.36%) 230.26
nntp 24 ( 0.00%) 2953 ( 0.00%) 123.04
ftp 52336 ( 0.27%) 4861219 ( 0.03%) 92.88
pop3 18555 ( 0.09%) 6332766 ( 0.04%) 341.30
imap 5235 ( 0.03%) 544325 ( 0.00%) 103.98
telnet 643 ( 0.00%) 53488 ( 0.00%) 83.19
ssh 62880 ( 0.32%) 69408631 ( 0.46%) 1103.83
dns 1440 ( 0.01%) 136520 ( 0.00%) 94.81
bgp 151 ( 0.00%) 46452 ( 0.00%) 307.63
napster 11 ( 0.00%) 938 ( 0.00%) 85.27
realaud 7 ( 0.00%) 923 ( 0.00%) 131.86
rtsp 119023 ( 0.61%) 159321032 ( 1.06%) 1338.57
icecast 27305 ( 0.14%) 30580148 ( 0.20%) 1119.95
other 2569227 ( 13.12%) 1849341982 ( 12.36%) 719.80
udp 3600004 ( 18.38%) 1671483291 ( 11.17%) 464.30
dns 1332904 ( 6.81%) 342645339 ( 2.29%) 257.07
realaud 4248 ( 0.02%) 262159 ( 0.00%) 61.71
halflif 20 ( 0.00%) 1742 ( 0.00%) 87.10
starcra 52 ( 0.00%) 9285 ( 0.00%) 178.56
everque 72 ( 0.00%) 12987 ( 0.00%) 180.38
unreal 31 ( 0.00%) 8440 ( 0.00%) 272.26
quake 21 ( 0.00%) 2401 ( 0.00%) 114.33
cuseeme 5 ( 0.00%) 814 ( 0.00%) 162.80
other 2261583 ( 11.55%) 1328224274 ( 8.88%) 587.30
icmp 420742 ( 2.15%) 39510771 ( 0.26%) 93.91
ipip 351 ( 0.00%) 42690 ( 0.00%) 121.62
ip6 7054 ( 0.04%) 5077370 ( 0.03%) 719.79
other 84011 ( 0.43%) 16886901 ( 0.11%) 201.01
frag 71859 ( 0.37%) 82422089 ( 0.55%) 1147.00
ip6 597086 ( 3.05%) 726203880 ( 4.85%) 1216.25
tcp6 573335 ( 2.93%) 722128499 ( 4.83%) 1259.52
http(s) 12054 ( 0.06%) 12344299 ( 0.08%) 1024.08
http(c) 7654 ( 0.04%) 1712477 ( 0.01%) 223.74
smtp 483 ( 0.00%) 141487 ( 0.00%) 292.93
ftp 79 ( 0.00%) 7268 ( 0.00%) 92.00
imap 450 ( 0.00%) 348853 ( 0.00%) 775.23
ssh 80 ( 0.00%) 16728 ( 0.00%) 209.10
dns 12 ( 0.00%) 1044 ( 0.00%) 87.00
bgp 377 ( 0.00%) 32402 ( 0.00%) 85.95
other 552146 ( 2.82%) 707523941 ( 4.73%) 1281.41
udp6 18560 ( 0.09%) 2900624 ( 0.02%) 156.28
dns 17828 ( 0.09%) 2765634 ( 0.02%) 155.13
everque 5 ( 0.00%) 746 ( 0.00%) 149.20
other 727 ( 0.00%) 134244 ( 0.00%) 184.65
icmp6 4568 ( 0.02%) 608981 ( 0.00%) 133.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 593 ( 0.00%) 561696 ( 0.00%) 947.21
tcpdump file: 200902161400.dump.gz (459.80 MB)