Traffic Trace Info
DumpFile: 200902171400.dump
FileSize: 1633.09MB
Id: 200902171400
StartTime: Tue Feb 17 14:00:00 2009
EndTime: Tue Feb 17 14:15:00 2009
TotalTime: 899.95 seconds
TotalCapSize: 1288.78MB CapLen: 96 bytes
# of packets: 22563966 (18270.33MB)
AvgRate: 170.30Mbps stddev:14.90M
IP flow (unique src/dst pair) Information
# of flows: 625870 (avg. 36.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
38.5% 2.6% 1.7% 1.3% 1.1% 1.0% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 359865
Top 10 bandwidth usage (bytes/total in %):
38.6% 38.6% 4.6% 4.4% 3.4% 2.8% 2.6% 2.6% 2.2% 2.1%
# of IPv6 addresses: 1207
Top 10 bandwidth usage (bytes/total in %):
34.8% 27.1% 26.7% 17.8% 17.7% 10.8% 10.3% 7.2% 4.2% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902171400.pktlen.png)
detailed numbers
[ 32- 63]: 3891324
[ 64- 127]: 4430392
[ 128- 255]: 854152
[ 256- 511]: 601397
[ 512- 1023]: 577322
[ 1024- 2047]: 12209379
Protocol Breakdown
![[protocol breakdown chart]](200902171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22563966 (100.00%) 19157826158 (100.00%) 849.05
ip 22396470 ( 99.26%) 19111454407 ( 99.76%) 853.32
tcp 19386648 ( 85.92%) 18156186323 ( 94.77%) 936.53
http(s) 6143807 ( 27.23%) 8246286152 ( 43.04%) 1342.21
http(c) 3999687 ( 17.73%) 386207656 ( 2.02%) 96.56
squid 520467 ( 2.31%) 302788381 ( 1.58%) 581.76
smtp 365761 ( 1.62%) 148354101 ( 0.77%) 405.60
nntp 63 ( 0.00%) 6919 ( 0.00%) 109.83
ftp 194523 ( 0.86%) 148531403 ( 0.78%) 763.57
pop3 21253 ( 0.09%) 12803726 ( 0.07%) 602.44
imap 6802 ( 0.03%) 5349989 ( 0.03%) 786.53
telnet 7488 ( 0.03%) 684864 ( 0.00%) 91.46
ssh 58739 ( 0.26%) 29865176 ( 0.16%) 508.44
dns 2200 ( 0.01%) 181135 ( 0.00%) 82.33
bgp 144 ( 0.00%) 54895 ( 0.00%) 381.22
napster 217 ( 0.00%) 15267 ( 0.00%) 70.35
realaud 14 ( 0.00%) 1024 ( 0.00%) 73.14
rtsp 24040 ( 0.11%) 12551124 ( 0.07%) 522.09
icecast 15596 ( 0.07%) 22429438 ( 0.12%) 1438.15
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 8025838 ( 35.57%) 8840074519 ( 46.14%) 1101.45
udp 2412535 ( 10.69%) 823283611 ( 4.30%) 341.25
dns 1163874 ( 5.16%) 261826482 ( 1.37%) 224.96
realaud 20469 ( 0.09%) 8310521 ( 0.04%) 406.01
halflif 20 ( 0.00%) 1772 ( 0.00%) 88.60
starcra 42 ( 0.00%) 7313 ( 0.00%) 174.12
everque 53 ( 0.00%) 10309 ( 0.00%) 194.51
unreal 34 ( 0.00%) 10655 ( 0.00%) 313.38
quake 35 ( 0.00%) 3160 ( 0.00%) 90.29
cuseeme 285 ( 0.00%) 17298 ( 0.00%) 60.69
other 1227615 ( 5.44%) 553059653 ( 2.89%) 450.52
icmp 468439 ( 2.08%) 44068318 ( 0.23%) 94.07
ipip 343 ( 0.00%) 43326 ( 0.00%) 126.31
ip6 72649 ( 0.32%) 75250510 ( 0.39%) 1035.81
other 55856 ( 0.25%) 12622319 ( 0.07%) 225.98
frag 6672 ( 0.03%) 5323636 ( 0.03%) 797.91
ip6 167496 ( 0.74%) 46371751 ( 0.24%) 276.85
tcp6 144876 ( 0.64%) 43022631 ( 0.22%) 296.96
http(s) 28243 ( 0.13%) 16745316 ( 0.09%) 592.90
http(c) 7055 ( 0.03%) 1565652 ( 0.01%) 221.92
smtp 521 ( 0.00%) 203247 ( 0.00%) 390.11
ftp 81 ( 0.00%) 7407 ( 0.00%) 91.44
ssh 71 ( 0.00%) 14694 ( 0.00%) 206.96
bgp 383 ( 0.00%) 33040 ( 0.00%) 86.27
other 108522 ( 0.48%) 24453275 ( 0.13%) 225.33
udp6 17140 ( 0.08%) 2596688 ( 0.01%) 151.50
dns 17095 ( 0.08%) 2592163 ( 0.01%) 151.63
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 219 ( 0.00%) 109.50
other 42 ( 0.00%) 4200 ( 0.00%) 100.00
icmp6 5351 ( 0.02%) 742336 ( 0.00%) 138.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 98 ( 0.00%) 5880 ( 0.00%) 60.00
tcpdump file: 200902171400.dump.gz (535.08 MB)