Traffic Trace Info
DumpFile: 200902181400.dump
FileSize: 1237.30MB
Id: 200902181400
StartTime: Wed Feb 18 14:00:01 2009
EndTime: Wed Feb 18 14:15:01 2009
TotalTime: 900.05 seconds
TotalCapSize: 969.39MB CapLen: 96 bytes
# of packets: 17557200 (11423.08MB)
AvgRate: 106.46Mbps stddev:17.01M
IP flow (unique src/dst pair) Information
# of flows: 641882 (avg. 27.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.6% 1.6% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 384687
Top 10 bandwidth usage (bytes/total in %):
10.7% 6.2% 6.1% 5.8% 4.5% 3.9% 2.8% 2.0% 2.0% 2.0%
# of IPv6 addresses: 1215
Top 10 bandwidth usage (bytes/total in %):
91.3% 90.2% 4.0% 3.9% 2.5% 1.6% 1.1% 0.6% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902181400.pktlen.png)
detailed numbers
[ 32- 63]: 4279078
[ 64- 127]: 4015433
[ 128- 255]: 766348
[ 256- 511]: 574960
[ 512- 1023]: 591464
[ 1024- 2047]: 7329917
Protocol Breakdown
![[protocol breakdown chart]](200902181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17557200 (100.00%) 11977965122 (100.00%) 682.23
ip 17274579 ( 98.39%) 11773506354 ( 98.29%) 681.55
tcp 13788013 ( 78.53%) 10587889904 ( 88.39%) 767.91
http(s) 5319194 ( 30.30%) 7112167080 ( 59.38%) 1337.08
http(c) 3448982 ( 19.64%) 372384647 ( 3.11%) 107.97
squid 798096 ( 4.55%) 507737355 ( 4.24%) 636.19
smtp 304894 ( 1.74%) 103835853 ( 0.87%) 340.56
ftp 224528 ( 1.28%) 215459194 ( 1.80%) 959.61
pop3 15985 ( 0.09%) 5298535 ( 0.04%) 331.47
imap 8723 ( 0.05%) 1132961 ( 0.01%) 129.88
telnet 5771 ( 0.03%) 685564 ( 0.01%) 118.79
ssh 38744 ( 0.22%) 16004591 ( 0.13%) 413.09
dns 7715 ( 0.04%) 4541946 ( 0.04%) 588.72
bgp 155 ( 0.00%) 66528 ( 0.00%) 429.21
napster 11 ( 0.00%) 1101 ( 0.00%) 100.09
realaud 53 ( 0.00%) 12649 ( 0.00%) 238.66
rtsp 146639 ( 0.84%) 118827755 ( 0.99%) 810.34
icecast 97418 ( 0.55%) 91040557 ( 0.76%) 934.54
other 3371088 ( 19.20%) 2038692568 ( 17.02%) 604.76
udp 2791046 ( 15.90%) 1107389479 ( 9.25%) 396.77
dns 1285748 ( 7.32%) 287499728 ( 2.40%) 223.61
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1005 ( 0.01%) 61721 ( 0.00%) 61.41
halflif 33 ( 0.00%) 4041 ( 0.00%) 122.45
starcra 37 ( 0.00%) 6049 ( 0.00%) 163.49
everque 70 ( 0.00%) 11922 ( 0.00%) 170.31
unreal 49 ( 0.00%) 12578 ( 0.00%) 256.69
quake 16 ( 0.00%) 1388 ( 0.00%) 86.75
cuseeme 8 ( 0.00%) 701 ( 0.00%) 87.62
other 1503841 ( 8.57%) 819770486 ( 6.84%) 545.12
icmp 626763 ( 3.57%) 56089859 ( 0.47%) 89.49
ipip 335 ( 0.00%) 39326 ( 0.00%) 117.39
ip6 34249 ( 0.20%) 16059177 ( 0.13%) 468.89
other 34173 ( 0.19%) 6038609 ( 0.05%) 176.71
frag 35132 ( 0.20%) 27741779 ( 0.23%) 789.64
ip6 282621 ( 1.61%) 204458768 ( 1.71%) 723.44
tcp6 260422 ( 1.48%) 201228621 ( 1.68%) 772.70
http(s) 6025 ( 0.03%) 3831723 ( 0.03%) 635.97
http(c) 40732 ( 0.23%) 4585148 ( 0.04%) 112.57
smtp 405 ( 0.00%) 143317 ( 0.00%) 353.87
ftp 87 ( 0.00%) 7883 ( 0.00%) 90.61
ssh 44 ( 0.00%) 16104 ( 0.00%) 366.00
dns 10 ( 0.00%) 1084 ( 0.00%) 108.40
bgp 396 ( 0.00%) 35216 ( 0.00%) 88.93
other 212723 ( 1.21%) 192608146 ( 1.61%) 905.44
udp6 16310 ( 0.09%) 2428404 ( 0.02%) 148.89
dns 16130 ( 0.09%) 2405076 ( 0.02%) 149.11
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 177 ( 0.00%) 23007 ( 0.00%) 129.98
icmp6 5852 ( 0.03%) 791636 ( 0.01%) 135.28
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5891 ( 0.00%) 981.83
tcpdump file: 200902181400.dump.gz (438.71 MB)