Traffic Trace Info
DumpFile: 200902201400.dump
FileSize: 1101.34MB
Id: 200902201400
StartTime: Fri Feb 20 14:00:00 2009
EndTime: Fri Feb 20 14:15:00 2009
TotalTime: 899.54 seconds
TotalCapSize: 863.74MB CapLen: 96 bytes
# of packets: 15571045 (9991.17MB)
AvgRate: 93.17Mbps stddev:10.37M
IP flow (unique src/dst pair) Information
# of flows: 695392 (avg. 22.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.4% 2.4% 2.0% 1.9% 1.8% 1.3% 1.3% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 377352
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.1% 7.1% 4.2% 3.1% 3.0% 2.9% 2.7% 2.6% 2.6%
# of IPv6 addresses: 1821
Top 10 bandwidth usage (bytes/total in %):
96.6% 63.7% 32.9% 1.6% 1.6% 0.7% 0.4% 0.2% 0.2% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902201400.pktlen.png)
detailed numbers
[ 32- 63]: 3924598
[ 64- 127]: 3597256
[ 128- 255]: 636059
[ 256- 511]: 560929
[ 512- 1023]: 483711
[ 1024- 2047]: 6368492
Protocol Breakdown
![[protocol breakdown chart]](200902201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15571045 (100.00%) 10476502431 (100.00%) 672.82
ip 15063873 ( 96.74%) 9910410325 ( 94.60%) 657.89
tcp 12514013 ( 80.37%) 9327955206 ( 89.04%) 745.40
http(s) 5303756 ( 34.06%) 7050306581 ( 67.30%) 1329.30
http(c) 4053593 ( 26.03%) 627218185 ( 5.99%) 154.73
squid 555504 ( 3.57%) 344197579 ( 3.29%) 619.61
smtp 350813 ( 2.25%) 152699004 ( 1.46%) 435.27
ftp 70796 ( 0.45%) 36977251 ( 0.35%) 522.31
pop3 24301 ( 0.16%) 9553326 ( 0.09%) 393.12
imap 7739 ( 0.05%) 5509872 ( 0.05%) 711.96
telnet 21809 ( 0.14%) 2586147 ( 0.02%) 118.58
ssh 26117 ( 0.17%) 6842486 ( 0.07%) 261.99
dns 3621 ( 0.02%) 2834847 ( 0.03%) 782.89
bgp 177 ( 0.00%) 69437 ( 0.00%) 392.30
napster 6 ( 0.00%) 654 ( 0.00%) 109.00
realaud 35 ( 0.00%) 22126 ( 0.00%) 632.17
rtsp 16800 ( 0.11%) 8402674 ( 0.08%) 500.16
icecast 12314 ( 0.08%) 8011941 ( 0.08%) 650.64
hotline 16 ( 0.00%) 3855 ( 0.00%) 240.94
other 2066616 ( 13.27%) 1072719241 ( 10.24%) 519.07
udp 1951656 ( 12.53%) 510789553 ( 4.88%) 261.72
dns 1247208 ( 8.01%) 276017632 ( 2.63%) 221.31
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 19829 ( 0.13%) 8369300 ( 0.08%) 422.07
halflif 1947 ( 0.01%) 181018 ( 0.00%) 92.97
starcra 56 ( 0.00%) 11322 ( 0.00%) 202.18
everque 67 ( 0.00%) 12330 ( 0.00%) 184.03
unreal 21 ( 0.00%) 4443 ( 0.00%) 211.57
quake 16 ( 0.00%) 1338 ( 0.00%) 83.62
cuseeme 13 ( 0.00%) 1061 ( 0.00%) 81.62
other 679902 ( 4.37%) 225917078 ( 2.16%) 332.28
icmp 492479 ( 3.16%) 46622628 ( 0.45%) 94.67
ipip 337 ( 0.00%) 41182 ( 0.00%) 122.20
ipsec 45 ( 0.00%) 7110 ( 0.00%) 158.00
ip6 26412 ( 0.17%) 4255524 ( 0.04%) 161.12
other 78931 ( 0.51%) 20739122 ( 0.20%) 262.75
frag 28242 ( 0.18%) 21053689 ( 0.20%) 745.47
ip6 507172 ( 3.26%) 566092106 ( 5.40%) 1116.17
tcp6 482537 ( 3.10%) 561873940 ( 5.36%) 1164.42
http(s) 5683 ( 0.04%) 4075968 ( 0.04%) 717.22
http(c) 6191 ( 0.04%) 1320256 ( 0.01%) 213.25
smtp 566 ( 0.00%) 243138 ( 0.00%) 429.57
ftp 56 ( 0.00%) 5185 ( 0.00%) 92.59
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 76 ( 0.00%) 25992 ( 0.00%) 342.00
dns 11 ( 0.00%) 1097 ( 0.00%) 99.73
bgp 394 ( 0.00%) 35913 ( 0.00%) 91.15
other 469558 ( 3.02%) 556166166 ( 5.31%) 1184.45
udp6 18290 ( 0.12%) 3139469 ( 0.03%) 171.65
dns 17165 ( 0.11%) 2787062 ( 0.03%) 162.37
halflif 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1124 ( 0.01%) 352268 ( 0.00%) 313.41
icmp6 6028 ( 0.04%) 802760 ( 0.01%) 133.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 287 ( 0.00%) 271857 ( 0.00%) 947.24
tcpdump file: 200902201400.dump.gz (385.17 MB)