Traffic Trace Info
DumpFile: 200902211400.dump
FileSize: 1148.37MB
Id: 200902211400
StartTime: Sat Feb 21 14:00:00 2009
EndTime: Sat Feb 21 14:15:01 2009
TotalTime: 900.08 seconds
TotalCapSize: 898.81MB CapLen: 96 bytes
# of packets: 16354527 (11253.44MB)
AvgRate: 104.88Mbps stddev:11.60M
IP flow (unique src/dst pair) Information
# of flows: 648206 (avg. 25.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.1% 2.8% 2.8% 2.3% 1.6% 1.4% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 338533
Top 10 bandwidth usage (bytes/total in %):
10.4% 7.9% 6.0% 5.7% 4.2% 3.6% 3.6% 3.6% 3.2% 2.8%
# of IPv6 addresses: 1023
Top 10 bandwidth usage (bytes/total in %):
98.6% 44.6% 29.4% 24.6% 0.9% 0.9% 0.3% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902211400.pktlen.png)
detailed numbers
[ 32- 63]: 3612130
[ 64- 127]: 3616690
[ 128- 255]: 731984
[ 256- 511]: 449749
[ 512- 1023]: 469351
[ 1024- 2047]: 7474623
Protocol Breakdown
![[protocol breakdown chart]](200902211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16354527 (100.00%) 11800084969 (100.00%) 721.52
ip 15464392 ( 94.56%) 10676135841 ( 90.48%) 690.37
tcp 11742521 ( 71.80%) 9208352321 ( 78.04%) 784.19
http(s) 5121260 ( 31.31%) 6963981471 ( 59.02%) 1359.82
http(c) 2960295 ( 18.10%) 272627751 ( 2.31%) 92.09
squid 738181 ( 4.51%) 401833941 ( 3.41%) 544.36
smtp 184230 ( 1.13%) 30715790 ( 0.26%) 166.73
ftp 44805 ( 0.27%) 8530131 ( 0.07%) 190.38
pop3 14453 ( 0.09%) 8498305 ( 0.07%) 588.00
imap 3292 ( 0.02%) 985571 ( 0.01%) 299.38
telnet 3555 ( 0.02%) 284229 ( 0.00%) 79.95
ssh 150378 ( 0.92%) 17601980 ( 0.15%) 117.05
dns 1497 ( 0.01%) 127956 ( 0.00%) 85.47
bgp 170 ( 0.00%) 74502 ( 0.00%) 438.25
napster 18 ( 0.00%) 1535 ( 0.00%) 85.28
realaud 16 ( 0.00%) 1529 ( 0.00%) 95.56
rtsp 135009 ( 0.83%) 188551602 ( 1.60%) 1396.59
icecast 60454 ( 0.37%) 61182583 ( 0.52%) 1012.05
hotline 15 ( 0.00%) 1844 ( 0.00%) 122.93
other 2324892 ( 14.22%) 1253351541 ( 10.62%) 539.10
udp 3246909 ( 19.85%) 1420760222 ( 12.04%) 437.57
dns 1316098 ( 8.05%) 248350565 ( 2.10%) 188.70
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 38 ( 0.00%) 4533 ( 0.00%) 119.29
halflif 39 ( 0.00%) 3389 ( 0.00%) 86.90
starcra 28 ( 0.00%) 4252 ( 0.00%) 151.86
everque 78 ( 0.00%) 13130 ( 0.00%) 168.33
unreal 43 ( 0.00%) 12699 ( 0.00%) 295.33
quake 15 ( 0.00%) 1349 ( 0.00%) 89.93
cuseeme 6 ( 0.00%) 517 ( 0.00%) 86.17
other 1930423 ( 11.80%) 1172270694 ( 9.93%) 607.26
icmp 453210 ( 2.77%) 43622396 ( 0.37%) 96.25
ipip 304 ( 0.00%) 37744 ( 0.00%) 124.16
ip6 13226 ( 0.08%) 1930343 ( 0.02%) 145.95
other 8222 ( 0.05%) 1432815 ( 0.01%) 174.27
frag 2659 ( 0.02%) 2408221 ( 0.02%) 905.69
ip6 890135 ( 5.44%) 1123949128 ( 9.52%) 1262.67
tcp6 869840 ( 5.32%) 1121019829 ( 9.50%) 1288.77
http(s) 3430 ( 0.02%) 1987177 ( 0.02%) 579.35
http(c) 5445 ( 0.03%) 1118002 ( 0.01%) 205.33
smtp 381 ( 0.00%) 109878 ( 0.00%) 288.39
pop3 76 ( 0.00%) 8149 ( 0.00%) 107.22
ssh 21 ( 0.00%) 2942 ( 0.00%) 140.10
dns 18 ( 0.00%) 6038 ( 0.00%) 335.44
bgp 374 ( 0.00%) 31990 ( 0.00%) 85.53
other 860095 ( 5.26%) 1117755653 ( 9.47%) 1299.57
udp6 13892 ( 0.08%) 2052697 ( 0.02%) 147.76
dns 13822 ( 0.08%) 2044956 ( 0.02%) 147.95
other 70 ( 0.00%) 7741 ( 0.00%) 110.59
icmp6 6366 ( 0.04%) 866021 ( 0.01%) 136.04
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 6365 ( 0.00%) 1060.83
tcpdump file: 200902211400.dump.gz (382.85 MB)