Traffic Trace Info
DumpFile: 200902221400.dump
FileSize: 1152.15MB
Id: 200902221400
StartTime: Sun Feb 22 14:00:01 2009
EndTime: Sun Feb 22 14:15:00 2009
TotalTime: 899.89 seconds
TotalCapSize: 897.76MB CapLen: 96 bytes
# of packets: 16670635 (10170.51MB)
AvgRate: 94.80Mbps stddev:12.12M
IP flow (unique src/dst pair) Information
# of flows: 558601 (avg. 29.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.7% 1.4% 1.3% 1.3% 1.3% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 320957
Top 10 bandwidth usage (bytes/total in %):
14.4% 8.9% 5.3% 5.3% 5.1% 4.3% 2.7% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1698
Top 10 bandwidth usage (bytes/total in %):
50.4% 50.4% 12.5% 12.4% 12.1% 8.6% 3.3% 2.8% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902221400.pktlen.png)
detailed numbers
[ 32- 63]: 2905608
[ 64- 127]: 5372648
[ 128- 255]: 698229
[ 256- 511]: 468780
[ 512- 1023]: 360722
[ 1024- 2047]: 6864648
Protocol Breakdown
![[protocol breakdown chart]](200902221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16670635 (100.00%) 10664555754 (100.00%) 639.72
ip 16507482 ( 99.02%) 10646743985 ( 99.83%) 644.96
tcp 10794907 ( 64.75%) 8162779099 ( 76.54%) 756.17
http(s) 4279599 ( 25.67%) 5790285407 ( 54.29%) 1353.00
http(c) 2749490 ( 16.49%) 230802601 ( 2.16%) 83.94
squid 662486 ( 3.97%) 407330617 ( 3.82%) 614.85
smtp 232329 ( 1.39%) 70620967 ( 0.66%) 303.97
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 94867 ( 0.57%) 56534235 ( 0.53%) 595.93
pop3 10455 ( 0.06%) 7149340 ( 0.07%) 683.82
imap 3131 ( 0.02%) 823854 ( 0.01%) 263.13
telnet 733 ( 0.00%) 93694 ( 0.00%) 127.82
ssh 9238 ( 0.06%) 1191131 ( 0.01%) 128.94
dns 3267 ( 0.02%) 232959 ( 0.00%) 71.31
bgp 144 ( 0.00%) 47910 ( 0.00%) 332.71
napster 6 ( 0.00%) 959 ( 0.00%) 159.83
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 60743 ( 0.36%) 64403573 ( 0.60%) 1060.26
icecast 39250 ( 0.24%) 24108340 ( 0.23%) 614.23
other 2649151 ( 15.89%) 1509152292 ( 14.15%) 569.67
udp 4323327 ( 25.93%) 2370902858 ( 22.23%) 548.40
dns 1056272 ( 6.34%) 216790844 ( 2.03%) 205.24
realaud 7 ( 0.00%) 601 ( 0.00%) 85.86
halflif 138 ( 0.00%) 17192 ( 0.00%) 124.58
starcra 33 ( 0.00%) 6087 ( 0.00%) 184.45
everque 2473 ( 0.01%) 2516025 ( 0.02%) 1017.40
unreal 38 ( 0.00%) 8814 ( 0.00%) 231.95
quake 16 ( 0.00%) 1485 ( 0.00%) 92.81
cuseeme 438 ( 0.00%) 316561 ( 0.00%) 722.74
other 3263854 ( 19.58%) 2151205128 ( 20.17%) 659.10
icmp 1363289 ( 8.18%) 109328474 ( 1.03%) 80.19
ipip 301 ( 0.00%) 36522 ( 0.00%) 121.34
ipsec 44 ( 0.00%) 6952 ( 0.00%) 158.00
ip6 19588 ( 0.12%) 2924679 ( 0.03%) 149.31
other 6026 ( 0.04%) 765401 ( 0.01%) 127.02
frag 6837 ( 0.04%) 5464183 ( 0.05%) 799.21
ip6 163153 ( 0.98%) 17811769 ( 0.17%) 109.17
tcp6 140665 ( 0.84%) 14303675 ( 0.13%) 101.69
http(s) 2402 ( 0.01%) 1490420 ( 0.01%) 620.49
http(c) 29940 ( 0.18%) 3052564 ( 0.03%) 101.96
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 231 ( 0.00%) 62780 ( 0.00%) 271.77
ftp 2485 ( 0.01%) 255999 ( 0.00%) 103.02
ssh 87 ( 0.00%) 54842 ( 0.00%) 630.37
bgp 357 ( 0.00%) 29446 ( 0.00%) 82.48
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 105160 ( 0.63%) 9357402 ( 0.09%) 88.98
udp6 15533 ( 0.09%) 2338253 ( 0.02%) 150.53
dns 14373 ( 0.09%) 2154368 ( 0.02%) 149.89
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1158 ( 0.01%) 183664 ( 0.00%) 158.60
icmp6 6578 ( 0.04%) 834511 ( 0.01%) 126.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 347 ( 0.00%) 331250 ( 0.00%) 954.61
tcpdump file: 200902221400.dump.gz (378.98 MB)