Traffic Trace Info
DumpFile: 200902231400.dump
FileSize: 1073.14MB
Id: 200902231400
StartTime: Mon Feb 23 14:00:00 2009
EndTime: Mon Feb 23 14:15:01 2009
TotalTime: 900.83 seconds
TotalCapSize: 839.48MB CapLen: 96 bytes
# of packets: 15312713 (9877.58MB)
AvgRate: 91.99Mbps stddev:12.11M
IP flow (unique src/dst pair) Information
# of flows: 649453 (avg. 23.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.3% 2.7% 1.7% 1.6% 1.5% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 366862
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.2% 6.6% 4.1% 4.0% 3.5% 3.5% 3.4% 3.4% 2.8%
# of IPv6 addresses: 1226
Top 10 bandwidth usage (bytes/total in %):
54.7% 54.6% 16.1% 10.4% 4.7% 3.8% 2.4% 1.9% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902231400.pktlen.png)
detailed numbers
[ 32- 63]: 3731002
[ 64- 127]: 3416745
[ 128- 255]: 715087
[ 256- 511]: 623835
[ 512- 1023]: 587815
[ 1024- 2047]: 6238229
Protocol Breakdown
![[protocol breakdown chart]](200902231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15312713 (100.00%) 10357389013 (100.00%) 676.39
ip 15175726 ( 99.11%) 10340850499 ( 99.84%) 681.41
tcp 12407854 ( 81.03%) 9600638638 ( 92.69%) 773.75
http(s) 5477244 ( 35.77%) 7230680740 ( 69.81%) 1320.13
http(c) 3471923 ( 22.67%) 363949373 ( 3.51%) 104.83
squid 465816 ( 3.04%) 277236361 ( 2.68%) 595.16
smtp 299345 ( 1.95%) 119866996 ( 1.16%) 400.43
ftp 63454 ( 0.41%) 31347745 ( 0.30%) 494.02
pop3 19235 ( 0.13%) 4390401 ( 0.04%) 228.25
imap 7895 ( 0.05%) 5229385 ( 0.05%) 662.37
telnet 4636 ( 0.03%) 845192 ( 0.01%) 182.31
ssh 160505 ( 1.05%) 89935061 ( 0.87%) 560.33
dns 1291 ( 0.01%) 114937 ( 0.00%) 89.03
bgp 162 ( 0.00%) 63270 ( 0.00%) 390.56
napster 13 ( 0.00%) 2346 ( 0.00%) 180.46
realaud 34 ( 0.00%) 4823 ( 0.00%) 141.85
rtsp 235491 ( 1.54%) 182739285 ( 1.76%) 775.99
icecast 614 ( 0.00%) 43223 ( 0.00%) 70.40
hotline 10 ( 0.00%) 811 ( 0.00%) 81.10
other 2200167 ( 14.37%) 1294187549 ( 12.50%) 588.22
udp 2207310 ( 14.41%) 667562375 ( 6.45%) 302.43
dns 1298251 ( 8.48%) 286208766 ( 2.76%) 220.46
realaud 16933 ( 0.11%) 8210494 ( 0.08%) 484.88
halflif 130 ( 0.00%) 16370 ( 0.00%) 125.92
starcra 61 ( 0.00%) 10986 ( 0.00%) 180.10
everque 85 ( 0.00%) 15070 ( 0.00%) 177.29
unreal 45 ( 0.00%) 11778 ( 0.00%) 261.73
quake 16 ( 0.00%) 1289 ( 0.00%) 80.56
cuseeme 4 ( 0.00%) 373 ( 0.00%) 93.25
other 891647 ( 5.82%) 372996233 ( 3.60%) 418.32
icmp 499904 ( 3.26%) 51061468 ( 0.49%) 102.14
ipip 348 ( 0.00%) 42812 ( 0.00%) 123.02
ipsec 94 ( 0.00%) 14852 ( 0.00%) 158.00
ip6 28112 ( 0.18%) 4774504 ( 0.05%) 169.84
other 32104 ( 0.21%) 16755850 ( 0.16%) 521.92
frag 2230 ( 0.01%) 1970529 ( 0.02%) 883.65
ip6 136987 ( 0.89%) 16538514 ( 0.16%) 120.73
tcp6 113883 ( 0.74%) 13096866 ( 0.13%) 115.00
http(s) 3589 ( 0.02%) 2371097 ( 0.02%) 660.66
http(c) 5840 ( 0.04%) 1176672 ( 0.01%) 201.48
smtp 440 ( 0.00%) 158413 ( 0.00%) 360.03
ftp 85 ( 0.00%) 11211 ( 0.00%) 131.89
ssh 211 ( 0.00%) 148414 ( 0.00%) 703.38
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 369 ( 0.00%) 31759 ( 0.00%) 86.07
other 103342 ( 0.67%) 9198665 ( 0.09%) 89.01
udp6 17673 ( 0.12%) 2699421 ( 0.03%) 152.74
dns 17469 ( 0.11%) 2676659 ( 0.03%) 153.22
other 204 ( 0.00%) 22762 ( 0.00%) 111.58
icmp6 5398 ( 0.04%) 734571 ( 0.01%) 136.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 3576 ( 0.00%) 1192.00
tcpdump file: 200902231400.dump.gz (383.13 MB)