Traffic Trace Info
DumpFile: 200902241400.dump
FileSize: 1365.63MB
Id: 200902241400
StartTime: Tue Feb 24 14:00:00 2009
EndTime: Tue Feb 24 14:15:00 2009
TotalTime: 900.02 seconds
TotalCapSize: 1069.64MB CapLen: 96 bytes
# of packets: 19397356 (12823.10MB)
AvgRate: 119.51Mbps stddev:18.31M
IP flow (unique src/dst pair) Information
# of flows: 723468 (avg. 26.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.3% 3.2% 1.6% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 430266
Top 10 bandwidth usage (bytes/total in %):
11.1% 8.1% 7.7% 5.0% 4.9% 4.4% 4.2% 3.4% 2.8% 2.7%
# of IPv6 addresses: 1582
Top 10 bandwidth usage (bytes/total in %):
94.9% 48.7% 44.9% 2.7% 2.7% 1.2% 0.8% 0.5% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902241400.pktlen.png)
detailed numbers
[ 32- 63]: 4634422
[ 64- 127]: 4410378
[ 128- 255]: 725513
[ 256- 511]: 639122
[ 512- 1023]: 732828
[ 1024- 2047]: 8255093
Protocol Breakdown
![[protocol breakdown chart]](200902241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19397356 (100.00%) 13445993332 (100.00%) 693.19
ip 18954048 ( 97.71%) 13070375443 ( 97.21%) 689.58
tcp 15864860 ( 81.79%) 12201443289 ( 90.74%) 769.09
http(s) 6067924 ( 31.28%) 7969681514 ( 59.27%) 1313.41
http(c) 4339136 ( 22.37%) 589956726 ( 4.39%) 135.96
squid 466677 ( 2.41%) 250943651 ( 1.87%) 537.72
smtp 590084 ( 3.04%) 399600356 ( 2.97%) 677.19
nntp 5 ( 0.00%) 310 ( 0.00%) 62.00
ftp 118770 ( 0.61%) 79648542 ( 0.59%) 670.61
pop3 40398 ( 0.21%) 19979888 ( 0.15%) 494.58
imap 3787 ( 0.02%) 427856 ( 0.00%) 112.98
telnet 3406 ( 0.02%) 551424 ( 0.00%) 161.90
ssh 558374 ( 2.88%) 659039744 ( 4.90%) 1180.28
dns 1154 ( 0.01%) 123175 ( 0.00%) 106.74
bgp 140 ( 0.00%) 44948 ( 0.00%) 321.06
napster 17 ( 0.00%) 1920 ( 0.00%) 112.94
realaud 27 ( 0.00%) 2084 ( 0.00%) 77.19
rtsp 196913 ( 1.02%) 15811577 ( 0.12%) 80.30
icecast 22849 ( 0.12%) 15911374 ( 0.12%) 696.37
hotline 26 ( 0.00%) 2511 ( 0.00%) 96.58
other 3455137 ( 17.81%) 2199713529 ( 16.36%) 636.65
udp 2518603 ( 12.98%) 779657073 ( 5.80%) 309.56
dns 1479928 ( 7.63%) 302280602 ( 2.25%) 204.25
realaud 9728 ( 0.05%) 7736562 ( 0.06%) 795.29
halflif 36 ( 0.00%) 4811 ( 0.00%) 133.64
starcra 55 ( 0.00%) 9999 ( 0.00%) 181.80
everque 280 ( 0.00%) 49896 ( 0.00%) 178.20
unreal 35 ( 0.00%) 11179 ( 0.00%) 319.40
quake 30 ( 0.00%) 3087 ( 0.00%) 102.90
cuseeme 20 ( 0.00%) 2743 ( 0.00%) 137.15
other 1028036 ( 5.30%) 469352292 ( 3.49%) 456.55
icmp 483532 ( 2.49%) 49733341 ( 0.37%) 102.85
ipip 320 ( 0.00%) 39364 ( 0.00%) 123.01
ipsec 3682 ( 0.02%) 1101724 ( 0.01%) 299.22
ip6 38436 ( 0.20%) 12550690 ( 0.09%) 326.53
other 44615 ( 0.23%) 25849962 ( 0.19%) 579.40
frag 2049 ( 0.01%) 1746904 ( 0.01%) 852.56
ip6 443308 ( 2.29%) 375617889 ( 2.79%) 847.31
tcp6 418480 ( 2.16%) 371690712 ( 2.76%) 888.19
http(s) 4271 ( 0.02%) 2968240 ( 0.02%) 694.98
http(c) 56543 ( 0.29%) 5779934 ( 0.04%) 102.22
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 888 ( 0.00%) 355538 ( 0.00%) 400.38
ftp 2140 ( 0.01%) 220293 ( 0.00%) 102.94
ssh 190 ( 0.00%) 76000 ( 0.00%) 400.00
dns 7 ( 0.00%) 638 ( 0.00%) 91.14
bgp 407 ( 0.00%) 39767 ( 0.00%) 97.71
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 354031 ( 1.83%) 362250080 ( 2.69%) 1023.22
udp6 18555 ( 0.10%) 3027430 ( 0.02%) 163.16
dns 17503 ( 0.09%) 2830485 ( 0.02%) 161.71
other 1052 ( 0.01%) 196945 ( 0.00%) 187.21
icmp6 6158 ( 0.03%) 813583 ( 0.01%) 132.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 85 ( 0.00%) 82084 ( 0.00%) 965.69
tcpdump file: 200902241400.dump.gz (478.77 MB)