Traffic Trace Info
DumpFile: 200902251400.dump
FileSize: 1335.70MB
Id: 200902251400
StartTime: Wed Feb 25 14:00:01 2009
EndTime: Wed Feb 25 14:15:01 2009
TotalTime: 899.90 seconds
TotalCapSize: 1050.14MB CapLen: 96 bytes
# of packets: 18713631 (12213.37MB)
AvgRate: 113.86Mbps stddev:13.88M
IP flow (unique src/dst pair) Information
# of flows: 656805 (avg. 28.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.9% 1.9% 1.6% 1.5% 1.4% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 375543
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.8% 5.9% 5.8% 4.9% 2.0% 2.0% 2.0% 2.0% 1.8%
# of IPv6 addresses: 1166
Top 10 bandwidth usage (bytes/total in %):
97.5% 72.4% 24.9% 1.2% 1.2% 0.4% 0.2% 0.2% 0.2% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902251400.pktlen.png)
detailed numbers
[ 32- 63]: 3848926
[ 64- 127]: 4901021
[ 128- 255]: 810502
[ 256- 511]: 678192
[ 512- 1023]: 640811
[ 1024- 2047]: 7834179
Protocol Breakdown
![[protocol breakdown chart]](200902251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18713631 (100.00%) 12806649194 (100.00%) 684.35
ip 18063199 ( 96.52%) 12071802401 ( 94.26%) 668.31
tcp 14465270 ( 77.30%) 10846893603 ( 84.70%) 749.86
http(s) 4989697 ( 26.66%) 6452508058 ( 50.38%) 1293.17
http(c) 3550878 ( 18.97%) 365553479 ( 2.85%) 102.95
squid 450865 ( 2.41%) 234713774 ( 1.83%) 520.59
smtp 444289 ( 2.37%) 231085602 ( 1.80%) 520.12
ftp 79884 ( 0.43%) 54775763 ( 0.43%) 685.69
pop3 18471 ( 0.10%) 6444134 ( 0.05%) 348.88
imap 5455 ( 0.03%) 1361624 ( 0.01%) 249.61
telnet 7201 ( 0.04%) 856127 ( 0.01%) 118.89
ssh 611611 ( 3.27%) 92394538 ( 0.72%) 151.07
dns 8980 ( 0.05%) 590583 ( 0.00%) 65.77
bgp 147 ( 0.00%) 55036 ( 0.00%) 374.39
napster 32 ( 0.00%) 4627 ( 0.00%) 144.59
realaud 30 ( 0.00%) 19199 ( 0.00%) 639.97
rtsp 138131 ( 0.74%) 83991263 ( 0.66%) 608.06
icecast 1548 ( 0.01%) 504969 ( 0.00%) 326.21
other 4158044 ( 22.22%) 3322034407 ( 25.94%) 798.94
udp 2670749 ( 14.27%) 851981002 ( 6.65%) 319.00
dns 1408128 ( 7.52%) 298960651 ( 2.33%) 212.31
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 130 ( 0.00%) 8738 ( 0.00%) 67.22
halflif 1188 ( 0.01%) 109535 ( 0.00%) 92.20
starcra 39 ( 0.00%) 7225 ( 0.00%) 185.26
everque 57 ( 0.00%) 10938 ( 0.00%) 191.89
unreal 23 ( 0.00%) 2594 ( 0.00%) 112.78
quake 34 ( 0.00%) 4201 ( 0.00%) 123.56
cuseeme 7 ( 0.00%) 935 ( 0.00%) 133.57
other 1261091 ( 6.74%) 552841635 ( 4.32%) 438.38
icmp 460613 ( 2.46%) 48198823 ( 0.38%) 104.64
ipip 304 ( 0.00%) 37308 ( 0.00%) 122.72
ipsec 44 ( 0.00%) 6952 ( 0.00%) 158.00
ip6 326235 ( 1.74%) 288287431 ( 2.25%) 883.68
other 139984 ( 0.75%) 36397282 ( 0.28%) 260.01
frag 2384 ( 0.01%) 1872351 ( 0.01%) 785.38
ip6 650432 ( 3.48%) 734846793 ( 5.74%) 1129.78
tcp6 624286 ( 3.34%) 730722580 ( 5.71%) 1170.49
http(s) 3640 ( 0.02%) 2334528 ( 0.02%) 641.35
http(c) 33199 ( 0.18%) 3359491 ( 0.03%) 101.19
smtp 866 ( 0.00%) 364549 ( 0.00%) 420.96
ftp 54 ( 0.00%) 4947 ( 0.00%) 91.61
pop3 3 ( 0.00%) 234 ( 0.00%) 78.00
ssh 142 ( 0.00%) 25248 ( 0.00%) 177.80
dns 11 ( 0.00%) 5400 ( 0.00%) 490.91
bgp 369 ( 0.00%) 31072 ( 0.00%) 84.21
other 586002 ( 3.13%) 724597111 ( 5.66%) 1236.51
udp6 20659 ( 0.11%) 3265923 ( 0.03%) 158.09
dns 20636 ( 0.11%) 3263393 ( 0.03%) 158.14
other 23 ( 0.00%) 2530 ( 0.00%) 110.00
icmp6 5442 ( 0.03%) 835168 ( 0.01%) 153.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 19042 ( 0.00%) 1269.47
tcpdump file: 200902251400.dump.gz (468.39 MB)