Traffic Trace Info
DumpFile: 200902261400.dump
FileSize: 1257.33MB
Id: 200902261400
StartTime: Thu Feb 26 14:00:01 2009
EndTime: Thu Feb 26 14:15:00 2009
TotalTime: 899.48 seconds
TotalCapSize: 989.53MB CapLen: 96 bytes
# of packets: 17549816 (11526.70MB)
AvgRate: 107.50Mbps stddev:14.66M
IP flow (unique src/dst pair) Information
# of flows: 677525 (avg. 25.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 1.9% 1.7% 1.5% 1.5% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 388173
Top 10 bandwidth usage (bytes/total in %):
9.9% 7.7% 5.8% 3.9% 2.8% 2.3% 2.3% 2.2% 2.0% 2.0%
# of IPv6 addresses: 1879
Top 10 bandwidth usage (bytes/total in %):
87.4% 87.3% 11.9% 11.9% 0.1% 0.1% 0.1% 0.1% 0.1% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902261400.pktlen.png)
detailed numbers
[ 32- 63]: 4004611
[ 64- 127]: 4170302
[ 128- 255]: 884551
[ 256- 511]: 544089
[ 512- 1023]: 625969
[ 1024- 2047]: 7320294
Protocol Breakdown
![[protocol breakdown chart]](200902261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17549816 (100.00%) 12086620103 (100.00%) 688.70
ip 16521996 ( 94.14%) 10606885157 ( 87.76%) 641.99
tcp 13365266 ( 76.16%) 9790974544 ( 81.01%) 732.57
http(s) 5471122 ( 31.17%) 7215302809 ( 59.70%) 1318.80
http(c) 4408018 ( 25.12%) 437121631 ( 3.62%) 99.17
squid 428450 ( 2.44%) 246042325 ( 2.04%) 574.26
smtp 403223 ( 2.30%) 153793984 ( 1.27%) 381.41
nntp 11 ( 0.00%) 825 ( 0.00%) 75.00
ftp 141385 ( 0.81%) 123290092 ( 1.02%) 872.02
pop3 19348 ( 0.11%) 4831768 ( 0.04%) 249.73
imap 6660 ( 0.04%) 1865894 ( 0.02%) 280.16
telnet 3589 ( 0.02%) 679507 ( 0.01%) 189.33
ssh 20940 ( 0.12%) 3209129 ( 0.03%) 153.25
dns 1160 ( 0.01%) 170579 ( 0.00%) 147.05
bgp 164 ( 0.00%) 64604 ( 0.00%) 393.93
napster 3 ( 0.00%) 192 ( 0.00%) 64.00
realaud 21 ( 0.00%) 1434 ( 0.00%) 68.29
rtsp 274743 ( 1.57%) 225255269 ( 1.86%) 819.88
icecast 481 ( 0.00%) 150328 ( 0.00%) 312.53
hotline 7 ( 0.00%) 734 ( 0.00%) 104.86
other 2185940 ( 12.46%) 1379193380 ( 11.41%) 630.94
udp 2463836 ( 14.04%) 684930840 ( 5.67%) 277.99
dns 1365826 ( 7.78%) 296289831 ( 2.45%) 216.93
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 2697 ( 0.02%) 165668 ( 0.00%) 61.43
halflif 142 ( 0.00%) 20315 ( 0.00%) 143.06
starcra 62 ( 0.00%) 11460 ( 0.00%) 184.84
everque 79 ( 0.00%) 15460 ( 0.00%) 195.70
unreal 26 ( 0.00%) 3076 ( 0.00%) 118.31
quake 18 ( 0.00%) 1822 ( 0.00%) 101.22
cuseeme 6 ( 0.00%) 454 ( 0.00%) 75.67
other 1094825 ( 6.24%) 388313817 ( 3.21%) 354.68
icmp 485531 ( 2.77%) 50578722 ( 0.42%) 104.17
ipip 332 ( 0.00%) 40180 ( 0.00%) 121.02
ip6 82335 ( 0.47%) 45381421 ( 0.38%) 551.18
other 124696 ( 0.71%) 34979450 ( 0.29%) 280.52
frag 1710 ( 0.01%) 1573562 ( 0.01%) 920.21
ip6 1027820 ( 5.86%) 1479734946 ( 12.24%) 1439.68
tcp6 999490 ( 5.70%) 1475108026 ( 12.20%) 1475.86
http(s) 3390 ( 0.02%) 2646332 ( 0.02%) 780.63
http(c) 4118 ( 0.02%) 742176 ( 0.01%) 180.23
smtp 2511 ( 0.01%) 2429139 ( 0.02%) 967.40
ftp 1956 ( 0.01%) 200116 ( 0.00%) 102.31
ssh 147 ( 0.00%) 78338 ( 0.00%) 532.91
dns 28 ( 0.00%) 7166 ( 0.00%) 255.93
bgp 379 ( 0.00%) 33319 ( 0.00%) 87.91
other 986961 ( 5.62%) 1468971440 ( 12.15%) 1488.38
udp6 22290 ( 0.13%) 3706039 ( 0.03%) 166.26
dns 21247 ( 0.12%) 3425670 ( 0.03%) 161.23
realaud 1 ( 0.00%) 145 ( 0.00%) 145.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1039 ( 0.01%) 279898 ( 0.00%) 269.39
icmp6 5981 ( 0.03%) 886786 ( 0.01%) 148.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 29 ( 0.00%) 30015 ( 0.00%) 1035.00
tcpdump file: 200902261400.dump.gz (429.75 MB)