Traffic Trace Info
DumpFile: 200902271400.dump
FileSize: 1227.69MB
Id: 200902271400
StartTime: Fri Feb 27 14:00:01 2009
EndTime: Fri Feb 27 14:15:00 2009
TotalTime: 899.80 seconds
TotalCapSize: 969.01MB CapLen: 96 bytes
# of packets: 16952232 (12112.08MB)
AvgRate: 112.91Mbps stddev:15.17M
IP flow (unique src/dst pair) Information
# of flows: 645156 (avg. 26.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 3.0% 3.0% 2.1% 1.6% 1.4% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 370499
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.1% 6.6% 4.9% 4.8% 4.1% 3.7% 3.6% 3.6% 3.6%
# of IPv6 addresses: 1236
Top 10 bandwidth usage (bytes/total in %):
90.5% 90.0% 9.8% 8.8% 0.4% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902271400.pktlen.png)
detailed numbers
[ 32- 63]: 3739487
[ 64- 127]: 3782329
[ 128- 255]: 614934
[ 256- 511]: 495532
[ 512- 1023]: 391155
[ 1024- 2047]: 7928795
Protocol Breakdown
![[protocol breakdown chart]](200902271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16952232 (100.00%) 12700432215 (100.00%) 749.19
ip 15597251 ( 92.01%) 10837387049 ( 85.33%) 694.83
tcp 12626690 ( 74.48%) 10114812644 ( 79.64%) 801.07
http(s) 5613163 ( 33.11%) 7454909517 ( 58.70%) 1328.11
http(c) 3331531 ( 19.65%) 429807263 ( 3.38%) 129.01
squid 571316 ( 3.37%) 249217823 ( 1.96%) 436.22
smtp 477086 ( 2.81%) 310875367 ( 2.45%) 651.61
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 78696 ( 0.46%) 43465064 ( 0.34%) 552.32
pop3 16879 ( 0.10%) 4720269 ( 0.04%) 279.65
imap 6535 ( 0.04%) 2002809 ( 0.02%) 306.47
telnet 2853 ( 0.02%) 326747 ( 0.00%) 114.53
ssh 51785 ( 0.31%) 8550878 ( 0.07%) 165.12
dns 1657 ( 0.01%) 276656 ( 0.00%) 166.96
bgp 168 ( 0.00%) 71958 ( 0.00%) 428.32
napster 8 ( 0.00%) 775 ( 0.00%) 96.88
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 27380 ( 0.16%) 8963387 ( 0.07%) 327.37
icecast 38432 ( 0.23%) 31313845 ( 0.25%) 814.79
other 2409185 ( 14.21%) 1570309214 ( 12.36%) 651.80
udp 2105230 ( 12.42%) 649135978 ( 5.11%) 308.34
dns 1090857 ( 6.43%) 211164613 ( 1.66%) 193.58
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 11 ( 0.00%) 935 ( 0.00%) 85.00
halflif 99 ( 0.00%) 11956 ( 0.00%) 120.77
starcra 48 ( 0.00%) 9195 ( 0.00%) 191.56
everque 74 ( 0.00%) 15869 ( 0.00%) 214.45
unreal 27 ( 0.00%) 4618 ( 0.00%) 171.04
quake 27 ( 0.00%) 2894 ( 0.00%) 107.19
cuseeme 16 ( 0.00%) 1948 ( 0.00%) 121.75
other 1014032 ( 5.98%) 437903053 ( 3.45%) 431.84
icmp 830284 ( 4.90%) 68560880 ( 0.54%) 82.58
ipip 294 ( 0.00%) 35160 ( 0.00%) 119.59
ipsec 180 ( 0.00%) 28560 ( 0.00%) 158.67
ip6 22083 ( 0.13%) 2830472 ( 0.02%) 128.17
other 12490 ( 0.07%) 1983355 ( 0.02%) 158.80
frag 1004 ( 0.01%) 893259 ( 0.01%) 889.70
ip6 1354981 ( 7.99%) 1863045166 ( 14.67%) 1374.96
tcp6 1330336 ( 7.85%) 1859191068 ( 14.64%) 1397.53
http(s) 175 ( 0.00%) 215883 ( 0.00%) 1233.62
http(c) 88213 ( 0.52%) 7615772 ( 0.06%) 86.33
smtp 403 ( 0.00%) 149814 ( 0.00%) 371.75
ftp 54 ( 0.00%) 4947 ( 0.00%) 91.61
ssh 73 ( 0.00%) 7158 ( 0.00%) 98.05
bgp 368 ( 0.00%) 31537 ( 0.00%) 85.70
other 1241050 ( 7.32%) 1851165957 ( 14.58%) 1491.61
udp6 18889 ( 0.11%) 2968029 ( 0.02%) 157.13
dns 18724 ( 0.11%) 2945547 ( 0.02%) 157.31
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 164 ( 0.00%) 22373 ( 0.00%) 136.42
icmp6 5684 ( 0.03%) 839517 ( 0.01%) 147.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 42 ( 0.00%) 42472 ( 0.00%) 1011.24
tcpdump file: 200902271400.dump.gz (399.17 MB)