Traffic Trace Info
DumpFile: 200902281400.dump
FileSize: 1010.68MB
Id: 200902281400
StartTime: Sat Feb 28 14:00:01 2009
EndTime: Sat Feb 28 14:15:00 2009
TotalTime: 899.16 seconds
TotalCapSize: 790.20MB CapLen: 96 bytes
# of packets: 14448364 (9713.32MB)
AvgRate: 90.62Mbps stddev:11.46M
IP flow (unique src/dst pair) Information
# of flows: 641430 (avg. 22.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.9% 1.8% 1.4% 1.4% 1.4% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 360780
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.7% 7.5% 6.5% 6.4% 4.2% 3.2% 3.2% 3.0% 2.3%
# of IPv6 addresses: 1015
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.4% 12.4% 10.8% 10.0% 9.2% 8.9% 8.5% 7.6% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200902281400.pktlen.png)
detailed numbers
[ 32- 63]: 3539752
[ 64- 127]: 3244170
[ 128- 255]: 500280
[ 256- 511]: 492566
[ 512- 1023]: 388959
[ 1024- 2047]: 6282637
Protocol Breakdown
![[protocol breakdown chart]](200902281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14448364 (100.00%) 10185149353 (100.00%) 704.93
ip 14417462 ( 99.79%) 10179041767 ( 99.94%) 706.02
tcp 12095206 ( 83.71%) 9564886458 ( 93.91%) 790.80
http(s) 5498609 ( 38.06%) 7471611871 ( 73.36%) 1358.82
http(c) 3069677 ( 21.25%) 281946869 ( 2.77%) 91.85
squid 689869 ( 4.77%) 265133307 ( 2.60%) 384.32
smtp 210079 ( 1.45%) 60470291 ( 0.59%) 287.85
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 67181 ( 0.46%) 33889397 ( 0.33%) 504.45
pop3 12915 ( 0.09%) 4759784 ( 0.05%) 368.55
imap 2886 ( 0.02%) 412545 ( 0.00%) 142.95
telnet 1213 ( 0.01%) 171142 ( 0.00%) 141.09
ssh 18639 ( 0.13%) 5296731 ( 0.05%) 284.17
dns 990 ( 0.01%) 90989 ( 0.00%) 91.91
bgp 147 ( 0.00%) 55325 ( 0.00%) 376.36
napster 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 57 ( 0.00%) 8934 ( 0.00%) 156.74
rtsp 139490 ( 0.97%) 60897838 ( 0.60%) 436.57
icecast 490 ( 0.00%) 34995 ( 0.00%) 71.42
other 2382961 ( 16.49%) 1380106254 ( 13.55%) 579.16
udp 1781639 ( 12.33%) 555166041 ( 5.45%) 311.60
dns 997350 ( 6.90%) 208769760 ( 2.05%) 209.32
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 16 ( 0.00%) 2071 ( 0.00%) 129.44
halflif 43 ( 0.00%) 4054 ( 0.00%) 94.28
starcra 52 ( 0.00%) 8904 ( 0.00%) 171.23
everque 75 ( 0.00%) 16587 ( 0.00%) 221.16
unreal 17 ( 0.00%) 2970 ( 0.00%) 174.71
quake 19 ( 0.00%) 2080 ( 0.00%) 109.47
cuseeme 7 ( 0.00%) 1283 ( 0.00%) 183.29
other 784012 ( 5.43%) 346329559 ( 3.40%) 441.74
icmp 463358 ( 3.21%) 44839430 ( 0.44%) 96.77
ipip 294 ( 0.00%) 33824 ( 0.00%) 115.05
ipsec 90 ( 0.00%) 14220 ( 0.00%) 158.00
ip6 23491 ( 0.16%) 3113604 ( 0.03%) 132.54
other 53384 ( 0.37%) 10988190 ( 0.11%) 205.83
frag 1000 ( 0.01%) 854607 ( 0.01%) 854.61
ip6 30902 ( 0.21%) 6107586 ( 0.06%) 197.64
tcp6 13440 ( 0.09%) 3522128 ( 0.03%) 262.06
http(s) 1547 ( 0.01%) 1596252 ( 0.02%) 1031.84
http(c) 8760 ( 0.06%) 973997 ( 0.01%) 111.19
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 485 ( 0.00%) 161677 ( 0.00%) 333.35
ssh 91 ( 0.00%) 11058 ( 0.00%) 121.52
bgp 416 ( 0.00%) 38777 ( 0.00%) 93.21
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 2135 ( 0.01%) 739923 ( 0.01%) 346.57
udp6 12629 ( 0.09%) 1892483 ( 0.02%) 149.85
dns 12591 ( 0.09%) 1888167 ( 0.02%) 149.96
other 38 ( 0.00%) 4316 ( 0.00%) 113.58
icmp6 4791 ( 0.03%) 677239 ( 0.01%) 141.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 11656 ( 0.00%) 971.33
tcpdump file: 200902281400.dump.gz (352.31 MB)