Traffic Trace Info
DumpFile: 200905011400.dump
FileSize: 2775.99MB
Id: 200905011400
StartTime: Fri May 1 14:00:01 2009
EndTime: Fri May 1 14:15:00 2009
TotalTime: 899.33 seconds
TotalCapSize: -1957.66MB CapLen: 96 bytes
# of packets: 41772862 (24162.77MB)
AvgRate: 225.36Mbps stddev:20.15M
IP flow (unique src/dst pair) Information
# of flows: 1389690 (avg. 30.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.3% 1.5% 1.4% 0.9% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 876685
Top 10 bandwidth usage (bytes/total in %):
41.9% 4.2% 3.1% 2.9% 2.9% 2.6% 2.4% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1067
Top 10 bandwidth usage (bytes/total in %):
18.4% 15.3% 15.3% 13.3% 9.3% 8.7% 6.5% 5.6% 5.6% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905011400.pktlen.png)
detailed numbers
[ 32- 63]: 9389553
[ 64- 127]: 12108999
[ 128- 255]: 2228790
[ 256- 511]: 964914
[ 512- 1023]: 1261902
[ 1024- 2047]: 15818704
Protocol Breakdown
![[protocol breakdown chart]](200905011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41772862 (100.00%) 25336505884 (100.00%) 606.53
ip 41735985 ( 99.91%) 25327391815 ( 99.96%) 606.85
tcp 27954747 ( 66.92%) 20251721114 ( 79.93%) 724.45
http(s) 7830014 ( 18.74%) 10048182570 ( 39.66%) 1283.29
http(c) 5901062 ( 14.13%) 1415573963 ( 5.59%) 239.88
squid 617857 ( 1.48%) 416661805 ( 1.64%) 674.37
smtp 375651 ( 0.90%) 170206867 ( 0.67%) 453.10
nntp 151 ( 0.00%) 14185 ( 0.00%) 93.94
ftp 243312 ( 0.58%) 112068234 ( 0.44%) 460.59
pop3 16880 ( 0.04%) 5122602 ( 0.02%) 303.47
imap 3662 ( 0.01%) 765497 ( 0.00%) 209.04
telnet 17099 ( 0.04%) 6008617 ( 0.02%) 351.40
ssh 996595 ( 2.39%) 152928526 ( 0.60%) 153.45
dns 3521 ( 0.01%) 3831395 ( 0.02%) 1088.16
bgp 143 ( 0.00%) 43798 ( 0.00%) 306.28
napster 229 ( 0.00%) 22841 ( 0.00%) 99.74
realaud 1360 ( 0.00%) 173958 ( 0.00%) 127.91
rtsp 467658 ( 1.12%) 164291210 ( 0.65%) 351.31
icecast 13516 ( 0.03%) 1574357 ( 0.01%) 116.48
hotline 19 ( 0.00%) 2254 ( 0.00%) 118.63
other 11466006 ( 27.45%) 7754247715 ( 30.61%) 676.28
udp 12591458 ( 30.14%) 4966685797 ( 19.60%) 394.45
dns 1282953 ( 3.07%) 237419258 ( 0.94%) 185.06
rip 2 ( 0.00%) 464 ( 0.00%) 232.00
realaud 4801 ( 0.01%) 344208 ( 0.00%) 71.70
halflif 3513 ( 0.01%) 233675 ( 0.00%) 66.52
starcra 432 ( 0.00%) 85829 ( 0.00%) 198.68
everque 519 ( 0.00%) 68364 ( 0.00%) 131.72
unreal 181 ( 0.00%) 44847 ( 0.00%) 247.77
quake 52 ( 0.00%) 6888 ( 0.00%) 132.46
cuseeme 16 ( 0.00%) 1847 ( 0.00%) 115.44
other 11294029 ( 27.04%) 4728030083 ( 18.66%) 418.63
icmp 1114012 ( 2.67%) 91018464 ( 0.36%) 81.70
ipip 318 ( 0.00%) 40094 ( 0.00%) 126.08
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 41091 ( 0.10%) 7749492 ( 0.03%) 188.59
other 34279 ( 0.08%) 10164214 ( 0.04%) 296.51
frag 19775 ( 0.05%) 15131693 ( 0.06%) 765.19
ip6 36877 ( 0.09%) 9114069 ( 0.04%) 247.15
tcp6 9547 ( 0.02%) 4975520 ( 0.02%) 521.16
http(s) 2775 ( 0.01%) 2608093 ( 0.01%) 939.85
http(c) 3700 ( 0.01%) 658793 ( 0.00%) 178.05
smtp 494 ( 0.00%) 146206 ( 0.00%) 295.96
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 10 ( 0.00%) 1099 ( 0.00%) 109.90
bgp 354 ( 0.00%) 29386 ( 0.00%) 83.01
other 2209 ( 0.01%) 1531161 ( 0.01%) 693.15
udp6 19235 ( 0.05%) 3194609 ( 0.01%) 166.08
dns 19207 ( 0.05%) 3191546 ( 0.01%) 166.17
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 27 ( 0.00%) 2970 ( 0.00%) 110.00
icmp6 8062 ( 0.02%) 936764 ( 0.00%) 116.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 3096 ( 0.00%) 1032.00
tcpdump file: 200905011400.dump.gz (1049.30 MB)