Traffic Trace Info
DumpFile: 200905021400.dump
FileSize: 1402.57MB
Id: 200905021400
StartTime: Sat May 2 14:00:01 2009
EndTime: Sat May 2 14:15:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 1082.08MB CapLen: 96 bytes
# of packets: 21002626 (12223.62MB)
AvgRate: 113.97Mbps stddev:10.38M
IP flow (unique src/dst pair) Information
# of flows: 1120221 (avg. 18.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.3% 1.1% 0.9% 0.8% 0.8% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 685540
Top 10 bandwidth usage (bytes/total in %):
30.3% 6.2% 4.9% 4.2% 4.1% 3.4% 2.2% 1.9% 1.8% 1.6%
# of IPv6 addresses: 961
Top 10 bandwidth usage (bytes/total in %):
32.5% 23.8% 17.4% 17.4% 9.3% 8.0% 6.3% 4.1% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905021400.pktlen.png)
detailed numbers
[ 32- 63]: 5275831
[ 64- 127]: 5260833
[ 128- 255]: 1299043
[ 256- 511]: 643980
[ 512- 1023]: 677477
[ 1024- 2047]: 7845462
Protocol Breakdown
![[protocol breakdown chart]](200905021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21002626 (100.00%) 12817390639 (100.00%) 610.28
ip 20968756 ( 99.84%) 12809325626 ( 99.94%) 610.88
tcp 14294843 ( 68.06%) 10454681203 ( 81.57%) 731.36
http(s) 4463390 ( 21.25%) 5766989971 ( 44.99%) 1292.06
http(c) 2849070 ( 13.57%) 393750597 ( 3.07%) 138.20
squid 336441 ( 1.60%) 188867693 ( 1.47%) 561.37
smtp 284332 ( 1.35%) 69862589 ( 0.55%) 245.71
nntp 49 ( 0.00%) 4055 ( 0.00%) 82.76
ftp 70746 ( 0.34%) 23575061 ( 0.18%) 333.24
pop3 7842 ( 0.04%) 2873988 ( 0.02%) 366.49
imap 1960 ( 0.01%) 394196 ( 0.00%) 201.12
telnet 5562 ( 0.03%) 491992 ( 0.00%) 88.46
ssh 53322 ( 0.25%) 9688759 ( 0.08%) 181.70
dns 3440 ( 0.02%) 3864078 ( 0.03%) 1123.28
bgp 136 ( 0.00%) 38837 ( 0.00%) 285.57
napster 164 ( 0.00%) 13251 ( 0.00%) 80.80
realaud 1061 ( 0.01%) 129322 ( 0.00%) 121.89
rtsp 154812 ( 0.74%) 54398251 ( 0.42%) 351.38
icecast 2889 ( 0.01%) 425457 ( 0.00%) 147.27
hotline 715 ( 0.00%) 44784 ( 0.00%) 62.63
other 6058884 ( 28.85%) 3939237944 ( 30.73%) 650.16
udp 5703724 ( 27.16%) 2270974719 ( 17.72%) 398.16
dns 1133178 ( 5.40%) 309301853 ( 2.41%) 272.95
realaud 64679 ( 0.31%) 53661929 ( 0.42%) 829.67
halflif 125 ( 0.00%) 20743 ( 0.00%) 165.94
starcra 394 ( 0.00%) 74270 ( 0.00%) 188.50
everque 273 ( 0.00%) 46987 ( 0.00%) 172.11
unreal 769 ( 0.00%) 473688 ( 0.00%) 615.98
quake 30 ( 0.00%) 4873 ( 0.00%) 162.43
cuseeme 8 ( 0.00%) 1073 ( 0.00%) 134.12
other 4501733 ( 21.43%) 1904558450 ( 14.86%) 423.07
icmp 931296 ( 4.43%) 77878619 ( 0.61%) 83.62
ipip 288 ( 0.00%) 36924 ( 0.00%) 128.21
ipsec 78 ( 0.00%) 12324 ( 0.00%) 158.00
ip6 30446 ( 0.14%) 4671339 ( 0.04%) 153.43
other 8081 ( 0.04%) 1070498 ( 0.01%) 132.47
frag 117529 ( 0.56%) 149881895 ( 1.17%) 1275.28
ip6 33870 ( 0.16%) 8065013 ( 0.06%) 238.12
tcp6 13459 ( 0.06%) 4950483 ( 0.04%) 367.82
http(s) 2704 ( 0.01%) 1922815 ( 0.02%) 711.10
http(c) 4301 ( 0.02%) 900425 ( 0.01%) 209.35
smtp 533 ( 0.00%) 275358 ( 0.00%) 516.62
ftp 5 ( 0.00%) 390 ( 0.00%) 78.00
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 9 ( 0.00%) 1007 ( 0.00%) 111.89
bgp 386 ( 0.00%) 33771 ( 0.00%) 87.49
other 5516 ( 0.03%) 1815935 ( 0.01%) 329.21
udp6 15240 ( 0.07%) 2443804 ( 0.02%) 160.35
dns 15209 ( 0.07%) 2440398 ( 0.02%) 160.46
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
other 29 ( 0.00%) 3190 ( 0.00%) 110.00
icmp6 5141 ( 0.02%) 666646 ( 0.01%) 129.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200905021400.dump.gz (528.91 MB)