Traffic Trace Info
DumpFile: 200905041400.dump
FileSize: 2326.93MB
Id: 200905041400
StartTime: Mon May 4 14:00:01 2009
EndTime: Mon May 4 14:15:00 2009
TotalTime: 898.94 seconds
TotalCapSize: 1779.53MB CapLen: 96 bytes
# of packets: 35873596 (21873.49MB)
AvgRate: 204.13Mbps stddev:17.42M
IP flow (unique src/dst pair) Information
# of flows: 1446794 (avg. 24.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.5% 1.2% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 902018
Top 10 bandwidth usage (bytes/total in %):
46.5% 5.5% 5.3% 4.3% 3.4% 2.6% 2.5% 2.2% 1.5% 1.5%
# of IPv6 addresses: 1015
Top 10 bandwidth usage (bytes/total in %):
42.3% 30.2% 12.6% 10.4% 6.7% 6.0% 4.0% 3.8% 3.5% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905041400.pktlen.png)
detailed numbers
[ 32- 63]: 8456481
[ 64- 127]: 9019252
[ 128- 255]: 1842958
[ 256- 511]: 842784
[ 512- 1023]: 945292
[ 1024- 2047]: 14766829
Protocol Breakdown
![[protocol breakdown chart]](200905041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35873596 (100.00%) 22936020874 (100.00%) 639.36
ip 35843114 ( 99.92%) 22929670194 ( 99.97%) 639.72
tcp 22692973 ( 63.26%) 17214761378 ( 75.06%) 758.59
http(s) 6867228 ( 19.14%) 9147692889 ( 39.88%) 1332.08
http(c) 4311009 ( 12.02%) 451698038 ( 1.97%) 104.78
squid 585710 ( 1.63%) 383386526 ( 1.67%) 654.57
smtp 340406 ( 0.95%) 83749554 ( 0.37%) 246.03
nntp 224 ( 0.00%) 26415 ( 0.00%) 117.92
ftp 87276 ( 0.24%) 40642440 ( 0.18%) 465.68
pop3 10424 ( 0.03%) 6385942 ( 0.03%) 612.62
imap 2228 ( 0.01%) 525201 ( 0.00%) 235.73
telnet 21987 ( 0.06%) 2004127 ( 0.01%) 91.15
ssh 56300 ( 0.16%) 29909129 ( 0.13%) 531.25
dns 3552 ( 0.01%) 3877829 ( 0.02%) 1091.73
bgp 146 ( 0.00%) 51109 ( 0.00%) 350.06
napster 104 ( 0.00%) 11640 ( 0.00%) 111.92
realaud 980 ( 0.00%) 214726 ( 0.00%) 219.11
rtsp 24819 ( 0.07%) 13885407 ( 0.06%) 559.47
icecast 3945 ( 0.01%) 891419 ( 0.00%) 225.96
hotline 104 ( 0.00%) 15344 ( 0.00%) 147.54
other 10376478 ( 28.93%) 7049790463 ( 30.74%) 679.40
udp 12369035 ( 34.48%) 5640062704 ( 24.59%) 455.98
dns 1199549 ( 3.34%) 248486862 ( 1.08%) 207.15
realaud 31158 ( 0.09%) 26721517 ( 0.12%) 857.61
halflif 517 ( 0.00%) 39356 ( 0.00%) 76.12
starcra 420 ( 0.00%) 79134 ( 0.00%) 188.41
everque 348 ( 0.00%) 64811 ( 0.00%) 186.24
unreal 177 ( 0.00%) 33963 ( 0.00%) 191.88
quake 71 ( 0.00%) 9610 ( 0.00%) 135.35
cuseeme 13 ( 0.00%) 1703 ( 0.00%) 131.00
other 11136401 ( 31.04%) 5364417247 ( 23.39%) 481.70
icmp 707984 ( 1.97%) 61804628 ( 0.27%) 87.30
ipip 287 ( 0.00%) 35082 ( 0.00%) 122.24
ipsec 76 ( 0.00%) 12008 ( 0.00%) 158.00
ip6 32311 ( 0.09%) 5728034 ( 0.02%) 177.28
other 40448 ( 0.11%) 7266360 ( 0.03%) 179.65
frag 2150 ( 0.01%) 2032950 ( 0.01%) 945.56
ip6 30482 ( 0.08%) 6350680 ( 0.03%) 208.34
tcp6 9921 ( 0.03%) 3205960 ( 0.01%) 323.15
http(s) 2888 ( 0.01%) 1916565 ( 0.01%) 663.63
http(c) 5185 ( 0.01%) 1016779 ( 0.00%) 196.10
smtp 539 ( 0.00%) 131964 ( 0.00%) 244.83
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
bgp 370 ( 0.00%) 31337 ( 0.00%) 84.69
other 932 ( 0.00%) 108361 ( 0.00%) 116.27
udp6 15497 ( 0.04%) 2463727 ( 0.01%) 158.98
dns 15461 ( 0.04%) 2459767 ( 0.01%) 159.09
other 36 ( 0.00%) 3960 ( 0.00%) 110.00
icmp6 5022 ( 0.01%) 666185 ( 0.00%) 132.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10728 ( 0.00%) 894.00
tcpdump file: 200905041400.dump.gz (877.90 MB)