Traffic Trace Info
DumpFile: 200905051400.dump
FileSize: 2467.27MB
Id: 200905051400
StartTime: Tue May 5 14:00:01 2009
EndTime: Tue May 5 14:15:01 2009
TotalTime: 900.02 seconds
TotalCapSize: 1880.88MB CapLen: 96 bytes
# of packets: 38428902 (21742.46MB)
AvgRate: 202.66Mbps stddev:16.88M
IP flow (unique src/dst pair) Information
# of flows: 1693486 (avg. 22.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.0% 0.9% 0.8% 0.7% 0.6% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 1028900
Top 10 bandwidth usage (bytes/total in %):
44.3% 5.0% 3.1% 2.9% 2.8% 2.7% 2.5% 2.3% 1.9% 1.7%
# of IPv6 addresses: 1802
Top 10 bandwidth usage (bytes/total in %):
48.0% 48.0% 18.3% 13.2% 5.1% 5.0% 4.0% 2.7% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905051400.pktlen.png)
detailed numbers
[ 32- 63]: 7316403
[ 64- 127]: 12071775
[ 128- 255]: 2334847
[ 256- 511]: 1278369
[ 512- 1023]: 1285667
[ 1024- 2047]: 14141841
Protocol Breakdown
![[protocol breakdown chart]](200905051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38428902 (100.00%) 22798619868 (100.00%) 593.27
ip 38390295 ( 99.90%) 22784316117 ( 99.94%) 593.49
tcp 21001198 ( 54.65%) 15185707062 ( 66.61%) 723.09
http(s) 5486019 ( 14.28%) 6986093031 ( 30.64%) 1273.44
http(c) 3305973 ( 8.60%) 446892421 ( 1.96%) 135.18
squid 611622 ( 1.59%) 311884215 ( 1.37%) 509.93
smtp 355305 ( 0.92%) 113760983 ( 0.50%) 320.18
nntp 154 ( 0.00%) 15179 ( 0.00%) 98.56
ftp 77552 ( 0.20%) 13674318 ( 0.06%) 176.32
pop3 12456 ( 0.03%) 11334977 ( 0.05%) 910.00
imap 2109 ( 0.01%) 234906 ( 0.00%) 111.38
telnet 8451 ( 0.02%) 921483 ( 0.00%) 109.04
ssh 70129 ( 0.18%) 10913588 ( 0.05%) 155.62
dns 8944 ( 0.02%) 8990571 ( 0.04%) 1005.21
bgp 137 ( 0.00%) 46747 ( 0.00%) 341.22
napster 184 ( 0.00%) 45630 ( 0.00%) 247.99
realaud 2214 ( 0.01%) 268825 ( 0.00%) 121.42
rtsp 45218 ( 0.12%) 42354519 ( 0.19%) 936.67
icecast 18802 ( 0.05%) 9428693 ( 0.04%) 501.47
hotline 25 ( 0.00%) 2997 ( 0.00%) 119.88
other 10995812 ( 28.61%) 7228795263 ( 31.71%) 657.41
udp 16606752 ( 43.21%) 7520353323 ( 32.99%) 452.85
dns 1488494 ( 3.87%) 290962759 ( 1.28%) 195.47
realaud 2063 ( 0.01%) 147546 ( 0.00%) 71.52
halflif 6113 ( 0.02%) 376064 ( 0.00%) 61.52
starcra 657 ( 0.00%) 127034 ( 0.00%) 193.35
everque 459 ( 0.00%) 70493 ( 0.00%) 153.58
unreal 242 ( 0.00%) 54684 ( 0.00%) 225.97
quake 86 ( 0.00%) 34076 ( 0.00%) 396.23
cuseeme 46 ( 0.00%) 6827 ( 0.00%) 148.41
other 15107378 ( 39.31%) 7227937664 ( 31.70%) 478.44
icmp 704520 ( 1.83%) 65039784 ( 0.29%) 92.32
ipip 329 ( 0.00%) 43050 ( 0.00%) 130.85
ipsec 78 ( 0.00%) 12324 ( 0.00%) 158.00
ip6 50016 ( 0.13%) 8792900 ( 0.04%) 175.80
other 27402 ( 0.07%) 4367674 ( 0.02%) 159.39
frag 44531 ( 0.12%) 44494494 ( 0.20%) 999.18
ip6 38607 ( 0.10%) 14303751 ( 0.06%) 370.50
tcp6 14336 ( 0.04%) 10349549 ( 0.05%) 721.93
http(s) 7750 ( 0.02%) 9122644 ( 0.04%) 1177.12
http(c) 4350 ( 0.01%) 887893 ( 0.00%) 204.11
smtp 757 ( 0.00%) 172314 ( 0.00%) 227.63
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
dns 7 ( 0.00%) 832 ( 0.00%) 118.86
bgp 384 ( 0.00%) 40937 ( 0.00%) 106.61
other 1081 ( 0.00%) 123975 ( 0.00%) 114.69
udp6 19358 ( 0.05%) 3262859 ( 0.01%) 168.55
dns 17918 ( 0.05%) 2924541 ( 0.01%) 163.22
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 207 ( 0.00%) 103.50
other 1437 ( 0.00%) 338003 ( 0.00%) 235.21
icmp6 4809 ( 0.01%) 616888 ( 0.00%) 128.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 74 ( 0.00%) 70375 ( 0.00%) 951.01
tcpdump file: 200905051400.dump.gz (974.70 MB)