Traffic Trace Info
DumpFile: 200905061400.dump
FileSize: 2186.32MB
Id: 200905061400
StartTime: Wed May 6 14:00:01 2009
EndTime: Wed May 6 14:15:00 2009
TotalTime: 899.68 seconds
TotalCapSize: 1673.70MB CapLen: 96 bytes
# of packets: 33575553 (18298.00MB)
AvgRate: 170.59Mbps stddev:13.93M
IP flow (unique src/dst pair) Information
# of flows: 1485935 (avg. 22.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 0.9% 0.6% 0.6% 0.5% 0.5% 0.5% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 918008
Top 10 bandwidth usage (bytes/total in %):
51.4% 3.8% 2.8% 2.6% 2.6% 2.5% 2.5% 2.5% 1.8% 1.5%
# of IPv6 addresses: 2030
Top 10 bandwidth usage (bytes/total in %):
30.7% 21.8% 14.0% 14.0% 8.9% 8.2% 7.4% 6.3% 6.3% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905061400.pktlen.png)
detailed numbers
[ 32- 63]: 7935884
[ 64- 127]: 9726251
[ 128- 255]: 2008283
[ 256- 511]: 936013
[ 512- 1023]: 1056710
[ 1024- 2047]: 11912412
Protocol Breakdown
![[protocol breakdown chart]](200905061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33575553 (100.00%) 19186843516 (100.00%) 571.45
ip 33538201 ( 99.89%) 19176797814 ( 99.95%) 571.79
tcp 19637554 ( 58.49%) 14024148785 ( 73.09%) 714.15
http(s) 4962364 ( 14.78%) 6442631171 ( 33.58%) 1298.30
http(c) 3751605 ( 11.17%) 493465995 ( 2.57%) 131.53
squid 623780 ( 1.86%) 404058506 ( 2.11%) 647.76
smtp 394236 ( 1.17%) 133390152 ( 0.70%) 338.35
nntp 120 ( 0.00%) 11000 ( 0.00%) 91.67
ftp 65943 ( 0.20%) 46174683 ( 0.24%) 700.22
pop3 17059 ( 0.05%) 12075276 ( 0.06%) 707.85
imap 3262 ( 0.01%) 1225982 ( 0.01%) 375.84
telnet 8859 ( 0.03%) 905567 ( 0.00%) 102.22
ssh 35879 ( 0.11%) 9572568 ( 0.05%) 266.80
dns 3582 ( 0.01%) 3909332 ( 0.02%) 1091.38
bgp 160 ( 0.00%) 71953 ( 0.00%) 449.71
napster 167 ( 0.00%) 15079 ( 0.00%) 90.29
realaud 670 ( 0.00%) 83553 ( 0.00%) 124.71
rtsp 50892 ( 0.15%) 36849923 ( 0.19%) 724.08
icecast 11874 ( 0.04%) 2290555 ( 0.01%) 192.91
hotline 43 ( 0.00%) 4731 ( 0.00%) 110.02
other 9706941 ( 28.91%) 6437392757 ( 33.55%) 663.17
udp 12219649 ( 36.39%) 5015009944 ( 26.14%) 410.41
dns 1468970 ( 4.38%) 287672999 ( 1.50%) 195.83
realaud 4173 ( 0.01%) 1407626 ( 0.01%) 337.32
halflif 3866 ( 0.01%) 244157 ( 0.00%) 63.15
starcra 520 ( 0.00%) 105926 ( 0.00%) 203.70
everque 402 ( 0.00%) 63536 ( 0.00%) 158.05
unreal 228 ( 0.00%) 50486 ( 0.00%) 221.43
quake 102 ( 0.00%) 19731 ( 0.00%) 193.44
cuseeme 39 ( 0.00%) 5185 ( 0.00%) 132.95
other 10735975 ( 31.98%) 4723997191 ( 24.62%) 440.02
icmp 1662802 ( 4.95%) 131210146 ( 0.68%) 78.91
ipip 302 ( 0.00%) 39082 ( 0.00%) 129.41
ipsec 76 ( 0.00%) 12008 ( 0.00%) 158.00
ip6 7522 ( 0.02%) 2400213 ( 0.01%) 319.09
other 10296 ( 0.03%) 3977636 ( 0.02%) 386.33
frag 37917 ( 0.11%) 33826209 ( 0.18%) 892.11
ip6 37352 ( 0.11%) 10045702 ( 0.05%) 268.95
tcp6 11855 ( 0.04%) 5604128 ( 0.03%) 472.72
http(s) 3721 ( 0.01%) 2823101 ( 0.01%) 758.69
http(c) 5210 ( 0.02%) 1078203 ( 0.01%) 206.95
smtp 393 ( 0.00%) 147094 ( 0.00%) 374.28
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 369 ( 0.00%) 31262 ( 0.00%) 84.72
other 2157 ( 0.01%) 1523686 ( 0.01%) 706.39
udp6 19822 ( 0.06%) 3418934 ( 0.02%) 172.48
dns 18120 ( 0.05%) 2956124 ( 0.02%) 163.14
other 1702 ( 0.01%) 462810 ( 0.00%) 271.92
icmp6 5275 ( 0.02%) 664097 ( 0.00%) 125.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 370 ( 0.00%) 354463 ( 0.00%) 958.01
tcpdump file: 200905061400.dump.gz (823.14 MB)