Traffic Trace Info
DumpFile: 200905091400.dump
FileSize: 1644.24MB
Id: 200905091400
StartTime: Sat May 9 14:00:01 2009
EndTime: Sat May 9 14:15:00 2009
TotalTime: 899.46 seconds
TotalCapSize: 1275.73MB CapLen: 96 bytes
# of packets: 24147426 (15191.87MB)
AvgRate: 141.69Mbps stddev:10.97M
IP flow (unique src/dst pair) Information
# of flows: 1277345 (avg. 18.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.3% 5.2% 1.2% 1.0% 0.7% 0.6% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 772647
Top 10 bandwidth usage (bytes/total in %):
24.1% 18.3% 18.3% 5.6% 5.3% 4.5% 3.2% 2.9% 2.5% 2.5%
# of IPv6 addresses: 2115
Top 10 bandwidth usage (bytes/total in %):
27.1% 19.3% 16.5% 16.5% 13.6% 7.9% 7.9% 4.1% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905091400.pktlen.png)
detailed numbers
[ 32- 63]: 6218742
[ 64- 127]: 5278656
[ 128- 255]: 1433564
[ 256- 511]: 626342
[ 512- 1023]: 823656
[ 1024- 2047]: 9766466
Protocol Breakdown
![[protocol breakdown chart]](200905091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24147426 (100.00%) 15929833918 (100.00%) 659.69
ip 24116359 ( 99.87%) 15921394629 ( 99.95%) 660.19
tcp 17810603 ( 73.76%) 13942017328 ( 87.52%) 782.79
http(s) 4553473 ( 18.86%) 5632053676 ( 35.36%) 1236.87
http(c) 3301088 ( 13.67%) 409848030 ( 2.57%) 124.16
squid 699767 ( 2.90%) 554221290 ( 3.48%) 792.01
smtp 296503 ( 1.23%) 69623748 ( 0.44%) 234.82
nntp 249 ( 0.00%) 32380 ( 0.00%) 130.04
ftp 77251 ( 0.32%) 49280924 ( 0.31%) 637.93
pop3 7712 ( 0.03%) 2251873 ( 0.01%) 292.00
imap 11302 ( 0.05%) 14138042 ( 0.09%) 1250.93
telnet 7473 ( 0.03%) 1481792 ( 0.01%) 198.29
ssh 2114512 ( 8.76%) 2929684478 ( 18.39%) 1385.51
dns 4204 ( 0.02%) 3943773 ( 0.02%) 938.10
bgp 153 ( 0.00%) 46965 ( 0.00%) 306.96
napster 1275 ( 0.01%) 746722 ( 0.00%) 585.66
realaud 1063 ( 0.00%) 137945 ( 0.00%) 129.77
rtsp 129851 ( 0.54%) 70456781 ( 0.44%) 542.60
icecast 21415 ( 0.09%) 16429635 ( 0.10%) 767.20
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 6583279 ( 27.26%) 4187614320 ( 26.29%) 636.10
udp 5388351 ( 22.31%) 1896670720 ( 11.91%) 351.99
dns 1083633 ( 4.49%) 208567818 ( 1.31%) 192.47
realaud 1519 ( 0.01%) 143936 ( 0.00%) 94.76
halflif 336 ( 0.00%) 39969 ( 0.00%) 118.96
starcra 372 ( 0.00%) 73571 ( 0.00%) 197.77
everque 390 ( 0.00%) 64780 ( 0.00%) 166.10
unreal 97 ( 0.00%) 15030 ( 0.00%) 154.95
quake 78 ( 0.00%) 15599 ( 0.00%) 199.99
cuseeme 19 ( 0.00%) 2187 ( 0.00%) 115.11
other 4300486 ( 17.81%) 1685699349 ( 10.58%) 391.98
icmp 863621 ( 3.58%) 73527682 ( 0.46%) 85.14
ipip 296 ( 0.00%) 37138 ( 0.00%) 125.47
ipsec 74 ( 0.00%) 11692 ( 0.00%) 158.00
ip6 10625 ( 0.04%) 2810256 ( 0.02%) 264.49
other 42789 ( 0.18%) 6319813 ( 0.04%) 147.70
frag 14958 ( 0.06%) 20294254 ( 0.13%) 1356.75
ip6 31067 ( 0.13%) 8439289 ( 0.05%) 271.65
tcp6 10247 ( 0.04%) 4594982 ( 0.03%) 448.42
http(s) 3700 ( 0.02%) 1931947 ( 0.01%) 522.15
http(c) 3942 ( 0.02%) 810948 ( 0.01%) 205.72
smtp 173 ( 0.00%) 47571 ( 0.00%) 274.98
ftp 151 ( 0.00%) 13838 ( 0.00%) 91.64
imap 281 ( 0.00%) 282595 ( 0.00%) 1005.68
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 354 ( 0.00%) 29443 ( 0.00%) 83.17
other 1642 ( 0.01%) 1478183 ( 0.01%) 900.23
udp6 15148 ( 0.06%) 2619469 ( 0.02%) 172.93
dns 13490 ( 0.06%) 2062643 ( 0.01%) 152.90
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 1656 ( 0.01%) 556143 ( 0.00%) 335.84
icmp6 5058 ( 0.02%) 664206 ( 0.00%) 131.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 584 ( 0.00%) 556552 ( 0.00%) 953.00
tcpdump file: 200905091400.dump.gz (601.18 MB)