Traffic Trace Info
DumpFile: 200905101400.dump
FileSize: 1595.18MB
Id: 200905101400
StartTime: Sun May 10 14:00:00 2009
EndTime: Sun May 10 14:15:00 2009
TotalTime: 899.94 seconds
TotalCapSize: 1229.57MB CapLen: 96 bytes
# of packets: 23959727 (14256.66MB)
AvgRate: 132.90Mbps stddev:12.74M
IP flow (unique src/dst pair) Information
# of flows: 1280397 (avg. 18.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.7% 1.2% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 811473
Top 10 bandwidth usage (bytes/total in %):
23.3% 5.5% 5.1% 4.7% 4.3% 3.9% 3.2% 3.1% 2.8% 2.7%
# of IPv6 addresses: 977
Top 10 bandwidth usage (bytes/total in %):
31.0% 22.1% 20.3% 20.1% 9.1% 8.9% 6.4% 6.1% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905101400.pktlen.png)
detailed numbers
[ 32- 63]: 6112379
[ 64- 127]: 5612061
[ 128- 255]: 1577422
[ 256- 511]: 743974
[ 512- 1023]: 767636
[ 1024- 2047]: 9146255
Protocol Breakdown
![[protocol breakdown chart]](200905101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23959727 (100.00%) 14949190484 (100.00%) 623.93
ip 23932372 ( 99.89%) 14942164929 ( 99.95%) 624.35
tcp 16585474 ( 69.22%) 12217801333 ( 81.73%) 736.66
http(s) 5571314 ( 23.25%) 7301997223 ( 48.85%) 1310.64
http(c) 3313791 ( 13.83%) 389489607 ( 2.61%) 117.54
squid 574113 ( 2.40%) 430108395 ( 2.88%) 749.17
smtp 248197 ( 1.04%) 53747315 ( 0.36%) 216.55
nntp 233 ( 0.00%) 24568 ( 0.00%) 105.44
ftp 44047 ( 0.18%) 28468577 ( 0.19%) 646.32
pop3 7815 ( 0.03%) 3741919 ( 0.03%) 478.81
imap 2191 ( 0.01%) 876124 ( 0.01%) 399.87
telnet 20463 ( 0.09%) 8716132 ( 0.06%) 425.95
ssh 52816 ( 0.22%) 10385447 ( 0.07%) 196.63
dns 6483 ( 0.03%) 4266879 ( 0.03%) 658.16
bgp 130 ( 0.00%) 32788 ( 0.00%) 252.22
napster 158 ( 0.00%) 17794 ( 0.00%) 112.62
realaud 1515 ( 0.01%) 185800 ( 0.00%) 122.64
rtsp 130449 ( 0.54%) 94773269 ( 0.63%) 726.52
icecast 5617 ( 0.02%) 494770 ( 0.00%) 88.08
hotline 10 ( 0.00%) 600 ( 0.00%) 60.00
other 6606096 ( 27.57%) 3890440682 ( 26.02%) 588.92
udp 6543595 ( 27.31%) 2638543435 ( 17.65%) 403.23
dns 1000114 ( 4.17%) 222561232 ( 1.49%) 222.54
realaud 666 ( 0.00%) 44882 ( 0.00%) 67.39
halflif 178 ( 0.00%) 33766 ( 0.00%) 189.70
starcra 9919 ( 0.04%) 699423 ( 0.00%) 70.51
everque 357 ( 0.00%) 64119 ( 0.00%) 179.61
unreal 168 ( 0.00%) 37187 ( 0.00%) 221.35
quake 46 ( 0.00%) 7722 ( 0.00%) 167.87
cuseeme 17 ( 0.00%) 3416 ( 0.00%) 200.94
other 5524660 ( 23.06%) 2411925629 ( 16.13%) 436.57
icmp 772648 ( 3.22%) 68409103 ( 0.46%) 88.54
ipip 288 ( 0.00%) 35066 ( 0.00%) 121.76
ipsec 72 ( 0.00%) 11376 ( 0.00%) 158.00
ip6 24489 ( 0.10%) 16619284 ( 0.11%) 678.64
other 5806 ( 0.02%) 745332 ( 0.00%) 128.37
frag 68371 ( 0.29%) 53548398 ( 0.36%) 783.20
ip6 27355 ( 0.11%) 7025555 ( 0.05%) 256.83
tcp6 10529 ( 0.04%) 4626809 ( 0.03%) 439.43
http(s) 3420 ( 0.01%) 1759576 ( 0.01%) 514.50
http(c) 4334 ( 0.02%) 819015 ( 0.01%) 188.97
smtp 213 ( 0.00%) 106040 ( 0.00%) 497.84
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 361 ( 0.00%) 30200 ( 0.00%) 83.66
other 2200 ( 0.01%) 1911904 ( 0.01%) 869.05
udp6 12602 ( 0.05%) 1875393 ( 0.01%) 148.82
dns 12569 ( 0.05%) 1871766 ( 0.01%) 148.92
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 32 ( 0.00%) 3520 ( 0.00%) 110.00
icmp6 4194 ( 0.02%) 519273 ( 0.00%) 123.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200905101400.dump.gz (602.26 MB)