Traffic Trace Info
DumpFile: 200905111400.dump
FileSize: 2877.98MB
Id: 200905111400
StartTime: Mon May 11 14:00:00 2009
EndTime: Mon May 11 14:15:01 2009
TotalTime: 900.79 seconds
TotalCapSize: -1889.41MB CapLen: 96 bytes
# of packets: 43999924 (25854.38MB)
AvgRate: 240.78Mbps stddev:19.54M
IP flow (unique src/dst pair) Information
# of flows: 1488841 (avg. 29.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 1.3% 0.9% 0.8% 0.8% 0.8% 0.6% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 925770
Top 10 bandwidth usage (bytes/total in %):
44.0% 7.7% 4.6% 3.5% 2.5% 2.4% 1.9% 1.7% 1.5% 1.5%
# of IPv6 addresses: 1016
Top 10 bandwidth usage (bytes/total in %):
73.9% 27.1% 19.0% 17.9% 9.6% 4.8% 3.7% 3.7% 3.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905111400.pktlen.png)
detailed numbers
[ 32- 63]: 10356477
[ 64- 127]: 11645809
[ 128- 255]: 2423063
[ 256- 511]: 1124096
[ 512- 1023]: 1348796
[ 1024- 2047]: 17101683
Protocol Breakdown
![[protocol breakdown chart]](200905111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43999924 (100.00%) 27110281062 (100.00%) 616.14
ip 43931970 ( 99.85%) 27072204278 ( 99.86%) 616.23
tcp 28114808 ( 63.90%) 19915159693 ( 73.46%) 708.35
http(s) 7939738 ( 18.04%) 10072664698 ( 37.15%) 1268.64
http(c) 5805176 ( 13.19%) 594969111 ( 2.19%) 102.49
squid 676882 ( 1.54%) 413733605 ( 1.53%) 611.23
smtp 418705 ( 0.95%) 154414017 ( 0.57%) 368.79
nntp 190 ( 0.00%) 19173 ( 0.00%) 100.91
ftp 192673 ( 0.44%) 42277316 ( 0.16%) 219.43
pop3 17585 ( 0.04%) 4888050 ( 0.02%) 277.97
imap 22858 ( 0.05%) 2045648 ( 0.01%) 89.49
telnet 17082 ( 0.04%) 3209059 ( 0.01%) 187.86
ssh 209732 ( 0.48%) 186410796 ( 0.69%) 888.80
dns 10258 ( 0.02%) 8688548 ( 0.03%) 847.00
bgp 148 ( 0.00%) 52670 ( 0.00%) 355.88
napster 1893 ( 0.00%) 2520892 ( 0.01%) 1331.69
realaud 874 ( 0.00%) 109290 ( 0.00%) 125.05
rtsp 245283 ( 0.56%) 55066635 ( 0.20%) 224.50
icecast 10585 ( 0.02%) 4157463 ( 0.02%) 392.77
hotline 133 ( 0.00%) 28154 ( 0.00%) 211.68
other 12543813 ( 28.51%) 8369795856 ( 30.87%) 667.24
udp 14991609 ( 34.07%) 7070440464 ( 26.08%) 471.63
dns 1289128 ( 2.93%) 275981748 ( 1.02%) 214.08
realaud 11165 ( 0.03%) 733264 ( 0.00%) 65.68
halflif 10375 ( 0.02%) 630404 ( 0.00%) 60.76
starcra 480 ( 0.00%) 90994 ( 0.00%) 189.57
everque 388 ( 0.00%) 62999 ( 0.00%) 162.37
unreal 156 ( 0.00%) 33846 ( 0.00%) 216.96
quake 211 ( 0.00%) 22524 ( 0.00%) 106.75
cuseeme 15 ( 0.00%) 2253 ( 0.00%) 150.20
other 13672383 ( 31.07%) 6792238232 ( 25.05%) 496.79
icmp 735362 ( 1.67%) 66091950 ( 0.24%) 89.88
ipip 1119 ( 0.00%) 179442 ( 0.00%) 160.36
ipsec 4 ( 0.00%) 400 ( 0.00%) 100.00
ip6 26663 ( 0.06%) 6699916 ( 0.02%) 251.28
other 62405 ( 0.14%) 13632413 ( 0.05%) 218.45
frag 60143 ( 0.14%) 44850942 ( 0.17%) 745.74
ip6 67954 ( 0.15%) 38076784 ( 0.14%) 560.33
tcp6 46766 ( 0.11%) 34765553 ( 0.13%) 743.39
http(s) 4250 ( 0.01%) 2976415 ( 0.01%) 700.33
http(c) 14025 ( 0.03%) 1567962 ( 0.01%) 111.80
smtp 850 ( 0.00%) 312828 ( 0.00%) 368.03
imap 299 ( 0.00%) 351462 ( 0.00%) 1175.46
bgp 373 ( 0.00%) 32163 ( 0.00%) 86.23
other 26969 ( 0.06%) 29524723 ( 0.11%) 1094.77
udp6 17122 ( 0.04%) 2781985 ( 0.01%) 162.48
dns 17112 ( 0.04%) 2780885 ( 0.01%) 162.51
other 10 ( 0.00%) 1100 ( 0.00%) 110.00
icmp6 4030 ( 0.01%) 519055 ( 0.00%) 128.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 6111 ( 0.00%) 1018.50
tcpdump file: 200905111400.dump.gz (1106.77 MB)