Traffic Trace Info
DumpFile: 200905141400.dump
FileSize: 2191.11MB
Id: 200905141400
StartTime: Thu May 14 14:00:01 2009
EndTime: Thu May 14 14:15:00 2009
TotalTime: 899.35 seconds
TotalCapSize: 1695.57MB CapLen: 96 bytes
# of packets: 32475025 (20633.03MB)
AvgRate: 192.46Mbps stddev:15.88M
IP flow (unique src/dst pair) Information
# of flows: 1503569 (avg. 21.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 2.0% 1.8% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 922813
Top 10 bandwidth usage (bytes/total in %):
22.6% 6.6% 3.8% 3.8% 3.4% 2.9% 2.4% 2.4% 2.2% 2.1%
# of IPv6 addresses: 2159
Top 10 bandwidth usage (bytes/total in %):
14.8% 12.1% 11.9% 10.5% 9.2% 9.2% 8.1% 6.5% 5.7% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905141400.pktlen.png)
detailed numbers
[ 32- 63]: 7694952
[ 64- 127]: 7027879
[ 128- 255]: 2003624
[ 256- 511]: 1195309
[ 512- 1023]: 1125869
[ 1024- 2047]: 13427392
Protocol Breakdown
![[protocol breakdown chart]](200905141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32475025 (100.00%) 21635300913 (100.00%) 666.21
ip 32434270 ( 99.87%) 21623479571 ( 99.95%) 666.69
tcp 23514530 ( 72.41%) 17746496970 ( 82.03%) 754.70
http(s) 8200592 ( 25.25%) 10871123293 ( 50.25%) 1325.65
http(c) 5544422 ( 17.07%) 766123876 ( 3.54%) 138.18
squid 915726 ( 2.82%) 470346896 ( 2.17%) 513.63
smtp 356287 ( 1.10%) 105933233 ( 0.49%) 297.33
nntp 27 ( 0.00%) 2269 ( 0.00%) 84.04
ftp 72611 ( 0.22%) 28716891 ( 0.13%) 395.49
pop3 23849 ( 0.07%) 4638754 ( 0.02%) 194.51
imap 2374 ( 0.01%) 1053105 ( 0.00%) 443.60
telnet 8774 ( 0.03%) 1156145 ( 0.01%) 131.77
ssh 18039 ( 0.06%) 3898008 ( 0.02%) 216.09
dns 4705 ( 0.01%) 3982620 ( 0.02%) 846.47
bgp 144 ( 0.00%) 52258 ( 0.00%) 362.90
napster 517 ( 0.00%) 465654 ( 0.00%) 900.68
realaud 625 ( 0.00%) 76827 ( 0.00%) 122.92
rtsp 188668 ( 0.58%) 31172803 ( 0.14%) 165.23
icecast 11086 ( 0.03%) 955715 ( 0.00%) 86.21
hotline 15 ( 0.00%) 1290 ( 0.00%) 86.00
other 8166064 ( 25.15%) 5456797033 ( 25.22%) 668.23
udp 7989760 ( 24.60%) 3757723462 ( 17.37%) 470.32
dns 1360820 ( 4.19%) 271635202 ( 1.26%) 199.61
realaud 15529 ( 0.05%) 7225119 ( 0.03%) 465.27
halflif 2641 ( 0.01%) 172722 ( 0.00%) 65.40
starcra 394 ( 0.00%) 76154 ( 0.00%) 193.28
everque 306 ( 0.00%) 50400 ( 0.00%) 164.71
unreal 89 ( 0.00%) 13667 ( 0.00%) 153.56
quake 62 ( 0.00%) 10237 ( 0.00%) 165.11
cuseeme 9 ( 0.00%) 1571 ( 0.00%) 174.56
other 6606984 ( 20.34%) 3478150286 ( 16.08%) 526.44
icmp 789593 ( 2.43%) 68971513 ( 0.32%) 87.35
ipip 1685 ( 0.01%) 252546 ( 0.00%) 149.88
ip6 27667 ( 0.09%) 13978100 ( 0.06%) 505.23
other 111035 ( 0.34%) 36056980 ( 0.17%) 324.74
frag 11495 ( 0.04%) 9590263 ( 0.04%) 834.30
ip6 40755 ( 0.13%) 11821342 ( 0.05%) 290.06
tcp6 16071 ( 0.05%) 7834711 ( 0.04%) 487.51
http(s) 5594 ( 0.02%) 4957288 ( 0.02%) 886.18
http(c) 4242 ( 0.01%) 737465 ( 0.00%) 173.85
smtp 368 ( 0.00%) 199011 ( 0.00%) 540.79
ssh 78 ( 0.00%) 16324 ( 0.00%) 209.28
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 396 ( 0.00%) 35824 ( 0.00%) 90.46
other 5389 ( 0.02%) 1888342 ( 0.01%) 350.41
udp6 19075 ( 0.06%) 3248787 ( 0.02%) 170.32
dns 16930 ( 0.05%) 2649509 ( 0.01%) 156.50
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2144 ( 0.01%) 599175 ( 0.00%) 279.47
icmp6 5499 ( 0.02%) 678095 ( 0.00%) 123.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 80 ( 0.00%) 55669 ( 0.00%) 695.86
tcpdump file: 200905141400.dump.gz (804.21 MB)