Traffic Trace Info
DumpFile: 200905151400.dump
FileSize: 2389.49MB
Id: 200905151400
StartTime: Fri May 15 14:00:01 2009
EndTime: Fri May 15 14:15:00 2009
TotalTime: 899.54 seconds
TotalCapSize: 1856.49MB CapLen: 96 bytes
# of packets: 34929947 (20891.05MB)
AvgRate: 194.83Mbps stddev:20.09M
IP flow (unique src/dst pair) Information
# of flows: 1199904 (avg. 29.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.0% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 727613
Top 10 bandwidth usage (bytes/total in %):
20.5% 7.1% 6.2% 4.2% 3.8% 2.6% 2.5% 2.4% 1.8% 1.8%
# of IPv6 addresses: 1321
Top 10 bandwidth usage (bytes/total in %):
23.8% 21.1% 17.9% 17.5% 16.5% 11.8% 11.2% 11.2% 5.6% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905151400.pktlen.png)
detailed numbers
[ 32- 63]: 8526534
[ 64- 127]: 9017241
[ 128- 255]: 1701626
[ 256- 511]: 1006246
[ 512- 1023]: 1183088
[ 1024- 2047]: 13495212
Protocol Breakdown
![[protocol breakdown chart]](200905151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34929947 (100.00%) 21905857902 (100.00%) 627.14
ip 34857849 ( 99.79%) 21893218211 ( 99.94%) 628.07
tcp 26017376 ( 74.48%) 18135886083 ( 82.79%) 697.07
http(s) 8482628 ( 24.28%) 11260707215 ( 51.41%) 1327.50
http(c) 6901499 ( 19.76%) 811635093 ( 3.71%) 117.60
squid 1205812 ( 3.45%) 687745806 ( 3.14%) 570.36
smtp 314347 ( 0.90%) 96510543 ( 0.44%) 307.02
nntp 120 ( 0.00%) 11060 ( 0.00%) 92.17
ftp 59437 ( 0.17%) 37818014 ( 0.17%) 636.27
pop3 20600 ( 0.06%) 13537098 ( 0.06%) 657.14
imap 4693 ( 0.01%) 466002 ( 0.00%) 99.30
telnet 7217 ( 0.02%) 854545 ( 0.00%) 118.41
ssh 977461 ( 2.80%) 159895810 ( 0.73%) 163.58
dns 4775 ( 0.01%) 4027850 ( 0.02%) 843.53
bgp 188 ( 0.00%) 83191 ( 0.00%) 442.51
napster 100 ( 0.00%) 14694 ( 0.00%) 146.94
realaud 522 ( 0.00%) 61376 ( 0.00%) 117.58
rtsp 293595 ( 0.84%) 85437335 ( 0.39%) 291.00
icecast 10684 ( 0.03%) 923734 ( 0.00%) 86.46
hotline 9 ( 0.00%) 1062 ( 0.00%) 118.00
other 7733684 ( 22.14%) 4976155355 ( 22.72%) 643.44
udp 8024360 ( 22.97%) 3646002452 ( 16.64%) 454.37
dns 1436855 ( 4.11%) 374128841 ( 1.71%) 260.38
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 5608 ( 0.02%) 381623 ( 0.00%) 68.05
halflif 1982 ( 0.01%) 125458 ( 0.00%) 63.30
starcra 265 ( 0.00%) 51492 ( 0.00%) 194.31
everque 7967 ( 0.02%) 4107487 ( 0.02%) 515.56
unreal 106 ( 0.00%) 24731 ( 0.00%) 233.31
quake 42 ( 0.00%) 5281 ( 0.00%) 125.74
cuseeme 10 ( 0.00%) 875 ( 0.00%) 87.50
other 6567459 ( 18.80%) 3262153054 ( 14.89%) 496.71
icmp 761644 ( 2.18%) 97486771 ( 0.45%) 128.00
ipip 1374 ( 0.00%) 203504 ( 0.00%) 148.11
ip6 10475 ( 0.03%) 1329930 ( 0.01%) 126.96
other 42620 ( 0.12%) 12309471 ( 0.06%) 288.82
frag 74633 ( 0.21%) 100940669 ( 0.46%) 1352.49
ip6 72098 ( 0.21%) 12639691 ( 0.06%) 175.31
tcp6 49277 ( 0.14%) 7281070 ( 0.03%) 147.76
http(s) 3334 ( 0.01%) 1695754 ( 0.01%) 508.62
http(c) 3998 ( 0.01%) 769839 ( 0.00%) 192.56
smtp 781 ( 0.00%) 280779 ( 0.00%) 359.51
bgp 413 ( 0.00%) 37819 ( 0.00%) 91.57
other 40751 ( 0.12%) 4496879 ( 0.02%) 110.35
udp6 15512 ( 0.04%) 2442593 ( 0.01%) 157.46
dns 15153 ( 0.04%) 2396543 ( 0.01%) 158.16
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
other 357 ( 0.00%) 45836 ( 0.00%) 128.39
icmp6 7274 ( 0.02%) 2908740 ( 0.01%) 399.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 3208 ( 0.00%) 641.60
tcpdump file: 200905151400.dump.gz (878.30 MB)