Traffic Trace Info
DumpFile: 200905161400.dump
FileSize: 1661.66MB
Id: 200905161400
StartTime: Sat May 16 14:00:01 2009
EndTime: Sat May 16 14:15:01 2009
TotalTime: 899.97 seconds
TotalCapSize: 1276.98MB CapLen: 96 bytes
# of packets: 25210102 (15509.29MB)
AvgRate: 144.56Mbps stddev:13.45M
IP flow (unique src/dst pair) Information
# of flows: 1281102 (avg. 19.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 1.8% 1.7% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 790174
Top 10 bandwidth usage (bytes/total in %):
28.9% 6.3% 5.3% 4.2% 3.5% 2.6% 2.5% 2.3% 1.9% 1.8%
# of IPv6 addresses: 1064
Top 10 bandwidth usage (bytes/total in %):
23.4% 19.8% 19.5% 13.7% 12.2% 12.2% 11.9% 11.9% 6.4% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905161400.pktlen.png)
detailed numbers
[ 32- 63]: 6212912
[ 64- 127]: 5633793
[ 128- 255]: 1778126
[ 256- 511]: 762461
[ 512- 1023]: 729979
[ 1024- 2047]: 10092831
Protocol Breakdown
![[protocol breakdown chart]](200905161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25210102 (100.00%) 16262665173 (100.00%) 645.09
ip 25174365 ( 99.86%) 16251257839 ( 99.93%) 645.55
tcp 16582110 ( 65.78%) 12442417078 ( 76.51%) 750.35
http(s) 5508259 ( 21.85%) 6965968453 ( 42.83%) 1264.64
http(c) 3879800 ( 15.39%) 1080538070 ( 6.64%) 278.50
squid 503646 ( 2.00%) 346876265 ( 2.13%) 688.73
smtp 294924 ( 1.17%) 79654685 ( 0.49%) 270.09
nntp 6 ( 0.00%) 601 ( 0.00%) 100.17
ftp 85865 ( 0.34%) 55000117 ( 0.34%) 640.54
pop3 18173 ( 0.07%) 4106095 ( 0.03%) 225.94
imap 1449 ( 0.01%) 630463 ( 0.00%) 435.10
telnet 7652 ( 0.03%) 5633774 ( 0.03%) 736.25
ssh 108284 ( 0.43%) 51196714 ( 0.31%) 472.80
dns 4677 ( 0.02%) 4281870 ( 0.03%) 915.52
bgp 140 ( 0.00%) 38210 ( 0.00%) 272.93
napster 6302 ( 0.02%) 417263 ( 0.00%) 66.21
realaud 1244 ( 0.00%) 150001 ( 0.00%) 120.58
rtsp 105094 ( 0.42%) 31069788 ( 0.19%) 295.64
icecast 4224 ( 0.02%) 1557908 ( 0.01%) 368.82
hotline 4 ( 0.00%) 887 ( 0.00%) 221.75
other 6052329 ( 24.01%) 3815246234 ( 23.46%) 630.38
udp 7723317 ( 30.64%) 3724807085 ( 22.90%) 482.28
dns 1174424 ( 4.66%) 229251113 ( 1.41%) 195.20
rip 4 ( 0.00%) 653 ( 0.00%) 163.25
realaud 5919 ( 0.02%) 405409 ( 0.00%) 68.49
halflif 112 ( 0.00%) 17829 ( 0.00%) 159.19
starcra 418 ( 0.00%) 85749 ( 0.00%) 205.14
everque 777 ( 0.00%) 119406 ( 0.00%) 153.68
unreal 149 ( 0.00%) 31306 ( 0.00%) 210.11
quake 54 ( 0.00%) 9333 ( 0.00%) 172.83
cuseeme 24 ( 0.00%) 3750 ( 0.00%) 156.25
other 6537867 ( 25.93%) 3494373982 ( 21.49%) 534.48
icmp 849035 ( 3.37%) 78575725 ( 0.48%) 92.55
ipip 296 ( 0.00%) 37332 ( 0.00%) 126.12
ip6 13181 ( 0.05%) 4565992 ( 0.03%) 346.41
other 6426 ( 0.03%) 854627 ( 0.01%) 133.00
frag 42664 ( 0.17%) 32466358 ( 0.20%) 760.98
ip6 35737 ( 0.14%) 11407334 ( 0.07%) 319.20
tcp6 13050 ( 0.05%) 6207895 ( 0.04%) 475.70
http(s) 4710 ( 0.02%) 3450796 ( 0.02%) 732.65
http(c) 4021 ( 0.02%) 817263 ( 0.01%) 203.25
smtp 580 ( 0.00%) 239556 ( 0.00%) 413.03
ssh 30 ( 0.00%) 2580 ( 0.00%) 86.00
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 410 ( 0.00%) 37346 ( 0.00%) 91.09
other 3294 ( 0.01%) 1659810 ( 0.01%) 503.89
udp6 15027 ( 0.06%) 2230455 ( 0.01%) 148.43
dns 14842 ( 0.06%) 2215976 ( 0.01%) 149.30
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 183 ( 0.00%) 14251 ( 0.00%) 77.87
icmp6 7623 ( 0.03%) 2961948 ( 0.02%) 388.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7 ( 0.00%) 2956 ( 0.00%) 422.29
tcpdump file: 200905161400.dump.gz (617.45 MB)