Traffic Trace Info
DumpFile: 200905171400.dump
FileSize: 1524.93MB
Id: 200905171400
StartTime: Sun May 17 14:00:01 2009
EndTime: Sun May 17 14:15:01 2009
TotalTime: 899.97 seconds
TotalCapSize: 1176.75MB CapLen: 96 bytes
# of packets: 22817920 (14085.02MB)
AvgRate: 131.28Mbps stddev:11.77M
IP flow (unique src/dst pair) Information
# of flows: 1369429 (avg. 16.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.8% 2.8% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 829471
Top 10 bandwidth usage (bytes/total in %):
27.5% 5.7% 5.1% 5.0% 4.9% 4.8% 4.7% 3.1% 3.1% 2.8%
# of IPv6 addresses: 2447
Top 10 bandwidth usage (bytes/total in %):
23.2% 22.5% 19.5% 15.9% 12.2% 12.2% 9.3% 7.3% 5.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905171400.pktlen.png)
detailed numbers
[ 32- 63]: 5003639
[ 64- 127]: 5409066
[ 128- 255]: 1758503
[ 256- 511]: 755915
[ 512- 1023]: 920753
[ 1024- 2047]: 8970044
Protocol Breakdown
![[protocol breakdown chart]](200905171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22817920 (100.00%) 14769217950 (100.00%) 647.26
ip 22776148 ( 99.82%) 14757584205 ( 99.92%) 647.94
tcp 15989621 ( 70.07%) 12429223413 ( 84.16%) 777.33
http(s) 5272073 ( 23.10%) 6594406654 ( 44.65%) 1250.82
http(c) 2421951 ( 10.61%) 272480110 ( 1.84%) 112.50
squid 563278 ( 2.47%) 332532940 ( 2.25%) 590.35
smtp 250234 ( 1.10%) 75988384 ( 0.51%) 303.67
nntp 82 ( 0.00%) 6942 ( 0.00%) 84.66
ftp 71596 ( 0.31%) 25626187 ( 0.17%) 357.93
pop3 8629 ( 0.04%) 5682820 ( 0.04%) 658.57
imap 2554 ( 0.01%) 745040 ( 0.01%) 291.71
telnet 3324 ( 0.01%) 291295 ( 0.00%) 87.63
ssh 41766 ( 0.18%) 5154311 ( 0.03%) 123.41
dns 4129 ( 0.02%) 3965771 ( 0.03%) 960.47
bgp 180 ( 0.00%) 69589 ( 0.00%) 386.61
napster 93 ( 0.00%) 16942 ( 0.00%) 182.17
realaud 2981 ( 0.01%) 545741 ( 0.00%) 183.07
rtsp 87775 ( 0.38%) 96391419 ( 0.65%) 1098.16
icecast 5848 ( 0.03%) 995436 ( 0.01%) 170.22
hotline 14 ( 0.00%) 4297 ( 0.00%) 306.93
other 7253091 ( 31.79%) 5014318155 ( 33.95%) 691.34
udp 5966767 ( 26.15%) 2247476394 ( 15.22%) 376.67
dns 1010050 ( 4.43%) 200999367 ( 1.36%) 199.00
rip 18 ( 0.00%) 2736 ( 0.00%) 152.00
realaud 2061 ( 0.01%) 141263 ( 0.00%) 68.54
halflif 55 ( 0.00%) 9000 ( 0.00%) 163.64
starcra 441 ( 0.00%) 86176 ( 0.00%) 195.41
everque 409 ( 0.00%) 63584 ( 0.00%) 155.46
unreal 164 ( 0.00%) 35727 ( 0.00%) 217.85
quake 49 ( 0.00%) 7968 ( 0.00%) 162.61
cuseeme 21 ( 0.00%) 3391 ( 0.00%) 161.48
other 4952333 ( 21.70%) 2045972944 ( 13.85%) 413.13
icmp 789958 ( 3.46%) 69717240 ( 0.47%) 88.25
ipip 1280 ( 0.01%) 190478 ( 0.00%) 148.81
ip6 22584 ( 0.10%) 10223791 ( 0.07%) 452.70
other 5938 ( 0.03%) 752889 ( 0.01%) 126.79
frag 5704 ( 0.02%) 4492565 ( 0.03%) 787.62
ip6 41772 ( 0.18%) 11633745 ( 0.08%) 278.51
tcp6 16476 ( 0.07%) 5267752 ( 0.04%) 319.72
http(s) 4247 ( 0.02%) 2042145 ( 0.01%) 480.84
http(c) 4838 ( 0.02%) 1017673 ( 0.01%) 210.35
squid 5 ( 0.00%) 944 ( 0.00%) 188.80
smtp 746 ( 0.00%) 331587 ( 0.00%) 444.49
ssh 30 ( 0.00%) 2580 ( 0.00%) 86.00
bgp 417 ( 0.00%) 38948 ( 0.00%) 93.40
other 6193 ( 0.03%) 1833875 ( 0.01%) 296.12
udp6 18831 ( 0.08%) 3375832 ( 0.02%) 179.27
dns 15150 ( 0.07%) 2323470 ( 0.02%) 153.36
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 3679 ( 0.02%) 1052154 ( 0.01%) 285.99
icmp6 6275 ( 0.03%) 2836218 ( 0.02%) 451.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 160 ( 0.00%) 149863 ( 0.00%) 936.64
tcpdump file: 200905171400.dump.gz (578.68 MB)