Traffic Trace Info
DumpFile: 200905191400.dump
FileSize: 2448.80MB
Id: 200905191400
StartTime: Tue May 19 14:00:00 2009
EndTime: Tue May 19 14:15:01 2009
TotalTime: 900.11 seconds
TotalCapSize: 1886.34MB CapLen: 96 bytes
# of packets: 36860624 (23014.61MB)
AvgRate: 214.49Mbps stddev:18.52M
IP flow (unique src/dst pair) Information
# of flows: 1550084 (avg. 23.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 2.0% 1.7% 0.7% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 943653
Top 10 bandwidth usage (bytes/total in %):
35.6% 5.4% 4.2% 4.1% 3.8% 2.8% 2.7% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1171
Top 10 bandwidth usage (bytes/total in %):
22.8% 19.3% 15.3% 10.7% 9.9% 9.9% 7.6% 7.3% 7.0% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905191400.pktlen.png)
detailed numbers
[ 32- 63]: 7982594
[ 64- 127]: 9406085
[ 128- 255]: 2002002
[ 256- 511]: 1056974
[ 512- 1023]: 1296209
[ 1024- 2047]: 15116760
Protocol Breakdown
![[protocol breakdown chart]](200905191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36860624 (100.00%) 24132562880 (100.00%) 654.70
ip 36818481 ( 99.89%) 24120811331 ( 99.95%) 655.13
tcp 24941945 ( 67.67%) 18915726280 ( 78.38%) 758.39
http(s) 9082848 ( 24.64%) 11860835488 ( 49.15%) 1305.85
http(c) 5842259 ( 15.85%) 657835874 ( 2.73%) 112.60
squid 405351 ( 1.10%) 282692804 ( 1.17%) 697.40
smtp 416804 ( 1.13%) 210108942 ( 0.87%) 504.10
nntp 421 ( 0.00%) 56717 ( 0.00%) 134.72
ftp 58690 ( 0.16%) 21605087 ( 0.09%) 368.12
pop3 17201 ( 0.05%) 5269949 ( 0.02%) 306.37
imap 3911 ( 0.01%) 1517938 ( 0.01%) 388.12
telnet 5708 ( 0.02%) 824558 ( 0.00%) 144.46
ssh 23472 ( 0.06%) 5592696 ( 0.02%) 238.27
dns 4666 ( 0.01%) 4008521 ( 0.02%) 859.09
bgp 163 ( 0.00%) 60312 ( 0.00%) 370.01
napster 867 ( 0.00%) 337208 ( 0.00%) 388.94
realaud 1790 ( 0.00%) 227868 ( 0.00%) 127.30
rtsp 172850 ( 0.47%) 51252535 ( 0.21%) 296.51
icecast 16277 ( 0.04%) 8616035 ( 0.04%) 529.34
hotline 8 ( 0.00%) 496 ( 0.00%) 62.00
other 8888639 ( 24.11%) 5804882052 ( 24.05%) 653.07
udp 11111782 ( 30.15%) 5115731053 ( 21.20%) 460.39
dns 1310158 ( 3.55%) 266239574 ( 1.10%) 203.21
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 20575 ( 0.06%) 7619272 ( 0.03%) 370.32
halflif 4080 ( 0.01%) 266403 ( 0.00%) 65.29
starcra 541 ( 0.00%) 101911 ( 0.00%) 188.38
everque 19197 ( 0.05%) 17427822 ( 0.07%) 907.84
unreal 299 ( 0.00%) 71203 ( 0.00%) 238.14
quake 51 ( 0.00%) 7983 ( 0.00%) 156.53
cuseeme 20 ( 0.00%) 3170 ( 0.00%) 158.50
other 9755388 ( 26.47%) 4823697385 ( 19.99%) 494.46
icmp 650751 ( 1.77%) 59779832 ( 0.25%) 91.86
ipip 1374 ( 0.00%) 207568 ( 0.00%) 151.07
ipsec 5140 ( 0.01%) 1804208 ( 0.01%) 351.01
ip6 19641 ( 0.05%) 12760873 ( 0.05%) 649.71
other 87848 ( 0.24%) 14801517 ( 0.06%) 168.49
frag 25915 ( 0.07%) 20581129 ( 0.09%) 794.18
ip6 42143 ( 0.11%) 11751549 ( 0.05%) 278.85
tcp6 13054 ( 0.04%) 5297261 ( 0.02%) 405.80
http(s) 3557 ( 0.01%) 2108305 ( 0.01%) 592.72
http(c) 3841 ( 0.01%) 782200 ( 0.00%) 203.64
smtp 1776 ( 0.00%) 884566 ( 0.00%) 498.07
ssh 30 ( 0.00%) 2628 ( 0.00%) 87.60
bgp 410 ( 0.00%) 38526 ( 0.00%) 93.97
other 3440 ( 0.01%) 1481036 ( 0.01%) 430.53
udp6 21069 ( 0.06%) 3419507 ( 0.01%) 162.30
dns 21047 ( 0.06%) 3417041 ( 0.01%) 162.35
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 19 ( 0.00%) 2137 ( 0.00%) 112.47
icmp6 7983 ( 0.02%) 3025240 ( 0.01%) 378.96
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 5325 ( 0.00%) 887.50
tcpdump file: 200905191400.dump.gz (916.68 MB)