Traffic Trace Info
DumpFile: 200905211400.dump
FileSize: 2327.39MB
Id: 200905211400
StartTime: Thu May 21 14:00:01 2009
EndTime: Thu May 21 14:15:00 2009
TotalTime: 899.22 seconds
TotalCapSize: 1791.52MB CapLen: 96 bytes
# of packets: 35117894 (20463.16MB)
AvgRate: 190.90Mbps stddev:45.08M
IP flow (unique src/dst pair) Information
# of flows: 1571122 (avg. 22.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.3% 1.2% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 934231
Top 10 bandwidth usage (bytes/total in %):
36.1% 5.3% 5.3% 3.8% 3.3% 3.3% 2.7% 2.4% 2.2% 1.8%
# of IPv6 addresses: 1932
Top 10 bandwidth usage (bytes/total in %):
15.9% 13.3% 11.7% 9.7% 9.4% 9.4% 9.0% 8.3% 6.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905211400.pktlen.png)
detailed numbers
[ 32- 63]: 7602417
[ 64- 127]: 9782194
[ 128- 255]: 2160554
[ 256- 511]: 972983
[ 512- 1023]: 1140505
[ 1024- 2047]: 13459241
Protocol Breakdown
![[protocol breakdown chart]](200905211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35117894 (100.00%) 21457174959 (100.00%) 611.00
ip 35072491 ( 99.87%) 21444771364 ( 99.94%) 611.44
tcp 22536631 ( 64.17%) 16183990341 ( 75.42%) 718.12
http(s) 6115307 ( 17.41%) 7765389993 ( 36.19%) 1269.83
http(c) 4592121 ( 13.08%) 726627969 ( 3.39%) 158.23
squid 696047 ( 1.98%) 418202615 ( 1.95%) 600.83
smtp 499391 ( 1.42%) 162862179 ( 0.76%) 326.12
nntp 139 ( 0.00%) 13657 ( 0.00%) 98.25
ftp 328439 ( 0.94%) 184112086 ( 0.86%) 560.57
pop3 16848 ( 0.05%) 4009266 ( 0.02%) 237.97
imap 2313 ( 0.01%) 322981 ( 0.00%) 139.64
telnet 8907 ( 0.03%) 736407 ( 0.00%) 82.68
ssh 29656 ( 0.08%) 7448330 ( 0.03%) 251.16
dns 7823 ( 0.02%) 4147278 ( 0.02%) 530.14
bgp 142 ( 0.00%) 52869 ( 0.00%) 372.32
napster 582 ( 0.00%) 43306 ( 0.00%) 74.41
realaud 1560 ( 0.00%) 202318 ( 0.00%) 129.69
rtsp 212088 ( 0.60%) 138230476 ( 0.64%) 651.76
icecast 49087 ( 0.14%) 43265473 ( 0.20%) 881.40
hotline 60 ( 0.00%) 3781 ( 0.00%) 63.02
other 9975665 ( 28.41%) 6728156390 ( 31.36%) 674.46
udp 11734063 ( 33.41%) 5180529277 ( 24.14%) 441.49
dns 1238198 ( 3.53%) 268411944 ( 1.25%) 216.78
realaud 438 ( 0.00%) 42506 ( 0.00%) 97.05
halflif 5305 ( 0.02%) 336966 ( 0.00%) 63.52
starcra 447 ( 0.00%) 85099 ( 0.00%) 190.38
everque 3242 ( 0.01%) 1548828 ( 0.01%) 477.74
unreal 196 ( 0.00%) 37760 ( 0.00%) 192.65
quake 35 ( 0.00%) 5262 ( 0.00%) 150.34
cuseeme 28 ( 0.00%) 2620 ( 0.00%) 93.57
other 10480737 ( 29.84%) 4909659006 ( 22.88%) 468.45
icmp 754785 ( 2.15%) 70121021 ( 0.33%) 92.90
ipip 1324 ( 0.00%) 218286 ( 0.00%) 164.87
ipsec 3518 ( 0.01%) 1693428 ( 0.01%) 481.36
ip6 10691 ( 0.03%) 4038283 ( 0.02%) 377.73
other 31479 ( 0.09%) 4180728 ( 0.02%) 132.81
frag 43090 ( 0.12%) 34024367 ( 0.16%) 789.61
ip6 45403 ( 0.13%) 12403595 ( 0.06%) 273.19
tcp6 14142 ( 0.04%) 6352741 ( 0.03%) 449.21
http(s) 2960 ( 0.01%) 2665375 ( 0.01%) 900.46
http(c) 3835 ( 0.01%) 712400 ( 0.00%) 185.76
smtp 2443 ( 0.01%) 1144644 ( 0.01%) 468.54
ssh 106 ( 0.00%) 24284 ( 0.00%) 229.09
bgp 417 ( 0.00%) 40618 ( 0.00%) 97.41
other 4381 ( 0.01%) 1765420 ( 0.01%) 402.97
udp6 22995 ( 0.07%) 3884570 ( 0.02%) 168.93
dns 21559 ( 0.06%) 3532260 ( 0.02%) 163.84
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1434 ( 0.00%) 352095 ( 0.00%) 245.53
icmp6 6262 ( 0.02%) 753273 ( 0.00%) 120.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1974 ( 0.01%) 1408931 ( 0.01%) 713.74
tcpdump file: 200905211400.dump.gz (883.26 MB)