Traffic Trace Info
DumpFile: 200905221400.dump
FileSize: 2677.75MB
Id: 200905221400
StartTime: Fri May 22 14:00:01 2009
EndTime: Fri May 22 14:15:01 2009
TotalTime: 900.13 seconds
TotalCapSize: -2029.64MB CapLen: 96 bytes
# of packets: 40067015 (25720.30MB)
AvgRate: 239.69Mbps stddev:20.69M
IP flow (unique src/dst pair) Information
# of flows: 1506458 (avg. 26.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.6% 1.4% 1.1% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 901202
Top 10 bandwidth usage (bytes/total in %):
32.9% 6.8% 4.0% 3.0% 2.9% 2.4% 2.2% 2.2% 2.2% 2.0%
# of IPv6 addresses: 1212
Top 10 bandwidth usage (bytes/total in %):
44.3% 36.0% 9.5% 8.5% 7.6% 6.5% 6.2% 6.0% 5.9% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905221400.pktlen.png)
detailed numbers
[ 32- 63]: 9780653
[ 64- 127]: 9223706
[ 128- 255]: 1789858
[ 256- 511]: 1027182
[ 512- 1023]: 1247891
[ 1024- 2047]: 16997725
Protocol Breakdown
![[protocol breakdown chart]](200905221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40067015 (100.00%) 26969691186 (100.00%) 673.11
ip 40014846 ( 99.87%) 26949464464 ( 99.93%) 673.49
tcp 29208768 ( 72.90%) 22192403586 ( 82.29%) 759.79
http(s) 9349056 ( 23.33%) 12182437020 ( 45.17%) 1303.07
http(c) 6460989 ( 16.13%) 784031756 ( 2.91%) 121.35
squid 625966 ( 1.56%) 455366721 ( 1.69%) 727.46
smtp 347661 ( 0.87%) 116576391 ( 0.43%) 335.32
nntp 88 ( 0.00%) 9107 ( 0.00%) 103.49
ftp 127140 ( 0.32%) 73352459 ( 0.27%) 576.94
pop3 29493 ( 0.07%) 23972256 ( 0.09%) 812.81
imap 3002 ( 0.01%) 368760 ( 0.00%) 122.84
telnet 10685 ( 0.03%) 1030735 ( 0.00%) 96.47
ssh 163183 ( 0.41%) 63705205 ( 0.24%) 390.39
dns 3895 ( 0.01%) 3861864 ( 0.01%) 991.49
bgp 155 ( 0.00%) 61303 ( 0.00%) 395.50
napster 2879 ( 0.01%) 1715609 ( 0.01%) 595.90
realaud 1476 ( 0.00%) 176231 ( 0.00%) 119.40
rtsp 151033 ( 0.38%) 129005939 ( 0.48%) 854.16
icecast 3819 ( 0.01%) 533365 ( 0.00%) 139.66
hotline 5 ( 0.00%) 318 ( 0.00%) 63.60
other 11928218 ( 29.77%) 8356194139 ( 30.98%) 700.54
udp 10107947 ( 25.23%) 4680018023 ( 17.35%) 463.00
dns 1180068 ( 2.95%) 247898189 ( 0.92%) 210.07
rip 2 ( 0.00%) 463 ( 0.00%) 231.50
realaud 198 ( 0.00%) 26788 ( 0.00%) 135.29
halflif 190 ( 0.00%) 30412 ( 0.00%) 160.06
starcra 341 ( 0.00%) 66513 ( 0.00%) 195.05
everque 358 ( 0.00%) 59813 ( 0.00%) 167.08
unreal 211 ( 0.00%) 51568 ( 0.00%) 244.40
quake 57 ( 0.00%) 8008 ( 0.00%) 140.49
cuseeme 30 ( 0.00%) 4565 ( 0.00%) 152.17
other 8925710 ( 22.28%) 4431652489 ( 16.43%) 496.50
icmp 655173 ( 1.64%) 59086246 ( 0.22%) 90.18
ipip 1387 ( 0.00%) 226702 ( 0.00%) 163.45
ip6 20319 ( 0.05%) 12639567 ( 0.05%) 622.06
other 21252 ( 0.05%) 5090340 ( 0.02%) 239.52
frag 7515 ( 0.02%) 6304315 ( 0.02%) 838.90
ip6 52167 ( 0.13%) 20226602 ( 0.07%) 387.73
tcp6 24656 ( 0.06%) 14959249 ( 0.06%) 606.72
http(s) 2483 ( 0.01%) 1785286 ( 0.01%) 719.00
http(c) 4412 ( 0.01%) 825764 ( 0.00%) 187.16
smtp 3634 ( 0.01%) 1738104 ( 0.01%) 478.29
ftp 12 ( 0.00%) 1251 ( 0.00%) 104.25
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 91 ( 0.00%) 17458 ( 0.00%) 191.85
bgp 415 ( 0.00%) 40176 ( 0.00%) 96.81
other 13607 ( 0.03%) 10550985 ( 0.04%) 775.41
udp6 21461 ( 0.05%) 3495255 ( 0.01%) 162.87
dns 21440 ( 0.05%) 3492858 ( 0.01%) 162.91
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
halflif 1 ( 0.00%) 121 ( 0.00%) 121.00
unreal 2 ( 0.00%) 226 ( 0.00%) 113.00
other 17 ( 0.00%) 1938 ( 0.00%) 114.00
icmp6 4225 ( 0.01%) 546810 ( 0.00%) 129.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1795 ( 0.00%) 1221208 ( 0.00%) 680.34
tcpdump file: 200905221400.dump.gz (999.88 MB)