Traffic Trace Info
DumpFile: 200905231400.dump
FileSize: 1727.75MB
Id: 200905231400
StartTime: Sat May 23 14:00:00 2009
EndTime: Sat May 23 14:15:00 2009
TotalTime: 900.01 seconds
TotalCapSize: 1336.15MB CapLen: 96 bytes
# of packets: 25662980 (16838.29MB)
AvgRate: 156.96Mbps stddev:18.54M
IP flow (unique src/dst pair) Information
# of flows: 1105441 (avg. 23.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 2.2% 2.0% 1.5% 1.2% 0.9% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 685740
Top 10 bandwidth usage (bytes/total in %):
23.8% 5.5% 5.5% 5.3% 4.9% 4.5% 4.2% 3.6% 2.7% 2.3%
# of IPv6 addresses: 1172
Top 10 bandwidth usage (bytes/total in %):
87.1% 32.9% 19.7% 7.1% 5.8% 4.6% 3.1% 3.0% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905231400.pktlen.png)
detailed numbers
[ 32- 63]: 5424278
[ 64- 127]: 6219377
[ 128- 255]: 1253729
[ 256- 511]: 821410
[ 512- 1023]: 774743
[ 1024- 2047]: 11169443
Protocol Breakdown
![[protocol breakdown chart]](200905231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25662980 (100.00%) 17656227992 (100.00%) 688.00
ip 25514334 ( 99.42%) 17574714878 ( 99.54%) 688.82
tcp 18229393 ( 71.03%) 14183484378 ( 80.33%) 778.06
http(s) 6392314 ( 24.91%) 8395283981 ( 47.55%) 1313.34
http(c) 4366708 ( 17.02%) 1071621834 ( 6.07%) 245.41
squid 651256 ( 2.54%) 442342679 ( 2.51%) 679.21
smtp 345910 ( 1.35%) 128373967 ( 0.73%) 371.12
nntp 58 ( 0.00%) 27624 ( 0.00%) 476.28
ftp 109396 ( 0.43%) 26632010 ( 0.15%) 243.45
pop3 9801 ( 0.04%) 6159686 ( 0.03%) 628.48
imap 1667 ( 0.01%) 159553 ( 0.00%) 95.71
telnet 7437 ( 0.03%) 589952 ( 0.00%) 79.33
ssh 13492 ( 0.05%) 2269415 ( 0.01%) 168.20
dns 3537 ( 0.01%) 3925902 ( 0.02%) 1109.95
bgp 124 ( 0.00%) 35223 ( 0.00%) 284.06
napster 1130 ( 0.00%) 328430 ( 0.00%) 290.65
realaud 383 ( 0.00%) 55162 ( 0.00%) 144.03
rtsp 175720 ( 0.68%) 146682022 ( 0.83%) 834.75
icecast 6707 ( 0.03%) 995976 ( 0.01%) 148.50
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 6143686 ( 23.94%) 3957913314 ( 22.42%) 644.22
udp 6646767 ( 25.90%) 3330297226 ( 18.86%) 501.04
dns 1053181 ( 4.10%) 208587975 ( 1.18%) 198.06
rip 2 ( 0.00%) 463 ( 0.00%) 231.50
realaud 1495 ( 0.01%) 97886 ( 0.00%) 65.48
halflif 158 ( 0.00%) 28919 ( 0.00%) 183.03
starcra 252 ( 0.00%) 50296 ( 0.00%) 199.59
everque 511 ( 0.00%) 159820 ( 0.00%) 312.76
unreal 149 ( 0.00%) 33888 ( 0.00%) 227.44
quake 143 ( 0.00%) 13253 ( 0.00%) 92.68
cuseeme 9 ( 0.00%) 1493 ( 0.00%) 165.89
other 5590294 ( 21.78%) 3121103907 ( 17.68%) 558.31
icmp 579775 ( 2.26%) 52217056 ( 0.30%) 90.06
ipip 1203 ( 0.00%) 193948 ( 0.00%) 161.22
ip6 6873 ( 0.03%) 1369988 ( 0.01%) 199.33
other 50323 ( 0.20%) 7152282 ( 0.04%) 142.13
frag 2071 ( 0.01%) 1879468 ( 0.01%) 907.52
ip6 148644 ( 0.58%) 81512994 ( 0.46%) 548.38
tcp6 124123 ( 0.48%) 76557897 ( 0.43%) 616.79
http(s) 3208 ( 0.01%) 2350209 ( 0.01%) 732.61
http(c) 4396 ( 0.02%) 898241 ( 0.01%) 204.33
squid 3 ( 0.00%) 226 ( 0.00%) 75.33
smtp 2377 ( 0.01%) 1130254 ( 0.01%) 475.50
ftp 2081 ( 0.01%) 201104 ( 0.00%) 96.64
ssh 54 ( 0.00%) 9684 ( 0.00%) 179.33
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 420 ( 0.00%) 48750 ( 0.00%) 116.07
other 111579 ( 0.43%) 71918884 ( 0.41%) 644.56
udp6 15594 ( 0.06%) 2843278 ( 0.02%) 182.33
dns 14488 ( 0.06%) 2113768 ( 0.01%) 145.90
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1104 ( 0.00%) 729297 ( 0.00%) 660.60
icmp6 6992 ( 0.03%) 844221 ( 0.00%) 120.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1905 ( 0.01%) 1263518 ( 0.01%) 663.26
tcpdump file: 200905231400.dump.gz (630.65 MB)