Traffic Trace Info
DumpFile: 200905241400.dump
FileSize: 1919.74MB
Id: 200905241400
StartTime: Sun May 24 14:00:00 2009
EndTime: Sun May 24 14:15:01 2009
TotalTime: 900.64 seconds
TotalCapSize: 1484.37MB CapLen: 96 bytes
# of packets: 28531515 (18220.83MB)
AvgRate: 169.73Mbps stddev:21.86M
IP flow (unique src/dst pair) Information
# of flows: 1550270 (avg. 18.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.4% 2.4% 2.4% 1.4% 1.3% 1.3% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 973086
Top 10 bandwidth usage (bytes/total in %):
30.3% 8.0% 7.1% 4.7% 4.5% 4.1% 3.4% 3.3% 2.9% 2.4%
# of IPv6 addresses: 1145
Top 10 bandwidth usage (bytes/total in %):
30.5% 20.8% 15.0% 13.2% 11.7% 8.0% 8.0% 5.9% 5.3% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905241400.pktlen.png)
detailed numbers
[ 32- 63]: 6254958
[ 64- 127]: 6992576
[ 128- 255]: 1508786
[ 256- 511]: 821992
[ 512- 1023]: 1170377
[ 1024- 2047]: 11782826
Protocol Breakdown
![[protocol breakdown chart]](200905241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28531515 (100.00%) 19105924723 (100.00%) 669.64
ip 28434169 ( 99.66%) 19091327557 ( 99.92%) 671.42
tcp 19975595 ( 70.01%) 15942261806 ( 83.44%) 798.09
http(s) 6795633 ( 23.82%) 8932407019 ( 46.75%) 1314.43
http(c) 3145842 ( 11.03%) 366956615 ( 1.92%) 116.65
squid 723889 ( 2.54%) 511122779 ( 2.68%) 706.08
smtp 296868 ( 1.04%) 58360218 ( 0.31%) 196.59
nntp 138 ( 0.00%) 13986 ( 0.00%) 101.35
ftp 47997 ( 0.17%) 16779658 ( 0.09%) 349.60
pop3 6285 ( 0.02%) 2427661 ( 0.01%) 386.26
imap 1877 ( 0.01%) 569125 ( 0.00%) 303.21
telnet 6317 ( 0.02%) 530117 ( 0.00%) 83.92
ssh 41510 ( 0.15%) 11247226 ( 0.06%) 270.95
dns 3669 ( 0.01%) 3926462 ( 0.02%) 1070.17
bgp 129 ( 0.00%) 39877 ( 0.00%) 309.12
napster 2008 ( 0.01%) 716683 ( 0.00%) 356.91
realaud 2066 ( 0.01%) 248042 ( 0.00%) 120.06
rtsp 236420 ( 0.83%) 255516133 ( 1.34%) 1080.77
icecast 3391 ( 0.01%) 728101 ( 0.00%) 214.72
hotline 8 ( 0.00%) 504 ( 0.00%) 63.00
other 8661410 ( 30.36%) 5780663320 ( 30.26%) 667.40
udp 6980678 ( 24.47%) 3027461088 ( 15.85%) 433.69
dns 965471 ( 3.38%) 187822546 ( 0.98%) 194.54
realaud 6560 ( 0.02%) 491280 ( 0.00%) 74.89
halflif 336 ( 0.00%) 29627 ( 0.00%) 88.18
starcra 499 ( 0.00%) 94848 ( 0.00%) 190.08
everque 368 ( 0.00%) 62794 ( 0.00%) 170.64
unreal 200 ( 0.00%) 38285 ( 0.00%) 191.43
quake 65 ( 0.00%) 10250 ( 0.00%) 157.69
cuseeme 25 ( 0.00%) 3511 ( 0.00%) 140.44
other 6001522 ( 21.03%) 2838482825 ( 14.86%) 472.96
icmp 1454485 ( 5.10%) 117339685 ( 0.61%) 80.67
ipip 1180 ( 0.00%) 192714 ( 0.00%) 163.32
ip6 2860 ( 0.01%) 465286 ( 0.00%) 162.69
other 19371 ( 0.07%) 3606978 ( 0.02%) 186.21
frag 18991 ( 0.07%) 13863221 ( 0.07%) 729.99
ip6 97346 ( 0.34%) 14597166 ( 0.08%) 149.95
tcp6 78004 ( 0.27%) 11842068 ( 0.06%) 151.81
http(s) 3419 ( 0.01%) 2535387 ( 0.01%) 741.56
http(c) 4797 ( 0.02%) 1025340 ( 0.01%) 213.75
smtp 3901 ( 0.01%) 1975869 ( 0.01%) 506.50
ssh 23 ( 0.00%) 3066 ( 0.00%) 133.30
bgp 418 ( 0.00%) 40366 ( 0.00%) 96.57
other 65446 ( 0.23%) 6262040 ( 0.03%) 95.68
udp6 14168 ( 0.05%) 2099243 ( 0.01%) 148.17
dns 14126 ( 0.05%) 2094509 ( 0.01%) 148.27
realaud 2 ( 0.00%) 228 ( 0.00%) 114.00
halflif 3 ( 0.00%) 346 ( 0.00%) 115.33
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 36 ( 0.00%) 4041 ( 0.00%) 112.25
icmp6 5104 ( 0.02%) 647230 ( 0.00%) 126.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 4545 ( 0.00%) 113.62
tcpdump file: 200905241400.dump.gz (708.75 MB)