Traffic Trace Info
DumpFile: 200905251400.dump
FileSize: 2360.82MB
Id: 200905251400
StartTime: Mon May 25 14:00:00 2009
EndTime: Mon May 25 14:15:01 2009
TotalTime: 900.73 seconds
TotalCapSize: 1825.86MB CapLen: 96 bytes
# of packets: 35058472 (21217.10MB)
AvgRate: 197.59Mbps stddev:17.27M
IP flow (unique src/dst pair) Information
# of flows: 1832649 (avg. 19.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 1.4% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1124325
Top 10 bandwidth usage (bytes/total in %):
27.6% 9.5% 6.9% 4.3% 4.0% 3.1% 2.5% 2.5% 2.2% 1.9%
# of IPv6 addresses: 1156
Top 10 bandwidth usage (bytes/total in %):
81.5% 81.5% 3.3% 2.9% 2.4% 1.9% 1.9% 1.9% 1.9% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905251400.pktlen.png)
detailed numbers
[ 32- 63]: 8059109
[ 64- 127]: 8991695
[ 128- 255]: 2100771
[ 256- 511]: 1080231
[ 512- 1023]: 1108372
[ 1024- 2047]: 13718294
Protocol Breakdown
![[protocol breakdown chart]](200905251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35058472 (100.00%) 22247738743 (100.00%) 634.59
ip 34983154 ( 99.79%) 22187050013 ( 99.73%) 634.22
tcp 24302643 ( 69.32%) 18295166629 ( 82.23%) 752.81
http(s) 7068980 ( 20.16%) 8634347192 ( 38.81%) 1221.44
http(c) 5153280 ( 14.70%) 712732254 ( 3.20%) 138.31
squid 595550 ( 1.70%) 397193075 ( 1.79%) 666.93
smtp 429221 ( 1.22%) 138831681 ( 0.62%) 323.45
nntp 293 ( 0.00%) 62073 ( 0.00%) 211.85
ftp 37246 ( 0.11%) 4269511 ( 0.02%) 114.63
pop3 30110 ( 0.09%) 16085911 ( 0.07%) 534.24
imap 990 ( 0.00%) 277727 ( 0.00%) 280.53
telnet 38606 ( 0.11%) 4226958 ( 0.02%) 109.49
ssh 94247 ( 0.27%) 20553853 ( 0.09%) 218.08
dns 7127 ( 0.02%) 4097534 ( 0.02%) 574.93
bgp 166 ( 0.00%) 62388 ( 0.00%) 375.83
napster 1476 ( 0.00%) 1122294 ( 0.01%) 760.36
realaud 1609 ( 0.00%) 197314 ( 0.00%) 122.63
rtsp 249702 ( 0.71%) 212778145 ( 0.96%) 852.13
icecast 4398 ( 0.01%) 517758 ( 0.00%) 117.73
hotline 17 ( 0.00%) 1683 ( 0.00%) 99.00
other 10589504 ( 30.21%) 8147642273 ( 36.62%) 769.41
udp 9920322 ( 28.30%) 3817641909 ( 17.16%) 384.83
dns 2404679 ( 6.86%) 406607601 ( 1.83%) 169.09
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 9415 ( 0.03%) 642489 ( 0.00%) 68.24
halflif 179 ( 0.00%) 27041 ( 0.00%) 151.07
starcra 488 ( 0.00%) 94339 ( 0.00%) 193.32
everque 13511 ( 0.04%) 11865157 ( 0.05%) 878.18
unreal 144 ( 0.00%) 25759 ( 0.00%) 178.88
quake 69 ( 0.00%) 11391 ( 0.00%) 165.09
cuseeme 16 ( 0.00%) 2472 ( 0.00%) 154.50
other 7491341 ( 21.37%) 3398189304 ( 15.27%) 453.62
icmp 665378 ( 1.90%) 59176503 ( 0.27%) 88.94
ipip 1281 ( 0.00%) 207434 ( 0.00%) 161.93
ip6 27799 ( 0.08%) 4340406 ( 0.02%) 156.14
other 65731 ( 0.19%) 10517132 ( 0.05%) 160.00
frag 13015 ( 0.04%) 8504610 ( 0.04%) 653.45
ip6 75318 ( 0.21%) 60688730 ( 0.27%) 805.77
tcp6 50150 ( 0.14%) 56784878 ( 0.26%) 1132.30
http(s) 3121 ( 0.01%) 2758464 ( 0.01%) 883.84
http(c) 3932 ( 0.01%) 748779 ( 0.00%) 190.43
squid 13 ( 0.00%) 1046 ( 0.00%) 80.46
smtp 3873 ( 0.01%) 1895779 ( 0.01%) 489.49
ssh 1335 ( 0.00%) 340102 ( 0.00%) 254.76
dns 14 ( 0.00%) 3737 ( 0.00%) 266.93
bgp 407 ( 0.00%) 39077 ( 0.00%) 96.01
other 37455 ( 0.11%) 50997894 ( 0.23%) 1361.58
udp6 20878 ( 0.06%) 3351986 ( 0.02%) 160.55
dns 20860 ( 0.06%) 3349835 ( 0.02%) 160.59
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
other 17 ( 0.00%) 2033 ( 0.00%) 119.59
icmp6 4250 ( 0.01%) 545033 ( 0.00%) 128.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 2753 ( 0.00%) 275.30
tcpdump file: 200905251400.dump.gz (870.02 MB)