Traffic Trace Info
DumpFile: 200905261400.dump
FileSize: 2428.25MB
Id: 200905261400
StartTime: Tue May 26 14:00:01 2009
EndTime: Tue May 26 14:15:00 2009
TotalTime: 899.40 seconds
TotalCapSize: 1876.19MB CapLen: 96 bytes
# of packets: 36179016 (21697.01MB)
AvgRate: 202.38Mbps stddev:16.58M
IP flow (unique src/dst pair) Information
# of flows: 1462016 (avg. 24.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.1% 0.7% 0.7% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 887149
Top 10 bandwidth usage (bytes/total in %):
31.2% 4.2% 3.7% 3.4% 3.3% 3.3% 2.5% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1174
Top 10 bandwidth usage (bytes/total in %):
23.0% 17.2% 12.5% 10.1% 8.9% 8.9% 8.8% 7.7% 7.0% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905261400.pktlen.png)
detailed numbers
[ 32- 63]: 8452034
[ 64- 127]: 9269639
[ 128- 255]: 1880940
[ 256- 511]: 1087575
[ 512- 1023]: 1480309
[ 1024- 2047]: 14008519
Protocol Breakdown
![[protocol breakdown chart]](200905261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36179016 (100.00%) 22750959464 (100.00%) 628.84
ip 36102385 ( 99.79%) 22738218387 ( 99.94%) 629.83
tcp 25420075 ( 70.26%) 18430580918 ( 81.01%) 725.04
http(s) 7977223 ( 22.05%) 10155411961 ( 44.64%) 1273.05
http(c) 6361253 ( 17.58%) 1488024120 ( 6.54%) 233.92
squid 723537 ( 2.00%) 407048329 ( 1.79%) 562.58
smtp 393283 ( 1.09%) 109713422 ( 0.48%) 278.97
nntp 43 ( 0.00%) 3766 ( 0.00%) 87.58
ftp 287349 ( 0.79%) 286601040 ( 1.26%) 997.40
pop3 22633 ( 0.06%) 9510261 ( 0.04%) 420.19
imap 1510 ( 0.00%) 130307 ( 0.00%) 86.30
telnet 7891 ( 0.02%) 860812 ( 0.00%) 109.09
ssh 51742 ( 0.14%) 11897425 ( 0.05%) 229.94
dns 6193 ( 0.02%) 4132185 ( 0.02%) 667.23
bgp 143 ( 0.00%) 47691 ( 0.00%) 333.50
napster 915 ( 0.00%) 604210 ( 0.00%) 660.34
realaud 1436 ( 0.00%) 217970 ( 0.00%) 151.79
rtsp 187204 ( 0.52%) 26392511 ( 0.12%) 140.98
icecast 8724 ( 0.02%) 779157 ( 0.00%) 89.31
hotline 11 ( 0.00%) 887 ( 0.00%) 80.64
other 9388755 ( 25.95%) 5929079997 ( 26.06%) 631.51
udp 9938198 ( 27.47%) 4196983107 ( 18.45%) 422.31
dns 1351384 ( 3.74%) 269296672 ( 1.18%) 199.27
rip 2 ( 0.00%) 187 ( 0.00%) 93.50
realaud 2396 ( 0.01%) 163049 ( 0.00%) 68.05
halflif 15267 ( 0.04%) 1389085 ( 0.01%) 90.99
starcra 475 ( 0.00%) 87436 ( 0.00%) 184.08
everque 6111 ( 0.02%) 5134905 ( 0.02%) 840.27
unreal 432 ( 0.00%) 281668 ( 0.00%) 652.01
quake 45 ( 0.00%) 5806 ( 0.00%) 129.02
cuseeme 35 ( 0.00%) 5598 ( 0.00%) 159.94
other 8560507 ( 23.66%) 3920082673 ( 17.23%) 457.93
icmp 626352 ( 1.73%) 56344748 ( 0.25%) 89.96
ipip 1107 ( 0.00%) 178506 ( 0.00%) 161.25
ipsec 16361 ( 0.05%) 23781998 ( 0.10%) 1453.58
ip6 13559 ( 0.04%) 8664759 ( 0.04%) 639.04
other 86733 ( 0.24%) 21684351 ( 0.10%) 250.01
frag 29047 ( 0.08%) 17271950 ( 0.08%) 594.62
ip6 76631 ( 0.21%) 12741077 ( 0.06%) 166.27
tcp6 53141 ( 0.15%) 9151418 ( 0.04%) 172.21
http(s) 2104 ( 0.01%) 1765821 ( 0.01%) 839.27
http(c) 3500 ( 0.01%) 641285 ( 0.00%) 183.22
smtp 4403 ( 0.01%) 2207693 ( 0.01%) 501.41
ssh 93 ( 0.00%) 37454 ( 0.00%) 402.73
bgp 409 ( 0.00%) 55767 ( 0.00%) 136.35
other 42632 ( 0.12%) 4443398 ( 0.02%) 104.23
udp6 18449 ( 0.05%) 2917626 ( 0.01%) 158.15
dns 18427 ( 0.05%) 2915288 ( 0.01%) 158.21
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 21 ( 0.00%) 2219 ( 0.00%) 105.67
icmp6 4992 ( 0.01%) 666813 ( 0.00%) 133.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19 ( 0.00%) 1140 ( 0.00%) 60.00
tcpdump file: 200905261400.dump.gz (911.36 MB)