Traffic Trace Info
DumpFile: 200905271400.dump
FileSize: 2416.74MB
Id: 200905271400
StartTime: Wed May 27 14:00:01 2009
EndTime: Wed May 27 14:15:01 2009
TotalTime: 900.28 seconds
TotalCapSize: 1873.70MB CapLen: 96 bytes
# of packets: 35588309 (22869.41MB)
AvgRate: 213.07Mbps stddev:20.32M
IP flow (unique src/dst pair) Information
# of flows: 1469665 (avg. 24.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.0% 1.7% 1.3% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 890180
Top 10 bandwidth usage (bytes/total in %):
24.3% 5.9% 5.4% 4.6% 3.8% 3.7% 3.3% 2.9% 2.9% 2.4%
# of IPv6 addresses: 1129
Top 10 bandwidth usage (bytes/total in %):
18.9% 17.6% 16.6% 15.5% 11.6% 10.2% 10.2% 7.9% 5.6% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905271400.pktlen.png)
detailed numbers
[ 32- 63]: 7826193
[ 64- 127]: 8497316
[ 128- 255]: 1760153
[ 256- 511]: 1179784
[ 512- 1023]: 1557932
[ 1024- 2047]: 14766931
Protocol Breakdown
![[protocol breakdown chart]](200905271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35588309 (100.00%) 23980319525 (100.00%) 673.83
ip 35528925 ( 99.83%) 23969311405 ( 99.95%) 674.64
tcp 26462852 ( 74.36%) 20481938516 ( 85.41%) 773.99
http(s) 8907972 ( 25.03%) 11678945217 ( 48.70%) 1311.07
http(c) 5120315 ( 14.39%) 699066153 ( 2.92%) 136.53
squid 606669 ( 1.70%) 342443131 ( 1.43%) 564.46
smtp 338462 ( 0.95%) 127189501 ( 0.53%) 375.79
nntp 187 ( 0.00%) 39197 ( 0.00%) 209.61
ftp 59225 ( 0.17%) 27666497 ( 0.12%) 467.14
pop3 20230 ( 0.06%) 6402921 ( 0.03%) 316.51
imap 691 ( 0.00%) 158156 ( 0.00%) 228.88
telnet 5985 ( 0.02%) 458502 ( 0.00%) 76.61
ssh 612290 ( 1.72%) 92720725 ( 0.39%) 151.43
dns 4640 ( 0.01%) 3994296 ( 0.02%) 860.84
bgp 162 ( 0.00%) 69770 ( 0.00%) 430.68
napster 398 ( 0.00%) 189831 ( 0.00%) 476.96
realaud 2460 ( 0.01%) 302797 ( 0.00%) 123.09
rtsp 213462 ( 0.60%) 74913800 ( 0.31%) 350.95
icecast 9287 ( 0.03%) 840794 ( 0.00%) 90.53
hotline 9 ( 0.00%) 556 ( 0.00%) 61.78
other 10560319 ( 29.67%) 7426531332 ( 30.97%) 703.25
udp 8380582 ( 23.55%) 3419874992 ( 14.26%) 408.07
dns 1165082 ( 3.27%) 245472550 ( 1.02%) 210.69
rip 1 ( 0.00%) 145 ( 0.00%) 145.00
realaud 26729 ( 0.08%) 10345689 ( 0.04%) 387.06
halflif 75 ( 0.00%) 12984 ( 0.00%) 173.12
starcra 552 ( 0.00%) 129710 ( 0.00%) 234.98
everque 416 ( 0.00%) 68322 ( 0.00%) 164.24
unreal 146 ( 0.00%) 28044 ( 0.00%) 192.08
quake 47 ( 0.00%) 8597 ( 0.00%) 182.91
cuseeme 6 ( 0.00%) 482 ( 0.00%) 80.33
other 7185204 ( 20.19%) 3163550054 ( 13.19%) 440.29
icmp 630338 ( 1.77%) 57565967 ( 0.24%) 91.33
ipip 1116 ( 0.00%) 180928 ( 0.00%) 162.12
ipsec 99 ( 0.00%) 15642 ( 0.00%) 158.00
ip6 8084 ( 0.02%) 1511484 ( 0.01%) 186.97
other 45854 ( 0.13%) 8223876 ( 0.03%) 179.35
frag 31650 ( 0.09%) 22630542 ( 0.09%) 715.03
ip6 59384 ( 0.17%) 11008120 ( 0.05%) 185.37
tcp6 37944 ( 0.11%) 7777390 ( 0.03%) 204.97
http(s) 2297 ( 0.01%) 1622991 ( 0.01%) 706.57
http(c) 3407 ( 0.01%) 689310 ( 0.00%) 202.32
smtp 4163 ( 0.01%) 2143000 ( 0.01%) 514.77
ssh 29 ( 0.00%) 5678 ( 0.00%) 195.79
bgp 414 ( 0.00%) 40546 ( 0.00%) 97.94
other 27634 ( 0.08%) 3275865 ( 0.01%) 118.54
udp6 16365 ( 0.05%) 2568140 ( 0.01%) 156.93
dns 16326 ( 0.05%) 2564271 ( 0.01%) 157.07
halflif 2 ( 0.00%) 242 ( 0.00%) 121.00
starcra 2 ( 0.00%) 258 ( 0.00%) 129.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 34 ( 0.00%) 3251 ( 0.00%) 95.62
icmp6 5023 ( 0.01%) 653856 ( 0.00%) 130.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 4654 ( 0.00%) 211.55
tcpdump file: 200905271400.dump.gz (887.87 MB)