Traffic Trace Info
DumpFile: 200905281400.dump
FileSize: 2064.88MB
Id: 200905281400
StartTime: Thu May 28 14:00:00 2009
EndTime: Thu May 28 14:15:00 2009
TotalTime: 900.20 seconds
TotalCapSize: 1602.54MB CapLen: 96 bytes
# of packets: 30298957 (19757.31MB)
AvgRate: 184.12Mbps stddev:13.26M
IP flow (unique src/dst pair) Information
# of flows: 1307947 (avg. 23.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 3.6% 1.6% 1.2% 0.9% 0.9% 0.7% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 785627
Top 10 bandwidth usage (bytes/total in %):
15.5% 11.4% 6.9% 5.1% 3.7% 3.6% 3.4% 3.1% 2.7% 2.6%
# of IPv6 addresses: 1149
Top 10 bandwidth usage (bytes/total in %):
18.1% 16.9% 15.0% 11.7% 11.1% 10.3% 10.3% 7.3% 6.0% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905281400.pktlen.png)
detailed numbers
[ 32- 63]: 6816594
[ 64- 127]: 6949799
[ 128- 255]: 2023998
[ 256- 511]: 843990
[ 512- 1023]: 804434
[ 1024- 2047]: 12860142
Protocol Breakdown
![[protocol breakdown chart]](200905281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30298957 (100.00%) 20717045265 (100.00%) 683.75
ip 30249416 ( 99.84%) 20705131020 ( 99.94%) 684.48
tcp 22899443 ( 75.58%) 17965430296 ( 86.72%) 784.54
http(s) 7594100 ( 25.06%) 9985585477 ( 48.20%) 1314.91
http(c) 5259965 ( 17.36%) 713982341 ( 3.45%) 135.74
squid 475059 ( 1.57%) 313240297 ( 1.51%) 659.37
smtp 290611 ( 0.96%) 68506537 ( 0.33%) 235.73
ftp 40094 ( 0.13%) 9498138 ( 0.05%) 236.90
pop3 28301 ( 0.09%) 7995711 ( 0.04%) 282.52
imap 785 ( 0.00%) 173665 ( 0.00%) 221.23
telnet 13490 ( 0.04%) 1007895 ( 0.00%) 74.71
ssh 137012 ( 0.45%) 16682190 ( 0.08%) 121.76
dns 33165 ( 0.11%) 31167824 ( 0.15%) 939.78
bgp 159 ( 0.00%) 64782 ( 0.00%) 407.43
napster 315 ( 0.00%) 40086 ( 0.00%) 127.26
realaud 1123 ( 0.00%) 137988 ( 0.00%) 122.87
rtsp 207539 ( 0.68%) 14280767 ( 0.07%) 68.81
icecast 5081 ( 0.02%) 2491598 ( 0.01%) 490.38
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 8812560 ( 29.09%) 6800478732 ( 32.83%) 771.68
udp 6765867 ( 22.33%) 2683055264 ( 12.95%) 396.56
dns 1095578 ( 3.62%) 210731682 ( 1.02%) 192.35
realaud 17908 ( 0.06%) 6040589 ( 0.03%) 337.31
halflif 26468 ( 0.09%) 2845916 ( 0.01%) 107.52
starcra 587 ( 0.00%) 104932 ( 0.00%) 178.76
everque 329 ( 0.00%) 56673 ( 0.00%) 172.26
unreal 158 ( 0.00%) 35022 ( 0.00%) 221.66
quake 182 ( 0.00%) 25490 ( 0.00%) 140.05
cuseeme 7 ( 0.00%) 1207 ( 0.00%) 172.43
other 5624044 ( 18.56%) 2462959954 ( 11.89%) 437.93
icmp 562528 ( 1.86%) 50908453 ( 0.25%) 90.50
ipip 1264 ( 0.00%) 207856 ( 0.00%) 164.44
ipsec 96 ( 0.00%) 15168 ( 0.00%) 158.00
ip6 6368 ( 0.02%) 954705 ( 0.00%) 149.92
other 13850 ( 0.05%) 4559278 ( 0.02%) 329.19
frag 5969 ( 0.02%) 5328376 ( 0.03%) 892.67
ip6 49541 ( 0.16%) 11914245 ( 0.06%) 240.49
tcp6 23698 ( 0.08%) 7238655 ( 0.03%) 305.45
http(s) 3008 ( 0.01%) 1873883 ( 0.01%) 622.97
http(c) 3816 ( 0.01%) 785286 ( 0.00%) 205.79
smtp 4686 ( 0.02%) 2255316 ( 0.01%) 481.29
ssh 59 ( 0.00%) 27058 ( 0.00%) 458.61
bgp 407 ( 0.00%) 37715 ( 0.00%) 92.67
other 11722 ( 0.04%) 2259397 ( 0.01%) 192.75
udp6 16473 ( 0.05%) 2550499 ( 0.01%) 154.83
dns 16461 ( 0.05%) 2549192 ( 0.01%) 154.86
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 7531 ( 0.02%) 871921 ( 0.00%) 115.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1808 ( 0.01%) 1248954 ( 0.01%) 690.79
tcpdump file: 200905281400.dump.gz (751.49 MB)