Traffic Trace Info
DumpFile: 200905291400.dump
FileSize: 1886.47MB
Id: 200905291400
StartTime: Fri May 29 14:00:01 2009
EndTime: Fri May 29 14:15:01 2009
TotalTime: 899.85 seconds
TotalCapSize: 1467.05MB CapLen: 96 bytes
# of packets: 27486759 (17944.73MB)
AvgRate: 167.28Mbps stddev:18.98M
IP flow (unique src/dst pair) Information
# of flows: 1505512 (avg. 18.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 1.7% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 896610
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.6% 9.0% 5.0% 4.0% 3.3% 3.0% 2.9% 2.5% 1.9%
# of IPv6 addresses: 1842
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.4% 12.7% 11.2% 9.6% 9.6% 8.5% 7.7% 6.9% 6.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905291400.pktlen.png)
detailed numbers
[ 32- 63]: 6478326
[ 64- 127]: 5962471
[ 128- 255]: 1537067
[ 256- 511]: 873497
[ 512- 1023]: 995796
[ 1024- 2047]: 11639602
Protocol Breakdown
![[protocol breakdown chart]](200905291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27486759 (100.00%) 18816411182 (100.00%) 684.56
ip 27440549 ( 99.83%) 18804574904 ( 99.94%) 685.28
tcp 21673529 ( 78.85%) 16914935515 ( 89.89%) 780.44
http(s) 6670451 ( 24.27%) 8783024654 ( 46.68%) 1316.71
http(c) 4488074 ( 16.33%) 647959637 ( 3.44%) 144.37
squid 544038 ( 1.98%) 387099813 ( 2.06%) 711.53
smtp 374232 ( 1.36%) 165440703 ( 0.88%) 442.08
nntp 220 ( 0.00%) 23836 ( 0.00%) 108.35
ftp 73542 ( 0.27%) 55171722 ( 0.29%) 750.21
pop3 19056 ( 0.07%) 5234725 ( 0.03%) 274.70
imap 3308 ( 0.01%) 3151864 ( 0.02%) 952.80
telnet 9401 ( 0.03%) 880635 ( 0.00%) 93.67
ssh 53398 ( 0.19%) 15933514 ( 0.08%) 298.39
dns 3625 ( 0.01%) 3912464 ( 0.02%) 1079.30
bgp 200 ( 0.00%) 76633 ( 0.00%) 383.17
napster 657 ( 0.00%) 299087 ( 0.00%) 455.23
realaud 853 ( 0.00%) 113842 ( 0.00%) 133.46
rtsp 274411 ( 1.00%) 93244609 ( 0.50%) 339.80
icecast 2314 ( 0.01%) 228664 ( 0.00%) 98.82
hotline 9 ( 0.00%) 1539 ( 0.00%) 171.00
other 9155661 ( 33.31%) 6753055211 ( 35.89%) 737.58
udp 5075856 ( 18.47%) 1812532265 ( 9.63%) 357.09
dns 1355507 ( 4.93%) 251202418 ( 1.34%) 185.32
realaud 25500 ( 0.09%) 6549410 ( 0.03%) 256.84
halflif 2198 ( 0.01%) 140253 ( 0.00%) 63.81
starcra 499 ( 0.00%) 98098 ( 0.00%) 196.59
everque 1024 ( 0.00%) 563443 ( 0.00%) 550.24
unreal 161 ( 0.00%) 36282 ( 0.00%) 225.35
quake 52 ( 0.00%) 9347 ( 0.00%) 179.75
cuseeme 13 ( 0.00%) 2266 ( 0.00%) 174.31
other 3690448 ( 13.43%) 1553828161 ( 8.26%) 421.04
icmp 629558 ( 2.29%) 55123682 ( 0.29%) 87.56
ipip 1336 ( 0.00%) 205119 ( 0.00%) 153.53
ipsec 93 ( 0.00%) 14694 ( 0.00%) 158.00
ip6 11560 ( 0.04%) 4488397 ( 0.02%) 388.27
other 48617 ( 0.18%) 17275232 ( 0.09%) 355.33
frag 2962 ( 0.01%) 2522421 ( 0.01%) 851.59
ip6 46210 ( 0.17%) 11836278 ( 0.06%) 256.14
tcp6 18270 ( 0.07%) 6709509 ( 0.04%) 367.24
http(s) 1756 ( 0.01%) 1187145 ( 0.01%) 676.05
http(c) 3666 ( 0.01%) 696214 ( 0.00%) 189.91
smtp 3573 ( 0.01%) 1827031 ( 0.01%) 511.34
ftp 415 ( 0.00%) 40116 ( 0.00%) 96.67
ssh 320 ( 0.00%) 324344 ( 0.00%) 1013.58
dns 15 ( 0.00%) 2135 ( 0.00%) 142.33
bgp 413 ( 0.00%) 37676 ( 0.00%) 91.23
other 8112 ( 0.03%) 2594848 ( 0.01%) 319.88
udp6 19614 ( 0.07%) 3045142 ( 0.02%) 155.25
dns 18599 ( 0.07%) 2883594 ( 0.02%) 155.04
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 2 ( 0.00%) 247 ( 0.00%) 123.50
other 1012 ( 0.00%) 161196 ( 0.00%) 159.28
icmp6 6391 ( 0.02%) 742376 ( 0.00%) 116.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1905 ( 0.01%) 1335171 ( 0.01%) 700.88
tcpdump file: 200905291400.dump.gz (689.77 MB)