Traffic Trace Info
DumpFile: 200905311400.dump
FileSize: 1570.44MB
Id: 200905311400
StartTime: Sun May 31 14:00:01 2009
EndTime: Sun May 31 14:15:00 2009
TotalTime: 899.08 seconds
TotalCapSize: 1215.89MB CapLen: 96 bytes
# of packets: 23235779 (15437.76MB)
AvgRate: 144.05Mbps stddev:17.97M
IP flow (unique src/dst pair) Information
# of flows: 1196738 (avg. 19.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.8% 2.2% 1.8% 1.4% 1.4% 1.4% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 752804
Top 10 bandwidth usage (bytes/total in %):
24.1% 16.5% 4.9% 4.5% 3.1% 2.8% 2.8% 2.6% 2.2% 2.0%
# of IPv6 addresses: 2146
Top 10 bandwidth usage (bytes/total in %):
60.0% 24.0% 17.9% 11.8% 10.1% 9.7% 8.0% 4.7% 3.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200905311400.pktlen.png)
detailed numbers
[ 32- 63]: 4786842
[ 64- 127]: 5724652
[ 128- 255]: 1330120
[ 256- 511]: 717875
[ 512- 1023]: 724583
[ 1024- 2047]: 9951707
Protocol Breakdown
![[protocol breakdown chart]](200905311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23235779 (100.00%) 16187660845 (100.00%) 696.67
ip 23077861 ( 99.32%) 16118155473 ( 99.57%) 698.43
tcp 15868878 ( 68.30%) 13788658573 ( 85.18%) 868.91
http(s) 6188286 ( 26.63%) 8472357258 ( 52.34%) 1369.10
http(c) 2318909 ( 9.98%) 254545356 ( 1.57%) 109.77
squid 319768 ( 1.38%) 181110628 ( 1.12%) 566.38
smtp 218631 ( 0.94%) 48722650 ( 0.30%) 222.85
nntp 6 ( 0.00%) 378 ( 0.00%) 63.00
ftp 71676 ( 0.31%) 10314405 ( 0.06%) 143.90
pop3 5611 ( 0.02%) 2560868 ( 0.02%) 456.40
imap 2572 ( 0.01%) 1493639 ( 0.01%) 580.73
telnet 11244 ( 0.05%) 830060 ( 0.01%) 73.82
ssh 38138 ( 0.16%) 18023176 ( 0.11%) 472.58
dns 3575 ( 0.02%) 4053841 ( 0.03%) 1133.94
bgp 138 ( 0.00%) 43245 ( 0.00%) 313.37
napster 184 ( 0.00%) 23990 ( 0.00%) 130.38
realaud 1693 ( 0.01%) 717719 ( 0.00%) 423.93
rtsp 36867 ( 0.16%) 17445881 ( 0.11%) 473.21
icecast 12543 ( 0.05%) 4735525 ( 0.03%) 377.54
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 6638950 ( 28.57%) 4771571381 ( 29.48%) 718.72
udp 6361690 ( 27.38%) 2089687020 ( 12.91%) 328.48
dns 924677 ( 3.98%) 201979472 ( 1.25%) 218.43
rip 2 ( 0.00%) 199 ( 0.00%) 99.50
realaud 3055 ( 0.01%) 562965 ( 0.00%) 184.28
halflif 2973 ( 0.01%) 193070 ( 0.00%) 64.94
starcra 363 ( 0.00%) 74460 ( 0.00%) 205.12
everque 219 ( 0.00%) 40456 ( 0.00%) 184.73
unreal 144 ( 0.00%) 32566 ( 0.00%) 226.15
quake 97 ( 0.00%) 11999 ( 0.00%) 123.70
cuseeme 12 ( 0.00%) 1943 ( 0.00%) 161.92
other 5429309 ( 23.37%) 1886515884 ( 11.65%) 347.47
icmp 648928 ( 2.79%) 58707315 ( 0.36%) 90.47
ipip 1300 ( 0.01%) 212243 ( 0.00%) 163.26
ipsec 1332 ( 0.01%) 1405296 ( 0.01%) 1055.03
ip6 65564 ( 0.28%) 87254625 ( 0.54%) 1330.83
other 130169 ( 0.56%) 92230401 ( 0.57%) 708.54
frag 25093 ( 0.11%) 19851670 ( 0.12%) 791.12
ip6 157918 ( 0.68%) 69505372 ( 0.43%) 440.14
tcp6 135065 ( 0.58%) 64750578 ( 0.40%) 479.40
http(s) 2058 ( 0.01%) 1388657 ( 0.01%) 674.76
http(c) 10186 ( 0.04%) 1301729 ( 0.01%) 127.80
smtp 3076 ( 0.01%) 1572428 ( 0.01%) 511.19
ssh 85 ( 0.00%) 22142 ( 0.00%) 260.49
bgp 398 ( 0.00%) 35421 ( 0.00%) 89.00
other 119262 ( 0.51%) 60430201 ( 0.37%) 506.70
udp6 14797 ( 0.06%) 2547686 ( 0.02%) 172.18
dns 12255 ( 0.05%) 1891100 ( 0.01%) 154.31
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
starcra 3 ( 0.00%) 1728 ( 0.00%) 576.00
other 2538 ( 0.01%) 654742 ( 0.00%) 257.98
icmp6 5900 ( 0.03%) 757351 ( 0.00%) 128.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2126 ( 0.01%) 1445677 ( 0.01%) 680.00
tcpdump file: 200905311400.dump.gz (566.46 MB)