Traffic Trace Info
DumpFile: 200904010015.dump
FileSize: 1126.88MB
Id: 200904010015
StartTime: Wed Apr 1 00:15:00 2009
EndTime: Wed Apr 1 00:30:00 2009
TotalTime: 900.03 seconds
TotalCapSize: 876.17MB CapLen: 96 bytes
# of packets: 16428098 (11374.15MB)
AvgRate: 106.03Mbps stddev:14.34M
IP flow (unique src/dst pair) Information
# of flows: 819762 (avg. 20.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 6.3% 1.9% 1.8% 1.7% 1.6% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 539949
Top 10 bandwidth usage (bytes/total in %):
13.6% 9.9% 9.4% 9.3% 7.6% 7.6% 6.4% 4.9% 2.8% 1.9%
# of IPv6 addresses: 1529
Top 10 bandwidth usage (bytes/total in %):
25.8% 25.8% 13.9% 6.3% 5.8% 5.3% 4.3% 3.9% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010015.pktlen.png)
detailed numbers
[ 32- 63]: 3467819
[ 64- 127]: 3776586
[ 128- 255]: 930825
[ 256- 511]: 383981
[ 512- 1023]: 360380
[ 1024- 2047]: 7508507
Protocol Breakdown
![[protocol breakdown chart]](200904010015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16428098 (100.00%) 11926659903 (100.00%) 725.99
ip 16401789 ( 99.84%) 11921760120 ( 99.96%) 726.86
tcp 12306894 ( 74.91%) 10953239580 ( 91.84%) 890.01
http(s) 5835243 ( 35.52%) 7998072303 ( 67.06%) 1370.65
http(c) 2936627 ( 17.88%) 222327144 ( 1.86%) 75.71
squid 515562 ( 3.14%) 321311807 ( 2.69%) 623.23
smtp 406652 ( 2.48%) 115775351 ( 0.97%) 284.70
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 49016 ( 0.30%) 25399726 ( 0.21%) 518.19
pop3 8088 ( 0.05%) 5962933 ( 0.05%) 737.26
imap 32210 ( 0.20%) 40697050 ( 0.34%) 1263.49
telnet 19335 ( 0.12%) 9673209 ( 0.08%) 500.30
ssh 683448 ( 4.16%) 909065487 ( 7.62%) 1330.12
dns 31604 ( 0.19%) 14993833 ( 0.13%) 474.43
bgp 142 ( 0.00%) 53751 ( 0.00%) 378.53
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 41 ( 0.00%) 3866 ( 0.00%) 94.29
rtsp 300 ( 0.00%) 57007 ( 0.00%) 190.02
icecast 226 ( 0.00%) 16894 ( 0.00%) 74.75
other 1788358 ( 10.89%) 1289826699 ( 10.81%) 721.24
udp 3205338 ( 19.51%) 836609693 ( 7.01%) 261.01
dns 2228677 ( 13.57%) 322453764 ( 2.70%) 144.68
realaud 16989 ( 0.10%) 7084490 ( 0.06%) 417.00
halflif 82 ( 0.00%) 8350 ( 0.00%) 101.83
starcra 54 ( 0.00%) 10267 ( 0.00%) 190.13
everque 108 ( 0.00%) 21000 ( 0.00%) 194.44
unreal 17 ( 0.00%) 2614 ( 0.00%) 153.76
quake 40 ( 0.00%) 3273 ( 0.00%) 81.83
cuseeme 7 ( 0.00%) 562 ( 0.00%) 80.29
other 959112 ( 5.84%) 506806351 ( 4.25%) 528.41
icmp 854496 ( 5.20%) 126333580 ( 1.06%) 147.85
ipip 349 ( 0.00%) 42964 ( 0.00%) 123.11
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 24176 ( 0.15%) 4075936 ( 0.03%) 168.59
other 10426 ( 0.06%) 1440987 ( 0.01%) 138.21
frag 58686 ( 0.36%) 64495319 ( 0.54%) 1098.99
ip6 26309 ( 0.16%) 4899783 ( 0.04%) 186.24
tcp6 6795 ( 0.04%) 2066583 ( 0.02%) 304.13
http(c) 3542 ( 0.02%) 295631 ( 0.00%) 83.46
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 839 ( 0.01%) 314833 ( 0.00%) 375.25
bgp 362 ( 0.00%) 30110 ( 0.00%) 83.18
other 2049 ( 0.01%) 1425755 ( 0.01%) 695.83
udp6 14935 ( 0.09%) 2267977 ( 0.02%) 151.86
dns 14086 ( 0.09%) 2156514 ( 0.02%) 153.10
starcra 1 ( 0.00%) 145 ( 0.00%) 145.00
other 848 ( 0.01%) 111318 ( 0.00%) 131.27
icmp6 4534 ( 0.03%) 560243 ( 0.00%) 123.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 900 ( 0.00%) 60.00
tcpdump file: 200904010015.dump.gz (397.68 MB)