Traffic Trace Info
DumpFile: 200904010030.dump
FileSize: 1113.99MB
Id: 200904010030
StartTime: Wed Apr 1 00:30:00 2009
EndTime: Wed Apr 1 00:45:00 2009
TotalTime: 899.64 seconds
TotalCapSize: 865.13MB CapLen: 96 bytes
# of packets: 16264869 (10617.17MB)
AvgRate: 98.99Mbps stddev:11.30M
IP flow (unique src/dst pair) Information
# of flows: 924490 (avg. 17.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 2.1% 1.9% 1.4% 1.3% 1.3% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 597681
Top 10 bandwidth usage (bytes/total in %):
14.4% 11.1% 11.0% 8.1% 8.1% 5.4% 3.2% 2.1% 2.1% 2.1%
# of IPv6 addresses: 1353
Top 10 bandwidth usage (bytes/total in %):
22.5% 22.5% 13.5% 13.5% 12.2% 5.5% 4.7% 4.5% 3.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010030.pktlen.png)
detailed numbers
[ 32- 63]: 3445164
[ 64- 127]: 3843779
[ 128- 255]: 1241917
[ 256- 511]: 408871
[ 512- 1023]: 390623
[ 1024- 2047]: 6934515
Protocol Breakdown
![[protocol breakdown chart]](200904010030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16264869 (100.00%) 11132905290 (100.00%) 684.48
ip 16228710 ( 99.78%) 11127226338 ( 99.95%) 685.65
tcp 11737577 ( 72.17%) 9933465765 ( 89.23%) 846.30
http(s) 5254902 ( 32.31%) 7128686420 ( 64.03%) 1356.58
http(c) 2944873 ( 18.11%) 226732326 ( 2.04%) 76.99
squid 533099 ( 3.28%) 334332368 ( 3.00%) 627.15
smtp 381156 ( 2.34%) 78508399 ( 0.71%) 205.97
ftp 40587 ( 0.25%) 17479686 ( 0.16%) 430.67
pop3 5876 ( 0.04%) 3807787 ( 0.03%) 648.02
imap 3494 ( 0.02%) 963476 ( 0.01%) 275.75
telnet 9620 ( 0.06%) 3071624 ( 0.03%) 319.30
ssh 688802 ( 4.23%) 909752335 ( 8.17%) 1320.77
dns 23575 ( 0.14%) 6328658 ( 0.06%) 268.45
bgp 157 ( 0.00%) 54040 ( 0.00%) 344.20
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 258 ( 0.00%) 41302 ( 0.00%) 160.09
icecast 202 ( 0.00%) 15806 ( 0.00%) 78.25
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 1850918 ( 11.38%) 1223687938 ( 10.99%) 661.12
udp 3704027 ( 22.77%) 1071103484 ( 9.62%) 289.17
dns 2434428 ( 14.97%) 366709983 ( 3.29%) 150.63
realaud 1825 ( 0.01%) 111263 ( 0.00%) 60.97
halflif 64 ( 0.00%) 6372 ( 0.00%) 99.56
starcra 47 ( 0.00%) 8755 ( 0.00%) 186.28
everque 75 ( 0.00%) 14878 ( 0.00%) 198.37
unreal 7 ( 0.00%) 1172 ( 0.00%) 167.43
quake 38 ( 0.00%) 3383 ( 0.00%) 89.03
cuseeme 5 ( 0.00%) 745 ( 0.00%) 149.00
other 1267355 ( 7.79%) 704094725 ( 6.32%) 555.56
icmp 751513 ( 4.62%) 117720172 ( 1.06%) 156.64
ipip 284 ( 0.00%) 33943 ( 0.00%) 119.52
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 24564 ( 0.15%) 3403427 ( 0.03%) 138.55
other 10637 ( 0.07%) 1482483 ( 0.01%) 139.37
frag 56663 ( 0.35%) 62319613 ( 0.56%) 1099.83
ip6 36159 ( 0.22%) 5678952 ( 0.05%) 157.06
tcp6 16083 ( 0.10%) 2763174 ( 0.02%) 171.81
http(s) 80 ( 0.00%) 32071 ( 0.00%) 400.89
http(c) 12912 ( 0.08%) 996247 ( 0.01%) 77.16
smtp 550 ( 0.00%) 204420 ( 0.00%) 371.67
dns 13 ( 0.00%) 1480 ( 0.00%) 113.85
bgp 377 ( 0.00%) 31831 ( 0.00%) 84.43
other 2151 ( 0.01%) 1497125 ( 0.01%) 696.01
udp6 14558 ( 0.09%) 2262476 ( 0.02%) 155.41
dns 14117 ( 0.09%) 2204171 ( 0.02%) 156.14
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
other 440 ( 0.00%) 58188 ( 0.00%) 132.25
icmp6 5479 ( 0.03%) 648682 ( 0.01%) 118.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 540 ( 0.00%) 60.00
tcpdump file: 200904010030.dump.gz (398.93 MB)