Traffic Trace Info
DumpFile: 200904010045.dump
FileSize: 1188.70MB
Id: 200904010045
StartTime: Wed Apr 1 00:45:00 2009
EndTime: Wed Apr 1 01:00:00 2009
TotalTime: 900.23 seconds
TotalCapSize: 921.83MB CapLen: 96 bytes
# of packets: 17485090 (11952.82MB)
AvgRate: 111.35Mbps stddev:12.43M
IP flow (unique src/dst pair) Information
# of flows: 1023944 (avg. 17.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 2.5% 2.0% 1.8% 1.5% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 683297
Top 10 bandwidth usage (bytes/total in %):
17.8% 10.2% 9.8% 7.9% 7.7% 4.9% 3.1% 3.0% 2.6% 2.6%
# of IPv6 addresses: 1119
Top 10 bandwidth usage (bytes/total in %):
45.3% 29.3% 16.0% 10.1% 10.1% 8.0% 4.3% 3.4% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010045.pktlen.png)
detailed numbers
[ 32- 63]: 3655552
[ 64- 127]: 3731437
[ 128- 255]: 1357918
[ 256- 511]: 399399
[ 512- 1023]: 423591
[ 1024- 2047]: 7917193
Protocol Breakdown
![[protocol breakdown chart]](200904010045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17485090 (100.00%) 12533442549 (100.00%) 716.81
ip 17448650 ( 99.79%) 12525552858 ( 99.94%) 717.85
tcp 12611664 ( 72.13%) 11029201694 ( 88.00%) 874.52
http(s) 5857102 ( 33.50%) 7982234564 ( 63.69%) 1362.83
http(c) 2830964 ( 16.19%) 219558895 ( 1.75%) 77.56
squid 599252 ( 3.43%) 415028161 ( 3.31%) 692.58
smtp 426751 ( 2.44%) 85556831 ( 0.68%) 200.48
ftp 41122 ( 0.24%) 15660574 ( 0.12%) 380.83
pop3 4933 ( 0.03%) 2453604 ( 0.02%) 497.39
imap 2544 ( 0.01%) 457634 ( 0.00%) 179.89
telnet 8981 ( 0.05%) 2577966 ( 0.02%) 287.05
ssh 732260 ( 4.19%) 989238815 ( 7.89%) 1350.94
dns 23387 ( 0.13%) 4266151 ( 0.03%) 182.42
bgp 140 ( 0.00%) 46557 ( 0.00%) 332.55
realaud 77 ( 0.00%) 4886 ( 0.00%) 63.45
rtsp 304 ( 0.00%) 54604 ( 0.00%) 179.62
icecast 245 ( 0.00%) 16190 ( 0.00%) 66.08
other 2083480 ( 11.92%) 1312038942 ( 10.47%) 629.73
udp 4050045 ( 23.16%) 1371662800 ( 10.94%) 338.68
dns 2502510 ( 14.31%) 374193269 ( 2.99%) 149.53
realaud 2384 ( 0.01%) 145485 ( 0.00%) 61.03
halflif 53 ( 0.00%) 7658 ( 0.00%) 144.49
starcra 2813 ( 0.02%) 2714502 ( 0.02%) 964.98
everque 84 ( 0.00%) 17708 ( 0.00%) 210.81
unreal 18 ( 0.00%) 3600 ( 0.00%) 200.00
quake 33 ( 0.00%) 3500 ( 0.00%) 106.06
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 1541920 ( 8.82%) 994368859 ( 7.93%) 644.89
icmp 753759 ( 4.31%) 119680507 ( 0.95%) 158.78
ipip 361 ( 0.00%) 44466 ( 0.00%) 123.17
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 21920 ( 0.13%) 3058756 ( 0.02%) 139.54
other 10789 ( 0.06%) 1886907 ( 0.02%) 174.89
frag 59695 ( 0.34%) 65476208 ( 0.52%) 1096.85
ip6 36440 ( 0.21%) 7889691 ( 0.06%) 216.51
tcp6 18010 ( 0.10%) 5160711 ( 0.04%) 286.55
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 13109 ( 0.07%) 1007441 ( 0.01%) 76.85
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 928 ( 0.01%) 397670 ( 0.00%) 428.52
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 378 ( 0.00%) 32422 ( 0.00%) 85.77
other 3578 ( 0.02%) 3721424 ( 0.03%) 1040.08
udp6 13664 ( 0.08%) 2128908 ( 0.02%) 155.80
dns 13496 ( 0.08%) 2108105 ( 0.02%) 156.20
other 168 ( 0.00%) 20803 ( 0.00%) 123.83
icmp6 4718 ( 0.03%) 587104 ( 0.00%) 124.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17 ( 0.00%) 8752 ( 0.00%) 514.82
tcpdump file: 200904010045.dump.gz (424.80 MB)