Traffic Trace Info
DumpFile: 200904010100.dump
FileSize: 1213.40MB
Id: 200904010100
StartTime: Wed Apr 1 01:00:00 2009
EndTime: Wed Apr 1 01:15:00 2009
TotalTime: 899.76 seconds
TotalCapSize: 940.09MB CapLen: 96 bytes
# of packets: 17911042 (12579.59MB)
AvgRate: 117.27Mbps stddev:13.71M
IP flow (unique src/dst pair) Information
# of flows: 830293 (avg. 21.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.3% 1.9% 1.7% 1.6% 1.6% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 527470
Top 10 bandwidth usage (bytes/total in %):
18.0% 8.8% 8.8% 5.4% 5.4% 4.7% 4.5% 3.2% 2.7% 2.7%
# of IPv6 addresses: 1043
Top 10 bandwidth usage (bytes/total in %):
96.6% 58.7% 37.9% 0.6% 0.6% 0.5% 0.2% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010100.pktlen.png)
detailed numbers
[ 32- 63]: 3369273
[ 64- 127]: 3995227
[ 128- 255]: 1261774
[ 256- 511]: 415994
[ 512- 1023]: 379543
[ 1024- 2047]: 8489231
Protocol Breakdown
![[protocol breakdown chart]](200904010100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17911042 (100.00%) 13190658503 (100.00%) 736.45
ip 17791769 ( 99.33%) 13059541970 ( 99.01%) 734.02
tcp 12287589 ( 68.60%) 11024316275 ( 83.58%) 897.19
http(s) 5886631 ( 32.87%) 8085519114 ( 61.30%) 1373.54
http(c) 2663446 ( 14.87%) 207758442 ( 1.58%) 78.00
squid 760403 ( 4.25%) 598137833 ( 4.53%) 786.61
smtp 531555 ( 2.97%) 151068083 ( 1.15%) 284.20
ftp 44835 ( 0.25%) 18235338 ( 0.14%) 406.72
pop3 10699 ( 0.06%) 10632584 ( 0.08%) 993.79
imap 4403 ( 0.02%) 1687235 ( 0.01%) 383.20
telnet 9620 ( 0.05%) 2840011 ( 0.02%) 295.22
ssh 586093 ( 3.27%) 768212590 ( 5.82%) 1310.73
dns 21364 ( 0.12%) 3542598 ( 0.03%) 165.82
bgp 140 ( 0.00%) 44359 ( 0.00%) 316.85
napster 11 ( 0.00%) 1099 ( 0.00%) 99.91
realaud 171 ( 0.00%) 10688 ( 0.00%) 62.50
rtsp 295 ( 0.00%) 45923 ( 0.00%) 155.67
icecast 132 ( 0.00%) 9247 ( 0.00%) 70.05
hotline 4 ( 0.00%) 244 ( 0.00%) 61.00
other 1767718 ( 9.87%) 1176566561 ( 8.92%) 665.58
udp 4639247 ( 25.90%) 1903567840 ( 14.43%) 410.32
dns 2233542 ( 12.47%) 348833011 ( 2.64%) 156.18
realaud 2737 ( 0.02%) 165771 ( 0.00%) 60.57
halflif 48 ( 0.00%) 4240 ( 0.00%) 88.33
starcra 886 ( 0.00%) 807608 ( 0.01%) 911.52
everque 67 ( 0.00%) 12523 ( 0.00%) 186.91
unreal 15 ( 0.00%) 3384 ( 0.00%) 225.60
quake 65 ( 0.00%) 8028 ( 0.00%) 123.51
cuseeme 15 ( 0.00%) 1852 ( 0.00%) 123.47
other 2401569 ( 13.41%) 1553510857 ( 11.78%) 646.87
icmp 823519 ( 4.60%) 120808290 ( 0.92%) 146.70
ipip 299 ( 0.00%) 35644 ( 0.00%) 119.21
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 24774 ( 0.14%) 3759953 ( 0.03%) 151.77
other 16233 ( 0.09%) 7036904 ( 0.05%) 433.49
frag 60493 ( 0.34%) 66071196 ( 0.50%) 1092.21
ip6 119273 ( 0.67%) 131116533 ( 0.99%) 1099.30
tcp6 100492 ( 0.56%) 128270960 ( 0.97%) 1276.43
http(c) 12655 ( 0.07%) 977929 ( 0.01%) 77.28
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 605 ( 0.00%) 461933 ( 0.00%) 763.53
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 460 ( 0.00%) 115.00
bgp 369 ( 0.00%) 31039 ( 0.00%) 84.12
other 86854 ( 0.48%) 126799173 ( 0.96%) 1459.91
udp6 14414 ( 0.08%) 2280704 ( 0.02%) 158.23
dns 14286 ( 0.08%) 2266654 ( 0.02%) 158.66
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 127 ( 0.00%) 13940 ( 0.00%) 109.76
icmp6 4324 ( 0.02%) 548209 ( 0.00%) 126.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 12580 ( 0.00%) 967.69
tcpdump file: 200904010100.dump.gz (427.16 MB)