Traffic Trace Info
DumpFile: 200904010145.dump
FileSize: 995.46MB
Id: 200904010145
StartTime: Wed Apr 1 01:45:00 2009
EndTime: Wed Apr 1 02:00:00 2009
TotalTime: 900.24 seconds
TotalCapSize: 776.54MB CapLen: 96 bytes
# of packets: 14346741 (9902.34MB)
AvgRate: 92.27Mbps stddev:14.91M
IP flow (unique src/dst pair) Information
# of flows: 850350 (avg. 16.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.3% 1.7% 1.5% 1.4% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 535880
Top 10 bandwidth usage (bytes/total in %):
13.3% 13.1% 12.2% 6.1% 3.7% 3.6% 3.2% 2.5% 2.3% 2.3%
# of IPv6 addresses: 994
Top 10 bandwidth usage (bytes/total in %):
22.2% 22.2% 16.1% 10.2% 9.0% 5.4% 4.7% 4.2% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010145.pktlen.png)
detailed numbers
[ 32- 63]: 2917221
[ 64- 127]: 3253190
[ 128- 255]: 931600
[ 256- 511]: 374463
[ 512- 1023]: 320913
[ 1024- 2047]: 6549354
Protocol Breakdown
![[protocol breakdown chart]](200904010145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14346741 (100.00%) 10383356430 (100.00%) 723.74
ip 14311529 ( 99.75%) 10377608176 ( 99.94%) 725.12
tcp 10691812 ( 74.52%) 9396946104 ( 90.50%) 878.89
http(s) 5231736 ( 36.47%) 7114360470 ( 68.52%) 1359.85
http(c) 2364988 ( 16.48%) 182088443 ( 1.75%) 76.99
squid 715987 ( 4.99%) 592761419 ( 5.71%) 827.89
smtp 388094 ( 2.71%) 66749732 ( 0.64%) 171.99
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 66111 ( 0.46%) 51370018 ( 0.49%) 777.03
pop3 17797 ( 0.12%) 14851826 ( 0.14%) 834.51
imap 2734 ( 0.02%) 527667 ( 0.01%) 193.00
telnet 9158 ( 0.06%) 2295797 ( 0.02%) 250.69
ssh 93217 ( 0.65%) 102466799 ( 0.99%) 1099.23
dns 20443 ( 0.14%) 3512402 ( 0.03%) 171.81
bgp 131 ( 0.00%) 36919 ( 0.00%) 281.82
napster 25 ( 0.00%) 1784 ( 0.00%) 71.36
realaud 20 ( 0.00%) 1444 ( 0.00%) 72.20
rtsp 216 ( 0.00%) 33788 ( 0.00%) 156.43
icecast 122 ( 0.00%) 8212 ( 0.00%) 67.31
other 1780915 ( 12.41%) 1265872304 ( 12.19%) 710.80
udp 2295682 ( 16.00%) 806401305 ( 7.77%) 351.27
dns 1295081 ( 9.03%) 254814104 ( 2.45%) 196.76
realaud 1797 ( 0.01%) 109099 ( 0.00%) 60.71
halflif 44 ( 0.00%) 4133 ( 0.00%) 93.93
starcra 64 ( 0.00%) 12555 ( 0.00%) 196.17
everque 65 ( 0.00%) 14051 ( 0.00%) 216.17
unreal 21 ( 0.00%) 4123 ( 0.00%) 196.33
quake 26 ( 0.00%) 6338 ( 0.00%) 243.77
cuseeme 7 ( 0.00%) 853 ( 0.00%) 121.86
other 998374 ( 6.96%) 551258602 ( 5.31%) 552.16
icmp 1277061 ( 8.90%) 153011764 ( 1.47%) 119.82
ipip 343 ( 0.00%) 42009 ( 0.00%) 122.48
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 36307 ( 0.25%) 19804980 ( 0.19%) 545.49
other 10214 ( 0.07%) 1384602 ( 0.01%) 135.56
frag 57848 ( 0.40%) 63373417 ( 0.61%) 1095.52
ip6 35212 ( 0.25%) 5748254 ( 0.06%) 163.25
tcp6 18442 ( 0.13%) 3204868 ( 0.03%) 173.78
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 14913 ( 0.10%) 1233132 ( 0.01%) 82.69
smtp 1303 ( 0.01%) 542708 ( 0.01%) 416.51
dns 10 ( 0.00%) 1077 ( 0.00%) 107.70
bgp 377 ( 0.00%) 32508 ( 0.00%) 86.23
other 1835 ( 0.01%) 1394913 ( 0.01%) 760.17
udp6 12056 ( 0.08%) 1964389 ( 0.02%) 162.94
dns 12001 ( 0.08%) 1957102 ( 0.02%) 163.08
other 55 ( 0.00%) 7287 ( 0.00%) 132.49
icmp6 4673 ( 0.03%) 574181 ( 0.01%) 122.87
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10 ( 0.00%) 600 ( 0.00%) 60.00
tcpdump file: 200904010145.dump.gz (345.11 MB)