Traffic Trace Info
DumpFile: 200904010200.dump
FileSize: 922.72MB
Id: 200904010200
StartTime: Wed Apr 1 02:00:00 2009
EndTime: Wed Apr 1 02:15:01 2009
TotalTime: 900.49 seconds
TotalCapSize: 720.29MB CapLen: 96 bytes
# of packets: 13266087 (9403.51MB)
AvgRate: 87.59Mbps stddev:9.28M
IP flow (unique src/dst pair) Information
# of flows: 842927 (avg. 15.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 1.7% 1.7% 1.6% 1.6% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 524542
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.6% 10.5% 5.3% 4.4% 4.4% 3.4% 2.6% 2.4% 2.1%
# of IPv6 addresses: 1071
Top 10 bandwidth usage (bytes/total in %):
44.3% 31.2% 28.2% 15.6% 6.9% 3.9% 2.9% 2.5% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010200.pktlen.png)
detailed numbers
[ 32- 63]: 2785527
[ 64- 127]: 2739736
[ 128- 255]: 850869
[ 256- 511]: 375477
[ 512- 1023]: 316961
[ 1024- 2047]: 6197517
Protocol Breakdown
![[protocol breakdown chart]](200904010200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13266087 (100.00%) 9860298919 (100.00%) 743.27
ip 13215794 ( 99.62%) 9852196030 ( 99.92%) 745.49
tcp 10204317 ( 76.92%) 8972523785 ( 91.00%) 879.29
http(s) 4860039 ( 36.64%) 6572079465 ( 66.65%) 1352.27
http(c) 2224321 ( 16.77%) 187372291 ( 1.90%) 84.24
squid 759780 ( 5.73%) 631292460 ( 6.40%) 830.89
smtp 382432 ( 2.88%) 71300999 ( 0.72%) 186.44
ftp 45113 ( 0.34%) 22506962 ( 0.23%) 498.90
pop3 7345 ( 0.06%) 5247082 ( 0.05%) 714.37
imap 2727 ( 0.02%) 417810 ( 0.00%) 153.21
telnet 9924 ( 0.07%) 2574432 ( 0.03%) 259.41
ssh 47855 ( 0.36%) 49498383 ( 0.50%) 1034.34
dns 22631 ( 0.17%) 7259435 ( 0.07%) 320.77
bgp 128 ( 0.00%) 36573 ( 0.00%) 285.73
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 87 ( 0.00%) 17250 ( 0.00%) 198.28
icecast 123 ( 0.00%) 8607 ( 0.00%) 69.98
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1841334 ( 13.88%) 1422883238 ( 14.43%) 772.75
udp 2063543 ( 15.56%) 689287007 ( 6.99%) 334.03
dns 1253707 ( 9.45%) 263441015 ( 2.67%) 210.13
realaud 289 ( 0.00%) 18473 ( 0.00%) 63.92
halflif 117 ( 0.00%) 9819 ( 0.00%) 83.92
starcra 55 ( 0.00%) 10919 ( 0.00%) 198.53
everque 80 ( 0.00%) 17519 ( 0.00%) 218.99
unreal 16 ( 0.00%) 2880 ( 0.00%) 180.00
quake 20 ( 0.00%) 2046 ( 0.00%) 102.30
cuseeme 8 ( 0.00%) 1418 ( 0.00%) 177.25
other 809040 ( 6.10%) 425607163 ( 4.32%) 526.06
icmp 873997 ( 6.59%) 125445538 ( 1.27%) 143.53
ipip 289 ( 0.00%) 34290 ( 0.00%) 118.65
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 63602 ( 0.48%) 63365963 ( 0.64%) 996.29
other 9936 ( 0.07%) 1522067 ( 0.02%) 153.19
frag 60621 ( 0.46%) 66091139 ( 0.67%) 1090.24
ip6 50293 ( 0.38%) 8102889 ( 0.08%) 161.11
tcp6 31938 ( 0.24%) 5327167 ( 0.05%) 166.80
http(c) 28689 ( 0.22%) 2484245 ( 0.03%) 86.59
smtp 319 ( 0.00%) 170501 ( 0.00%) 534.49
dns 8 ( 0.00%) 920 ( 0.00%) 115.00
bgp 381 ( 0.00%) 33543 ( 0.00%) 88.04
other 2541 ( 0.02%) 2637958 ( 0.03%) 1038.16
udp6 13100 ( 0.10%) 2113847 ( 0.02%) 161.36
dns 13054 ( 0.10%) 2108641 ( 0.02%) 161.53
other 46 ( 0.00%) 5206 ( 0.00%) 113.17
icmp6 5215 ( 0.04%) 653461 ( 0.01%) 125.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 4334 ( 0.00%) 433.40
tcpdump file: 200904010200.dump.gz (326.14 MB)