Traffic Trace Info
DumpFile: 200904010230.dump
FileSize: 918.49MB
Id: 200904010230
StartTime: Wed Apr 1 02:30:01 2009
EndTime: Wed Apr 1 02:45:01 2009
TotalTime: 899.93 seconds
TotalCapSize: 716.66MB CapLen: 96 bytes
# of packets: 13226862 (8871.12MB)
AvgRate: 82.70Mbps stddev:12.69M
IP flow (unique src/dst pair) Information
# of flows: 974452 (avg. 13.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.6% 2.2% 1.8% 1.6% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 596004
Top 10 bandwidth usage (bytes/total in %):
15.0% 13.9% 10.0% 5.8% 4.4% 4.2% 4.0% 2.8% 2.8% 2.7%
# of IPv6 addresses: 1004
Top 10 bandwidth usage (bytes/total in %):
26.0% 26.0% 11.6% 11.4% 10.5% 6.5% 5.9% 4.0% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010230.pktlen.png)
detailed numbers
[ 32- 63]: 2903708
[ 64- 127]: 2986328
[ 128- 255]: 912195
[ 256- 511]: 366610
[ 512- 1023]: 277994
[ 1024- 2047]: 5780027
Protocol Breakdown
![[protocol breakdown chart]](200904010230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13226862 (100.00%) 9302040682 (100.00%) 703.27
ip 13198773 ( 99.79%) 9297130453 ( 99.95%) 704.39
tcp 10016174 ( 75.73%) 8533691462 ( 91.74%) 851.99
http(s) 5028241 ( 38.02%) 6850976433 ( 73.65%) 1362.50
http(c) 2358370 ( 17.83%) 180450232 ( 1.94%) 76.51
squid 713041 ( 5.39%) 582960276 ( 6.27%) 817.57
smtp 357544 ( 2.70%) 57884953 ( 0.62%) 161.90
ftp 83205 ( 0.63%) 74057136 ( 0.80%) 890.06
pop3 4241 ( 0.03%) 1792272 ( 0.02%) 422.61
imap 2911 ( 0.02%) 744831 ( 0.01%) 255.87
telnet 2631 ( 0.02%) 205276 ( 0.00%) 78.02
ssh 60392 ( 0.46%) 11708754 ( 0.13%) 193.88
dns 20663 ( 0.16%) 5604831 ( 0.06%) 271.25
bgp 136 ( 0.00%) 40485 ( 0.00%) 297.68
napster 13 ( 0.00%) 2013 ( 0.00%) 154.85
realaud 22 ( 0.00%) 2711 ( 0.00%) 123.23
rtsp 45 ( 0.00%) 9900 ( 0.00%) 220.00
icecast 120 ( 0.00%) 8309 ( 0.00%) 69.24
hotline 10 ( 0.00%) 1827 ( 0.00%) 182.70
other 1384485 ( 10.47%) 767234921 ( 8.25%) 554.17
udp 2281565 ( 17.25%) 618114210 ( 6.64%) 270.92
dns 1516711 ( 11.47%) 282571445 ( 3.04%) 186.31
realaud 11 ( 0.00%) 1904 ( 0.00%) 173.09
halflif 57 ( 0.00%) 5301 ( 0.00%) 93.00
starcra 98 ( 0.00%) 17954 ( 0.00%) 183.20
everque 94 ( 0.00%) 19601 ( 0.00%) 208.52
unreal 22 ( 0.00%) 4476 ( 0.00%) 203.45
quake 28 ( 0.00%) 3188 ( 0.00%) 113.86
cuseeme 9 ( 0.00%) 1154 ( 0.00%) 128.22
other 764367 ( 5.78%) 335348274 ( 3.61%) 438.73
icmp 856862 ( 6.48%) 124589297 ( 1.34%) 145.40
ipip 286 ( 0.00%) 35142 ( 0.00%) 122.87
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 31636 ( 0.24%) 18230799 ( 0.20%) 576.27
other 12140 ( 0.09%) 2452163 ( 0.03%) 201.99
frag 55948 ( 0.42%) 61280289 ( 0.66%) 1095.31
ip6 28089 ( 0.21%) 4910229 ( 0.05%) 174.81
tcp6 11125 ( 0.08%) 2318433 ( 0.02%) 208.40
http(c) 8593 ( 0.06%) 756719 ( 0.01%) 88.06
smtp 378 ( 0.00%) 146561 ( 0.00%) 387.73
bgp 363 ( 0.00%) 30493 ( 0.00%) 84.00
other 1791 ( 0.01%) 1384660 ( 0.01%) 773.12
udp6 12066 ( 0.09%) 1956365 ( 0.02%) 162.14
dns 12018 ( 0.09%) 1950821 ( 0.02%) 162.32
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 45 ( 0.00%) 5227 ( 0.00%) 116.16
icmp6 4862 ( 0.04%) 630991 ( 0.01%) 129.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 360 ( 0.00%) 60.00
tcpdump file: 200904010230.dump.gz (326.51 MB)