Traffic Trace Info
DumpFile: 200904010245.dump
FileSize: 891.66MB
Id: 200904010245
StartTime: Wed Apr 1 02:45:01 2009
EndTime: Wed Apr 1 03:00:00 2009
TotalTime: 899.83 seconds
TotalCapSize: 694.21MB CapLen: 96 bytes
# of packets: 12939699 (8654.96MB)
AvgRate: 80.69Mbps stddev:10.74M
IP flow (unique src/dst pair) Information
# of flows: 965290 (avg. 13.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 1.8% 1.5% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 584396
Top 10 bandwidth usage (bytes/total in %):
16.2% 15.2% 10.4% 7.0% 4.7% 2.7% 2.5% 2.5% 2.5% 2.2%
# of IPv6 addresses: 1002
Top 10 bandwidth usage (bytes/total in %):
33.7% 27.7% 10.8% 6.9% 5.6% 4.8% 3.6% 3.6% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010245.pktlen.png)
detailed numbers
[ 32- 63]: 3041218
[ 64- 127]: 2690169
[ 128- 255]: 890674
[ 256- 511]: 370927
[ 512- 1023]: 272147
[ 1024- 2047]: 5674564
Protocol Breakdown
![[protocol breakdown chart]](200904010245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12939699 (100.00%) 9075379259 (100.00%) 701.36
ip 12914449 ( 99.80%) 9070766862 ( 99.95%) 702.37
tcp 9893391 ( 76.46%) 8286569772 ( 91.31%) 837.59
http(s) 5033261 ( 38.90%) 6822307482 ( 75.17%) 1355.44
http(c) 2400459 ( 18.55%) 182761008 ( 2.01%) 76.14
squid 421023 ( 3.25%) 284848118 ( 3.14%) 676.56
smtp 394864 ( 3.05%) 93006528 ( 1.02%) 235.54
ftp 99487 ( 0.77%) 93963242 ( 1.04%) 944.48
pop3 4867 ( 0.04%) 2363964 ( 0.03%) 485.71
imap 2492 ( 0.02%) 407904 ( 0.00%) 163.69
telnet 2725 ( 0.02%) 183572 ( 0.00%) 67.37
ssh 74211 ( 0.57%) 38689022 ( 0.43%) 521.34
dns 19561 ( 0.15%) 2266606 ( 0.02%) 115.87
bgp 134 ( 0.00%) 43426 ( 0.00%) 324.07
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 52 ( 0.00%) 10320 ( 0.00%) 198.46
icecast 141 ( 0.00%) 9500 ( 0.00%) 67.38
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1440087 ( 11.13%) 765707320 ( 8.44%) 531.71
udp 2216990 ( 17.13%) 657846271 ( 7.25%) 296.73
dns 1420811 ( 10.98%) 271344723 ( 2.99%) 190.98
realaud 12 ( 0.00%) 1798 ( 0.00%) 149.83
halflif 54 ( 0.00%) 7609 ( 0.00%) 140.91
starcra 54 ( 0.00%) 11322 ( 0.00%) 209.67
everque 100 ( 0.00%) 19265 ( 0.00%) 192.65
unreal 18 ( 0.00%) 3516 ( 0.00%) 195.33
quake 16 ( 0.00%) 1216 ( 0.00%) 76.00
cuseeme 1 ( 0.00%) 74 ( 0.00%) 74.00
other 795732 ( 6.15%) 386288385 ( 4.26%) 485.45
icmp 769866 ( 5.95%) 120580437 ( 1.33%) 156.63
ipip 334 ( 0.00%) 40832 ( 0.00%) 122.25
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 23232 ( 0.18%) 4027515 ( 0.04%) 173.36
other 10526 ( 0.08%) 1684623 ( 0.02%) 160.04
frag 54041 ( 0.42%) 59315498 ( 0.65%) 1097.60
ip6 25250 ( 0.20%) 4612397 ( 0.05%) 182.67
tcp6 8243 ( 0.06%) 2079337 ( 0.02%) 252.25
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 5511 ( 0.04%) 445594 ( 0.00%) 80.86
smtp 451 ( 0.00%) 185673 ( 0.00%) 411.69
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 8 ( 0.00%) 917 ( 0.00%) 114.62
bgp 380 ( 0.00%) 32997 ( 0.00%) 86.83
other 1887 ( 0.01%) 1413454 ( 0.02%) 749.05
udp6 11837 ( 0.09%) 1886460 ( 0.02%) 159.37
dns 11798 ( 0.09%) 1881988 ( 0.02%) 159.52
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
other 37 ( 0.00%) 4240 ( 0.00%) 114.59
icmp6 5136 ( 0.04%) 640069 ( 0.01%) 124.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3 ( 0.00%) 2315 ( 0.00%) 771.67
tcpdump file: 200904010245.dump.gz (320.35 MB)