Traffic Trace Info
DumpFile: 200904010300.dump
FileSize: 898.21MB
Id: 200904010300
StartTime: Wed Apr 1 03:00:00 2009
EndTime: Wed Apr 1 03:15:01 2009
TotalTime: 900.08 seconds
TotalCapSize: 701.47MB CapLen: 96 bytes
# of packets: 12847768 (8907.03MB)
AvgRate: 88.05Mbps stddev:16.61M
IP flow (unique src/dst pair) Information
# of flows: 847681 (avg. 15.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.8% 1.8% 1.8% 1.6% 1.5% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 538415
Top 10 bandwidth usage (bytes/total in %):
17.0% 13.6% 9.1% 5.8% 4.6% 4.1% 3.9% 2.8% 2.8% 2.5%
# of IPv6 addresses: 1063
Top 10 bandwidth usage (bytes/total in %):
45.4% 23.2% 22.9% 8.8% 5.1% 4.5% 2.8% 2.7% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010300.pktlen.png)
detailed numbers
[ 32- 63]: 2664735
[ 64- 127]: 2918256
[ 128- 255]: 765092
[ 256- 511]: 400108
[ 512- 1023]: 228994
[ 1024- 2047]: 5870583
Protocol Breakdown
![[protocol breakdown chart]](200904010300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12847768 (100.00%) 9339698379 (100.00%) 726.95
ip 12825796 ( 99.83%) 9334128136 ( 99.94%) 727.76
tcp 10001309 ( 77.84%) 8593661024 ( 92.01%) 859.25
http(s) 5075861 ( 39.51%) 6928497602 ( 74.18%) 1364.99
http(c) 2234300 ( 17.39%) 169158164 ( 1.81%) 75.71
squid 496771 ( 3.87%) 359951409 ( 3.85%) 724.58
smtp 339899 ( 2.65%) 76679184 ( 0.82%) 225.59
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 96063 ( 0.75%) 76632088 ( 0.82%) 797.73
pop3 4009 ( 0.03%) 1674496 ( 0.02%) 417.68
imap 2207 ( 0.02%) 335444 ( 0.00%) 151.99
telnet 2823 ( 0.02%) 188265 ( 0.00%) 66.69
ssh 14322 ( 0.11%) 4411735 ( 0.05%) 308.04
dns 20662 ( 0.16%) 5193249 ( 0.06%) 251.34
bgp 119 ( 0.00%) 42552 ( 0.00%) 357.58
napster 4 ( 0.00%) 270 ( 0.00%) 67.50
realaud 10 ( 0.00%) 748 ( 0.00%) 74.80
rtsp 600 ( 0.00%) 451209 ( 0.00%) 752.01
icecast 79 ( 0.00%) 5028 ( 0.00%) 63.65
other 1713533 ( 13.34%) 970436761 ( 10.39%) 566.34
udp 1787493 ( 13.91%) 604876224 ( 6.48%) 338.39
dns 1118189 ( 8.70%) 233976377 ( 2.51%) 209.25
realaud 18 ( 0.00%) 2238 ( 0.00%) 124.33
halflif 55 ( 0.00%) 5859 ( 0.00%) 106.53
starcra 52 ( 0.00%) 10626 ( 0.00%) 204.35
everque 67 ( 0.00%) 14089 ( 0.00%) 210.28
unreal 27 ( 0.00%) 5041 ( 0.00%) 186.70
quake 24 ( 0.00%) 2580 ( 0.00%) 107.50
cuseeme 8 ( 0.00%) 1268 ( 0.00%) 158.50
other 668909 ( 5.21%) 370738579 ( 3.97%) 554.24
icmp 1007564 ( 7.84%) 130658904 ( 1.40%) 129.68
ipip 269 ( 0.00%) 33188 ( 0.00%) 123.38
ipsec 102 ( 0.00%) 16116 ( 0.00%) 158.00
ip6 19997 ( 0.16%) 3641290 ( 0.04%) 182.09
other 9062 ( 0.07%) 1241390 ( 0.01%) 136.99
frag 53482 ( 0.42%) 58558661 ( 0.63%) 1094.92
ip6 21972 ( 0.17%) 5570243 ( 0.06%) 253.52
tcp6 5388 ( 0.04%) 3065293 ( 0.03%) 568.91
http(c) 1983 ( 0.02%) 181439 ( 0.00%) 91.50
smtp 465 ( 0.00%) 201711 ( 0.00%) 433.79
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 360 ( 0.00%) 31876 ( 0.00%) 88.54
other 2578 ( 0.02%) 2650095 ( 0.03%) 1027.97
udp6 11307 ( 0.09%) 1869714 ( 0.02%) 165.36
dns 11274 ( 0.09%) 1866002 ( 0.02%) 165.51
other 33 ( 0.00%) 3712 ( 0.00%) 112.48
icmp6 5243 ( 0.04%) 625067 ( 0.01%) 119.22
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 6 ( 0.00%) 6361 ( 0.00%) 1060.17
tcpdump file: 200904010300.dump.gz (311.24 MB)