Traffic Trace Info
DumpFile: 200904010330.dump
FileSize: 916.86MB
Id: 200904010330
StartTime: Wed Apr 1 03:30:00 2009
EndTime: Wed Apr 1 03:45:00 2009
TotalTime: 900.07 seconds
TotalCapSize: 717.79MB CapLen: 96 bytes
# of packets: 13044279 (8760.71MB)
AvgRate: 81.63Mbps stddev:11.07M
IP flow (unique src/dst pair) Information
# of flows: 840084 (avg. 15.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.4% 2.1% 2.0% 1.9% 1.8% 1.4% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 508684
Top 10 bandwidth usage (bytes/total in %):
16.7% 15.5% 8.6% 6.8% 5.4% 3.1% 2.9% 2.8% 2.8% 2.6%
# of IPv6 addresses: 996
Top 10 bandwidth usage (bytes/total in %):
25.6% 25.3% 12.6% 12.1% 9.3% 6.8% 6.1% 4.4% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010330.pktlen.png)
detailed numbers
[ 32- 63]: 2714042
[ 64- 127]: 3239245
[ 128- 255]: 731766
[ 256- 511]: 371990
[ 512- 1023]: 243870
[ 1024- 2047]: 5743366
Protocol Breakdown
![[protocol breakdown chart]](200904010330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13044279 (100.00%) 9186271757 (100.00%) 704.24
ip 13023118 ( 99.84%) 9181255882 ( 99.95%) 705.00
tcp 9784955 ( 75.01%) 8438684971 ( 91.86%) 862.41
http(s) 4905727 ( 37.61%) 6692808484 ( 72.86%) 1364.28
http(c) 2342793 ( 17.96%) 174219873 ( 1.90%) 74.36
squid 663776 ( 5.09%) 527778792 ( 5.75%) 795.12
smtp 344908 ( 2.64%) 98279896 ( 1.07%) 284.95
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 64156 ( 0.49%) 49838478 ( 0.54%) 776.83
pop3 4090 ( 0.03%) 1762651 ( 0.02%) 430.97
imap 2579 ( 0.02%) 480087 ( 0.01%) 186.15
telnet 3252 ( 0.02%) 214665 ( 0.00%) 66.01
ssh 14284 ( 0.11%) 3101040 ( 0.03%) 217.10
dns 20757 ( 0.16%) 4731359 ( 0.05%) 227.94
bgp 148 ( 0.00%) 58159 ( 0.00%) 392.97
napster 16 ( 0.00%) 2712 ( 0.00%) 169.50
realaud 13 ( 0.00%) 944 ( 0.00%) 72.62
rtsp 45 ( 0.00%) 9870 ( 0.00%) 219.33
icecast 110 ( 0.00%) 7096 ( 0.00%) 64.51
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 1418295 ( 10.87%) 885390499 ( 9.64%) 624.26
udp 1755839 ( 13.46%) 574100665 ( 6.25%) 326.97
dns 1107840 ( 8.49%) 231957535 ( 2.53%) 209.38
realaud 14 ( 0.00%) 1667 ( 0.00%) 119.07
halflif 60 ( 0.00%) 7161 ( 0.00%) 119.35
starcra 69 ( 0.00%) 13365 ( 0.00%) 193.70
everque 90 ( 0.00%) 15757 ( 0.00%) 175.08
unreal 32 ( 0.00%) 5513 ( 0.00%) 172.28
quake 22 ( 0.00%) 3479 ( 0.00%) 158.14
cuseeme 19 ( 0.00%) 3151 ( 0.00%) 165.84
other 647492 ( 4.96%) 341930938 ( 3.72%) 528.09
icmp 1448625 ( 11.11%) 163002095 ( 1.77%) 112.52
ipip 292 ( 0.00%) 35280 ( 0.00%) 120.82
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 23047 ( 0.18%) 4034207 ( 0.04%) 175.04
other 10250 ( 0.08%) 1381284 ( 0.02%) 134.76
frag 53890 ( 0.41%) 59024983 ( 0.64%) 1095.29
ip6 21161 ( 0.16%) 5015875 ( 0.05%) 237.03
tcp6 6158 ( 0.05%) 2739509 ( 0.03%) 444.87
http(s) 373 ( 0.00%) 350956 ( 0.00%) 940.90
http(c) 2752 ( 0.02%) 250090 ( 0.00%) 90.88
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 366 ( 0.00%) 152422 ( 0.00%) 416.45
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 397 ( 0.00%) 36245 ( 0.00%) 91.30
other 2260 ( 0.02%) 1948944 ( 0.02%) 862.36
udp6 10435 ( 0.08%) 1699807 ( 0.02%) 162.89
dns 10369 ( 0.08%) 1692227 ( 0.02%) 163.20
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 64 ( 0.00%) 7355 ( 0.00%) 114.92
icmp6 4530 ( 0.03%) 566967 ( 0.01%) 125.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 5512 ( 0.00%) 689.00
tcpdump file: 200904010330.dump.gz (311.85 MB)