Traffic Trace Info
DumpFile: 200904010400.dump
FileSize: 784.16MB
Id: 200904010400
StartTime: Wed Apr 1 04:00:00 2009
EndTime: Wed Apr 1 04:15:00 2009
TotalTime: 899.68 seconds
TotalCapSize: 613.03MB CapLen: 96 bytes
# of packets: 11213690 (7826.33MB)
AvgRate: 72.98Mbps stddev:9.02M
IP flow (unique src/dst pair) Information
# of flows: 810087 (avg. 13.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.0% 1.9% 1.5% 1.4% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 504585
Top 10 bandwidth usage (bytes/total in %):
17.9% 13.9% 8.8% 6.8% 4.2% 3.9% 3.5% 3.1% 2.6% 2.2%
# of IPv6 addresses: 1075
Top 10 bandwidth usage (bytes/total in %):
34.2% 28.4% 17.3% 10.7% 6.0% 4.2% 4.2% 3.9% 3.9% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010400.pktlen.png)
detailed numbers
[ 32- 63]: 2411593
[ 64- 127]: 2463952
[ 128- 255]: 664114
[ 256- 511]: 336653
[ 512- 1023]: 234904
[ 1024- 2047]: 5102474
Protocol Breakdown
![[protocol breakdown chart]](200904010400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11213690 (100.00%) 8206505514 (100.00%) 731.83
ip 11177674 ( 99.68%) 8198788506 ( 99.91%) 733.50
tcp 8922851 ( 79.57%) 7700597242 ( 93.84%) 863.02
http(s) 4129884 ( 36.83%) 5609344199 ( 68.35%) 1358.23
http(c) 1985206 ( 17.70%) 150683288 ( 1.84%) 75.90
squid 878351 ( 7.83%) 785177591 ( 9.57%) 893.92
smtp 322300 ( 2.87%) 52560437 ( 0.64%) 163.08
ftp 61009 ( 0.54%) 47149275 ( 0.57%) 772.82
pop3 4079 ( 0.04%) 1785474 ( 0.02%) 437.72
imap 2154 ( 0.02%) 340538 ( 0.00%) 158.10
telnet 2719 ( 0.02%) 178188 ( 0.00%) 65.53
ssh 21438 ( 0.19%) 13600790 ( 0.17%) 634.42
dns 20912 ( 0.19%) 5730994 ( 0.07%) 274.05
bgp 139 ( 0.00%) 45017 ( 0.00%) 323.86
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 22 ( 0.00%) 1582 ( 0.00%) 71.91
rtsp 45 ( 0.00%) 9870 ( 0.00%) 219.33
icecast 126 ( 0.00%) 8314 ( 0.00%) 65.98
other 1494466 ( 13.33%) 1033981625 ( 12.60%) 691.87
udp 1488079 ( 13.27%) 357927682 ( 4.36%) 240.53
dns 1043990 ( 9.31%) 213961796 ( 2.61%) 204.95
realaud 15 ( 0.00%) 1434 ( 0.00%) 95.60
halflif 44 ( 0.00%) 5392 ( 0.00%) 122.55
starcra 54 ( 0.00%) 10950 ( 0.00%) 202.78
everque 115 ( 0.00%) 20713 ( 0.00%) 180.11
unreal 18 ( 0.00%) 3267 ( 0.00%) 181.50
quake 27 ( 0.00%) 3181 ( 0.00%) 117.81
cuseeme 11 ( 0.00%) 1824 ( 0.00%) 165.82
other 443568 ( 3.96%) 143701645 ( 1.75%) 323.97
icmp 718010 ( 6.40%) 113122057 ( 1.38%) 157.55
ipip 312 ( 0.00%) 37831 ( 0.00%) 121.25
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 38317 ( 0.34%) 25739985 ( 0.31%) 671.76
other 9995 ( 0.09%) 1346329 ( 0.02%) 134.70
frag 54717 ( 0.49%) 60043700 ( 0.73%) 1097.35
ip6 36016 ( 0.32%) 7717008 ( 0.09%) 214.27
tcp6 16950 ( 0.15%) 4655711 ( 0.06%) 274.67
http(s) 409 ( 0.00%) 321087 ( 0.00%) 785.05
http(c) 12030 ( 0.11%) 1051262 ( 0.01%) 87.39
smtp 1288 ( 0.01%) 468516 ( 0.01%) 363.75
ftp 14 ( 0.00%) 1352 ( 0.00%) 96.57
bgp 385 ( 0.00%) 34033 ( 0.00%) 88.40
other 2824 ( 0.03%) 2779461 ( 0.03%) 984.23
udp6 13984 ( 0.12%) 2442755 ( 0.03%) 174.68
dns 13940 ( 0.12%) 2437784 ( 0.03%) 174.88
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
other 43 ( 0.00%) 4859 ( 0.00%) 113.00
icmp6 5043 ( 0.04%) 613846 ( 0.01%) 121.72
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 480 ( 0.00%) 60.00
tcpdump file: 200904010400.dump.gz (280.01 MB)