Traffic Trace Info
DumpFile: 200904010415.dump
FileSize: 803.52MB
Id: 200904010415
StartTime: Wed Apr 1 04:15:00 2009
EndTime: Wed Apr 1 04:30:01 2009
TotalTime: 900.50 seconds
TotalCapSize: 628.02MB CapLen: 96 bytes
# of packets: 11500028 (7911.09MB)
AvgRate: 73.70Mbps stddev:8.40M
IP flow (unique src/dst pair) Information
# of flows: 811553 (avg. 14.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.5% 2.0% 1.8% 1.8% 1.4% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 498137
Top 10 bandwidth usage (bytes/total in %):
17.9% 13.4% 9.4% 6.4% 5.0% 4.4% 3.3% 3.0% 2.6% 2.5%
# of IPv6 addresses: 999
Top 10 bandwidth usage (bytes/total in %):
41.7% 40.7% 18.7% 18.4% 5.9% 4.3% 2.9% 2.3% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010415.pktlen.png)
detailed numbers
[ 32- 63]: 2473572
[ 64- 127]: 2523658
[ 128- 255]: 745262
[ 256- 511]: 351560
[ 512- 1023]: 252764
[ 1024- 2047]: 5153212
Protocol Breakdown
![[protocol breakdown chart]](200904010415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11500028 (100.00%) 8295375528 (100.00%) 721.34
ip 11443698 ( 99.51%) 8288264766 ( 99.91%) 724.26
tcp 8876838 ( 77.19%) 7638643675 ( 92.08%) 860.51
http(s) 4042335 ( 35.15%) 5496425883 ( 66.26%) 1359.72
http(c) 1910242 ( 16.61%) 143988099 ( 1.74%) 75.38
squid 865587 ( 7.53%) 715671333 ( 8.63%) 826.80
smtp 344581 ( 3.00%) 72858642 ( 0.88%) 211.44
ftp 56029 ( 0.49%) 41970753 ( 0.51%) 749.09
pop3 6056 ( 0.05%) 4140760 ( 0.05%) 683.75
imap 3282 ( 0.03%) 2337699 ( 0.03%) 712.28
telnet 3163 ( 0.03%) 214171 ( 0.00%) 67.71
ssh 26059 ( 0.23%) 7773768 ( 0.09%) 298.31
dns 26011 ( 0.23%) 14068512 ( 0.17%) 540.87
bgp 153 ( 0.00%) 51200 ( 0.00%) 334.64
napster 9 ( 0.00%) 639 ( 0.00%) 71.00
realaud 14 ( 0.00%) 1020 ( 0.00%) 72.86
rtsp 6426 ( 0.06%) 6033885 ( 0.07%) 938.98
icecast 102 ( 0.00%) 6688 ( 0.00%) 65.57
other 1586652 ( 13.80%) 1133085383 ( 13.66%) 714.14
udp 1637926 ( 14.24%) 447055616 ( 5.39%) 272.94
dns 1084984 ( 9.43%) 236968089 ( 2.86%) 218.41
realaud 16 ( 0.00%) 2071 ( 0.00%) 129.44
halflif 52 ( 0.00%) 7495 ( 0.00%) 144.13
starcra 48 ( 0.00%) 9429 ( 0.00%) 196.44
everque 124 ( 0.00%) 20558 ( 0.00%) 165.79
unreal 18 ( 0.00%) 6542 ( 0.00%) 363.44
quake 13 ( 0.00%) 1662 ( 0.00%) 127.85
cuseeme 14 ( 0.00%) 1095 ( 0.00%) 78.21
other 552501 ( 4.80%) 209907088 ( 2.53%) 379.92
icmp 844127 ( 7.34%) 121940999 ( 1.47%) 144.46
ipip 326 ( 0.00%) 39446 ( 0.00%) 121.00
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 74827 ( 0.65%) 79293684 ( 0.96%) 1059.69
other 9546 ( 0.08%) 1274282 ( 0.02%) 133.49
frag 55570 ( 0.48%) 60911114 ( 0.73%) 1096.12
ip6 56330 ( 0.49%) 7110762 ( 0.09%) 126.23
tcp6 40743 ( 0.35%) 4799007 ( 0.06%) 117.79
http(c) 38406 ( 0.33%) 3294976 ( 0.04%) 85.79
smtp 158 ( 0.00%) 50388 ( 0.00%) 318.91
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 374 ( 0.00%) 32289 ( 0.00%) 86.33
other 1801 ( 0.02%) 1420895 ( 0.02%) 788.95
udp6 10751 ( 0.09%) 1740819 ( 0.02%) 161.92
dns 10709 ( 0.09%) 1736030 ( 0.02%) 162.11
other 42 ( 0.00%) 4789 ( 0.00%) 114.02
icmp6 4794 ( 0.04%) 566136 ( 0.01%) 118.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 720 ( 0.00%) 60.00
tcpdump file: 200904010415.dump.gz (284.49 MB)