Traffic Trace Info
DumpFile: 200904010500.dump
FileSize: 754.94MB
Id: 200904010500
StartTime: Wed Apr 1 05:00:01 2009
EndTime: Wed Apr 1 05:15:00 2009
TotalTime: 899.22 seconds
TotalCapSize: 591.15MB CapLen: 96 bytes
# of packets: 10733519 (6933.66MB)
AvgRate: 64.67Mbps stddev:10.56M
IP flow (unique src/dst pair) Information
# of flows: 814967 (avg. 13.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.4% 2.6% 2.4% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 490800
Top 10 bandwidth usage (bytes/total in %):
17.0% 13.8% 7.2% 7.0% 6.3% 5.9% 5.4% 4.1% 3.4% 2.9%
# of IPv6 addresses: 1015
Top 10 bandwidth usage (bytes/total in %):
44.6% 26.3% 19.3% 9.7% 6.8% 5.5% 5.1% 3.7% 3.6% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010500.pktlen.png)
detailed numbers
[ 32- 63]: 2298546
[ 64- 127]: 2727276
[ 128- 255]: 692252
[ 256- 511]: 336152
[ 512- 1023]: 219062
[ 1024- 2047]: 4460231
Protocol Breakdown
![[protocol breakdown chart]](200904010500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10733519 (100.00%) 7270470479 (100.00%) 677.36
ip 10704920 ( 99.73%) 7263730284 ( 99.91%) 678.54
tcp 8009978 ( 74.63%) 6691147148 ( 92.03%) 835.35
http(s) 3672723 ( 34.22%) 5004973996 ( 68.84%) 1362.74
http(c) 1727171 ( 16.09%) 130080851 ( 1.79%) 75.31
squid 538721 ( 5.02%) 410931221 ( 5.65%) 762.79
smtp 336079 ( 3.13%) 54749321 ( 0.75%) 162.91
ftp 76714 ( 0.71%) 57062188 ( 0.78%) 743.83
pop3 8313 ( 0.08%) 2048737 ( 0.03%) 246.45
imap 1703 ( 0.02%) 283559 ( 0.00%) 166.51
telnet 3153 ( 0.03%) 208489 ( 0.00%) 66.12
ssh 17140 ( 0.16%) 2675584 ( 0.04%) 156.10
dns 17255 ( 0.16%) 1933064 ( 0.03%) 112.03
bgp 133 ( 0.00%) 40594 ( 0.00%) 305.22
napster 6 ( 0.00%) 660 ( 0.00%) 110.00
realaud 25 ( 0.00%) 3256 ( 0.00%) 130.24
rtsp 486 ( 0.00%) 332594 ( 0.00%) 684.35
icecast 75 ( 0.00%) 4858 ( 0.00%) 64.77
hotline 8 ( 0.00%) 482 ( 0.00%) 60.25
other 1610070 ( 15.00%) 1025805514 ( 14.11%) 637.12
udp 1563835 ( 14.57%) 424615398 ( 5.84%) 271.52
dns 1069434 ( 9.96%) 223140943 ( 3.07%) 208.65
realaud 19 ( 0.00%) 3282 ( 0.00%) 172.74
halflif 38 ( 0.00%) 4248 ( 0.00%) 111.79
starcra 63 ( 0.00%) 11545 ( 0.00%) 183.25
everque 73 ( 0.00%) 13283 ( 0.00%) 181.96
unreal 25 ( 0.00%) 3906 ( 0.00%) 156.24
quake 21 ( 0.00%) 2816 ( 0.00%) 134.10
cuseeme 11 ( 0.00%) 2004 ( 0.00%) 182.18
other 493964 ( 4.60%) 201271338 ( 2.77%) 407.46
icmp 1098738 ( 10.24%) 142091691 ( 1.95%) 129.32
ipip 288 ( 0.00%) 35828 ( 0.00%) 124.40
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 22262 ( 0.21%) 4515842 ( 0.06%) 202.85
other 9709 ( 0.09%) 1306997 ( 0.02%) 134.62
frag 56794 ( 0.53%) 62433356 ( 0.86%) 1099.29
ip6 28599 ( 0.27%) 6740195 ( 0.09%) 235.68
tcp6 9285 ( 0.09%) 3832167 ( 0.05%) 412.73
http(s) 1 ( 0.00%) 74 ( 0.00%) 74.00
http(c) 2658 ( 0.02%) 243582 ( 0.00%) 91.64
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 475 ( 0.00%) 195404 ( 0.00%) 411.38
ftp 40 ( 0.00%) 3808 ( 0.00%) 95.20
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 376 ( 0.00%) 32289 ( 0.00%) 85.88
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 5730 ( 0.05%) 3356616 ( 0.05%) 585.80
udp6 11999 ( 0.11%) 2017386 ( 0.03%) 168.13
dns 11954 ( 0.11%) 2012150 ( 0.03%) 168.32
other 45 ( 0.00%) 5236 ( 0.00%) 116.36
icmp6 7281 ( 0.07%) 884111 ( 0.01%) 121.43
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3 ( 0.00%) 2315 ( 0.00%) 771.67
tcpdump file: 200904010500.dump.gz (261.76 MB)