Traffic Trace Info
DumpFile: 200904010515.dump
FileSize: 693.90MB
Id: 200904010515
StartTime: Wed Apr 1 05:15:00 2009
EndTime: Wed Apr 1 05:30:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 541.94MB CapLen: 96 bytes
# of packets: 9958054 (6724.91MB)
AvgRate: 62.67Mbps stddev:10.28M
IP flow (unique src/dst pair) Information
# of flows: 714646 (avg. 13.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.7% 2.5% 1.5% 1.4% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 449082
Top 10 bandwidth usage (bytes/total in %):
17.4% 13.4% 7.7% 7.6% 7.1% 4.3% 3.2% 2.7% 2.7% 2.7%
# of IPv6 addresses: 969
Top 10 bandwidth usage (bytes/total in %):
66.4% 66.3% 8.6% 5.7% 4.1% 2.4% 2.4% 1.6% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010515.pktlen.png)
detailed numbers
[ 32- 63]: 2106524
[ 64- 127]: 2217799
[ 128- 255]: 678052
[ 256- 511]: 349454
[ 512- 1023]: 249940
[ 1024- 2047]: 4356285
Protocol Breakdown
![[protocol breakdown chart]](200904010515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9958054 (100.00%) 7051583776 (100.00%) 708.13
ip 9928677 ( 99.70%) 7041157922 ( 99.85%) 709.17
tcp 7647092 ( 76.79%) 6443156498 ( 91.37%) 842.56
http(s) 3409695 ( 34.24%) 4598562773 ( 65.21%) 1348.67
http(c) 1565030 ( 15.72%) 120808521 ( 1.71%) 77.19
squid 662529 ( 6.65%) 539102132 ( 7.65%) 813.70
smtp 340016 ( 3.41%) 60560395 ( 0.86%) 178.11
ftp 84161 ( 0.85%) 63351797 ( 0.90%) 752.75
pop3 6810 ( 0.07%) 2157669 ( 0.03%) 316.84
imap 1605 ( 0.02%) 185760 ( 0.00%) 115.74
telnet 2851 ( 0.03%) 189022 ( 0.00%) 66.30
ssh 153328 ( 1.54%) 56519405 ( 0.80%) 368.62
dns 17216 ( 0.17%) 1856825 ( 0.03%) 107.85
bgp 142 ( 0.00%) 45857 ( 0.00%) 322.94
napster 25 ( 0.00%) 2194 ( 0.00%) 87.76
realaud 178 ( 0.00%) 13442 ( 0.00%) 75.52
rtsp 46 ( 0.00%) 9930 ( 0.00%) 215.87
icecast 83 ( 0.00%) 5300 ( 0.00%) 63.86
hotline 7 ( 0.00%) 833 ( 0.00%) 119.00
other 1403360 ( 14.09%) 999783911 ( 14.18%) 712.42
udp 1564001 ( 15.71%) 482695876 ( 6.85%) 308.63
dns 1003953 ( 10.08%) 217553639 ( 3.09%) 216.70
realaud 18 ( 0.00%) 3143 ( 0.00%) 174.61
halflif 36 ( 0.00%) 3411 ( 0.00%) 94.75
starcra 91 ( 0.00%) 17351 ( 0.00%) 190.67
everque 67 ( 0.00%) 12264 ( 0.00%) 183.04
unreal 16 ( 0.00%) 3134 ( 0.00%) 195.88
quake 28 ( 0.00%) 2607 ( 0.00%) 93.11
cuseeme 8 ( 0.00%) 1257 ( 0.00%) 157.12
other 559574 ( 5.62%) 264915379 ( 3.76%) 473.42
icmp 687096 ( 6.90%) 110292218 ( 1.56%) 160.52
ipip 345 ( 0.00%) 41298 ( 0.00%) 119.70
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 20819 ( 0.21%) 3707249 ( 0.05%) 178.07
other 9216 ( 0.09%) 1247719 ( 0.02%) 135.39
frag 53549 ( 0.54%) 58521728 ( 0.83%) 1092.86
ip6 29377 ( 0.30%) 10425854 ( 0.15%) 354.90
tcp6 8808 ( 0.09%) 7439262 ( 0.11%) 844.60
http(c) 2470 ( 0.02%) 223878 ( 0.00%) 90.64
smtp 359 ( 0.00%) 157048 ( 0.00%) 437.46
bgp 389 ( 0.00%) 33970 ( 0.00%) 87.33
other 5590 ( 0.06%) 7024366 ( 0.10%) 1256.59
udp6 11016 ( 0.11%) 1827208 ( 0.03%) 165.87
dns 10975 ( 0.11%) 1822622 ( 0.03%) 166.07
other 41 ( 0.00%) 4586 ( 0.00%) 111.85
icmp6 9519 ( 0.10%) 1154738 ( 0.02%) 121.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 566 ( 0.00%) 141.50
tcpdump file: 200904010515.dump.gz (250.23 MB)