Traffic Trace Info
DumpFile: 200904010545.dump
FileSize: 652.70MB
Id: 200904010545
StartTime: Wed Apr 1 05:45:01 2009
EndTime: Wed Apr 1 06:00:00 2009
TotalTime: 899.89 seconds
TotalCapSize: 510.20MB CapLen: 96 bytes
# of packets: 9336500 (6478.78MB)
AvgRate: 60.40Mbps stddev:8.94M
IP flow (unique src/dst pair) Information
# of flows: 698383 (avg. 13.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.7% 2.5% 2.2% 2.2% 2.0% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 430876
Top 10 bandwidth usage (bytes/total in %):
15.3% 13.6% 7.2% 6.9% 6.8% 3.7% 3.7% 2.7% 2.5% 2.5%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
24.0% 23.8% 17.3% 11.6% 11.6% 11.4% 6.9% 3.4% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010545.pktlen.png)
detailed numbers
[ 32- 63]: 1840598
[ 64- 127]: 2096693
[ 128- 255]: 570881
[ 256- 511]: 386510
[ 512- 1023]: 268043
[ 1024- 2047]: 4173775
Protocol Breakdown
![[protocol breakdown chart]](200904010545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9336500 (100.00%) 6793497752 (100.00%) 727.63
ip 9309856 ( 99.71%) 6788169835 ( 99.92%) 729.14
tcp 7154626 ( 76.63%) 6114446163 ( 90.00%) 854.61
http(s) 3402715 ( 36.45%) 4579381346 ( 67.41%) 1345.80
http(c) 1332710 ( 14.27%) 106248137 ( 1.56%) 79.72
squid 608986 ( 6.52%) 464316175 ( 6.83%) 762.44
smtp 306143 ( 3.28%) 56065642 ( 0.83%) 183.14
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 88311 ( 0.95%) 67761619 ( 1.00%) 767.31
pop3 4056 ( 0.04%) 1891132 ( 0.03%) 466.26
imap 1644 ( 0.02%) 400298 ( 0.01%) 243.49
telnet 12150 ( 0.13%) 872926 ( 0.01%) 71.85
ssh 31143 ( 0.33%) 3988145 ( 0.06%) 128.06
dns 17603 ( 0.19%) 3319881 ( 0.05%) 188.60
bgp 142 ( 0.00%) 51837 ( 0.00%) 365.05
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 378 ( 0.00%) 116326 ( 0.00%) 307.74
icecast 102 ( 0.00%) 7345 ( 0.00%) 72.01
hotline 5 ( 0.00%) 721 ( 0.00%) 144.20
other 1348475 ( 14.44%) 830020691 ( 12.22%) 615.53
udp 1634562 ( 17.51%) 582234764 ( 8.57%) 356.20
dns 1012105 ( 10.84%) 237926731 ( 3.50%) 235.08
realaud 559 ( 0.01%) 36188 ( 0.00%) 64.74
halflif 27 ( 0.00%) 3508 ( 0.00%) 129.93
starcra 48 ( 0.00%) 10166 ( 0.00%) 211.79
everque 72 ( 0.00%) 14229 ( 0.00%) 197.62
unreal 31 ( 0.00%) 6486 ( 0.00%) 209.23
quake 22 ( 0.00%) 2485 ( 0.00%) 112.95
cuseeme 6 ( 0.00%) 1319 ( 0.00%) 219.83
other 621527 ( 6.66%) 344093119 ( 5.07%) 553.63
icmp 488682 ( 5.23%) 84547389 ( 1.24%) 173.01
ipip 347 ( 0.00%) 40758 ( 0.00%) 117.46
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 22477 ( 0.24%) 5663036 ( 0.08%) 251.95
other 9052 ( 0.10%) 1220313 ( 0.02%) 134.81
frag 65038 ( 0.70%) 70193958 ( 1.03%) 1079.28
ip6 26644 ( 0.29%) 5327917 ( 0.08%) 199.97
tcp6 6817 ( 0.07%) 2574768 ( 0.04%) 377.70
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 3455 ( 0.04%) 406600 ( 0.01%) 117.68
smtp 319 ( 0.00%) 130632 ( 0.00%) 409.50
imap 945 ( 0.01%) 615016 ( 0.01%) 650.81
bgp 391 ( 0.00%) 34585 ( 0.00%) 88.45
other 1703 ( 0.02%) 1387405 ( 0.02%) 814.68
udp6 9521 ( 0.10%) 1544820 ( 0.02%) 162.25
dns 9471 ( 0.10%) 1538239 ( 0.02%) 162.42
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 49 ( 0.00%) 6462 ( 0.00%) 131.88
icmp6 10275 ( 0.11%) 1203965 ( 0.02%) 117.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 284 ( 0.00%) 284.00
tcpdump file: 200904010545.dump.gz (233.61 MB)