Traffic Trace Info
DumpFile: 200904010600.dump
FileSize: 625.92MB
Id: 200904010600
StartTime: Wed Apr 1 06:00:00 2009
EndTime: Wed Apr 1 06:15:00 2009
TotalTime: 899.71 seconds
TotalCapSize: 489.88MB CapLen: 96 bytes
# of packets: 8912688 (5983.58MB)
AvgRate: 55.79Mbps stddev:9.51M
IP flow (unique src/dst pair) Information
# of flows: 771193 (avg. 11.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.9% 2.5% 2.2% 1.9% 1.5% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 450220
Top 10 bandwidth usage (bytes/total in %):
18.0% 9.4% 9.1% 7.9% 6.2% 3.8% 3.2% 2.9% 2.9% 2.7%
# of IPv6 addresses: 979
Top 10 bandwidth usage (bytes/total in %):
79.0% 57.8% 21.7% 5.8% 3.8% 2.6% 1.1% 1.0% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010600.pktlen.png)
detailed numbers
[ 32- 63]: 1701365
[ 64- 127]: 2265296
[ 128- 255]: 521784
[ 256- 511]: 327406
[ 512- 1023]: 245337
[ 1024- 2047]: 3851500
Protocol Breakdown
![[protocol breakdown chart]](200904010600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8912688 (100.00%) 6274236873 (100.00%) 703.97
ip 8880412 ( 99.64%) 6258580541 ( 99.75%) 704.76
tcp 6800801 ( 76.30%) 5736276826 ( 91.43%) 843.47
http(s) 3100289 ( 34.79%) 4146020567 ( 66.08%) 1337.30
http(c) 1278579 ( 14.35%) 102047183 ( 1.63%) 79.81
squid 610435 ( 6.85%) 451965770 ( 7.20%) 740.40
smtp 255077 ( 2.86%) 49215527 ( 0.78%) 192.94
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 70422 ( 0.79%) 59139429 ( 0.94%) 839.79
pop3 3774 ( 0.04%) 1593028 ( 0.03%) 422.11
imap 1579 ( 0.02%) 234935 ( 0.00%) 148.79
telnet 39188 ( 0.44%) 2875849 ( 0.05%) 73.39
ssh 72836 ( 0.82%) 9073600 ( 0.14%) 124.58
dns 18950 ( 0.21%) 5593703 ( 0.09%) 295.18
bgp 144 ( 0.00%) 49484 ( 0.00%) 343.64
napster 4 ( 0.00%) 248 ( 0.00%) 62.00
realaud 54 ( 0.00%) 33434 ( 0.00%) 619.15
rtsp 228 ( 0.00%) 68491 ( 0.00%) 300.40
icecast 83 ( 0.00%) 5366 ( 0.00%) 64.65
hotline 10 ( 0.00%) 614 ( 0.00%) 61.40
other 1348930 ( 15.13%) 908346458 ( 14.48%) 673.38
udp 1450107 ( 16.27%) 422382867 ( 6.73%) 291.28
dns 941196 ( 10.56%) 215839979 ( 3.44%) 229.33
realaud 943 ( 0.01%) 59961 ( 0.00%) 63.59
halflif 35 ( 0.00%) 4833 ( 0.00%) 138.09
starcra 53 ( 0.00%) 10614 ( 0.00%) 200.26
everque 58 ( 0.00%) 11831 ( 0.00%) 203.98
unreal 24 ( 0.00%) 4104 ( 0.00%) 171.00
quake 16 ( 0.00%) 8614 ( 0.00%) 538.38
cuseeme 3 ( 0.00%) 227 ( 0.00%) 75.67
other 507605 ( 5.70%) 206286910 ( 3.29%) 406.39
icmp 597495 ( 6.70%) 93867517 ( 1.50%) 157.10
ipip 300 ( 0.00%) 37971 ( 0.00%) 126.57
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 21845 ( 0.25%) 4681045 ( 0.07%) 214.28
other 9754 ( 0.11%) 1316935 ( 0.02%) 135.01
frag 54558 ( 0.61%) 59476075 ( 0.95%) 1090.14
ip6 32276 ( 0.36%) 15656332 ( 0.25%) 485.08
tcp6 12795 ( 0.14%) 13000218 ( 0.21%) 1016.04
http(c) 2764 ( 0.03%) 250891 ( 0.00%) 90.77
smtp 323 ( 0.00%) 131666 ( 0.00%) 407.63
imap 139 ( 0.00%) 123831 ( 0.00%) 890.87
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 395 ( 0.00%) 35505 ( 0.00%) 89.89
other 9170 ( 0.10%) 12457866 ( 0.20%) 1358.55
udp6 9494 ( 0.11%) 1457578 ( 0.02%) 153.53
dns 9446 ( 0.11%) 1452482 ( 0.02%) 153.77
other 48 ( 0.00%) 5096 ( 0.00%) 106.17
icmp6 9945 ( 0.11%) 1183072 ( 0.02%) 118.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 11384 ( 0.00%) 948.67
tcpdump file: 200904010600.dump.gz (225.34 MB)