Traffic Trace Info
DumpFile: 200904010615.dump
FileSize: 673.77MB
Id: 200904010615
StartTime: Wed Apr 1 06:15:00 2009
EndTime: Wed Apr 1 06:30:00 2009
TotalTime: 900.16 seconds
TotalCapSize: 528.43MB CapLen: 96 bytes
# of packets: 9524186 (6180.62MB)
AvgRate: 57.61Mbps stddev:11.94M
IP flow (unique src/dst pair) Information
# of flows: 698263 (avg. 13.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.6% 2.4% 2.2% 1.8% 1.5% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 434272
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.8% 9.7% 6.2% 6.1% 4.9% 4.2% 4.2% 3.6% 2.9%
# of IPv6 addresses: 908
Top 10 bandwidth usage (bytes/total in %):
44.6% 44.5% 12.9% 8.5% 6.3% 6.3% 5.5% 3.6% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010615.pktlen.png)
detailed numbers
[ 32- 63]: 1688890
[ 64- 127]: 2773201
[ 128- 255]: 528785
[ 256- 511]: 325552
[ 512- 1023]: 216120
[ 1024- 2047]: 3991638
Protocol Breakdown
![[protocol breakdown chart]](200904010615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9524186 (100.00%) 6480853988 (100.00%) 680.46
ip 9498238 ( 99.73%) 6473802022 ( 99.89%) 681.58
tcp 6814229 ( 71.55%) 5877713941 ( 90.69%) 862.56
http(s) 3058011 ( 32.11%) 4111312977 ( 63.44%) 1344.44
http(c) 1186599 ( 12.46%) 97232220 ( 1.50%) 81.94
squid 490257 ( 5.15%) 387621894 ( 5.98%) 790.65
smtp 259532 ( 2.72%) 47349582 ( 0.73%) 182.44
ftp 74285 ( 0.78%) 62364547 ( 0.96%) 839.53
pop3 3914 ( 0.04%) 1880343 ( 0.03%) 480.41
imap 1500 ( 0.02%) 176474 ( 0.00%) 117.65
telnet 32195 ( 0.34%) 8600312 ( 0.13%) 267.13
ssh 83567 ( 0.88%) 12024470 ( 0.19%) 143.89
dns 24974 ( 0.26%) 14390434 ( 0.22%) 576.22
bgp 134 ( 0.00%) 42959 ( 0.00%) 320.59
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 125 ( 0.00%) 33007 ( 0.00%) 264.06
icecast 98 ( 0.00%) 6424 ( 0.00%) 65.55
other 1598848 ( 16.79%) 1134666758 ( 17.51%) 709.68
udp 1561192 ( 16.39%) 460821826 ( 7.11%) 295.17
dns 903191 ( 9.48%) 206387598 ( 3.18%) 228.51
realaud 296 ( 0.00%) 19552 ( 0.00%) 66.05
halflif 31 ( 0.00%) 3628 ( 0.00%) 117.03
starcra 61 ( 0.00%) 13919 ( 0.00%) 228.18
everque 70 ( 0.00%) 12369 ( 0.00%) 176.70
unreal 18 ( 0.00%) 3090 ( 0.00%) 171.67
quake 13 ( 0.00%) 1151 ( 0.00%) 88.54
cuseeme 5 ( 0.00%) 453 ( 0.00%) 90.60
other 657332 ( 6.90%) 254234375 ( 3.92%) 386.77
icmp 1093902 ( 11.49%) 130145360 ( 2.01%) 118.97
ipip 334 ( 0.00%) 40624 ( 0.00%) 121.63
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 19862 ( 0.21%) 3879225 ( 0.06%) 195.31
other 8611 ( 0.09%) 1183982 ( 0.02%) 137.50
frag 50054 ( 0.53%) 54708659 ( 0.84%) 1092.99
ip6 25948 ( 0.27%) 7051966 ( 0.11%) 271.77
tcp6 7533 ( 0.08%) 4530617 ( 0.07%) 601.44
http(c) 2728 ( 0.03%) 246891 ( 0.00%) 90.50
smtp 888 ( 0.01%) 326449 ( 0.01%) 367.62
ftp 18 ( 0.00%) 1446 ( 0.00%) 80.33
imap 214 ( 0.00%) 242037 ( 0.00%) 1131.01
bgp 384 ( 0.00%) 33482 ( 0.00%) 87.19
other 3301 ( 0.03%) 3680312 ( 0.06%) 1114.91
udp6 8855 ( 0.09%) 1375395 ( 0.02%) 155.32
dns 8799 ( 0.09%) 1369291 ( 0.02%) 155.62
other 56 ( 0.00%) 6104 ( 0.00%) 109.00
icmp6 9527 ( 0.10%) 1141618 ( 0.02%) 119.83
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200904010615.dump.gz (229.22 MB)