Traffic Trace Info
DumpFile: 200904010700.dump
FileSize: 661.08MB
Id: 200904010700
StartTime: Wed Apr 1 07:00:00 2009
EndTime: Wed Apr 1 07:15:01 2009
TotalTime: 900.01 seconds
TotalCapSize: 518.01MB CapLen: 96 bytes
# of packets: 9369643 (6283.14MB)
AvgRate: 58.56Mbps stddev:10.11M
IP flow (unique src/dst pair) Information
# of flows: 680706 (avg. 13.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.4% 2.4% 2.3% 1.8% 1.8% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 433226
Top 10 bandwidth usage (bytes/total in %):
13.5% 9.2% 7.9% 7.3% 4.5% 4.3% 4.1% 3.5% 3.4% 3.4%
# of IPv6 addresses: 989
Top 10 bandwidth usage (bytes/total in %):
59.2% 44.3% 17.3% 8.3% 4.9% 4.1% 2.6% 2.5% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010700.pktlen.png)
detailed numbers
[ 32- 63]: 1810067
[ 64- 127]: 2373158
[ 128- 255]: 550780
[ 256- 511]: 351350
[ 512- 1023]: 240727
[ 1024- 2047]: 4043561
Protocol Breakdown
![[protocol breakdown chart]](200904010700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9369643 (100.00%) 6588347887 (100.00%) 703.16
ip 9343780 ( 99.72%) 6580925976 ( 99.89%) 704.31
tcp 7301307 ( 77.93%) 6081532064 ( 92.31%) 832.94
http(s) 3365269 ( 35.92%) 4460007785 ( 67.70%) 1325.30
http(c) 1182438 ( 12.62%) 100257220 ( 1.52%) 84.79
squid 608596 ( 6.50%) 448285139 ( 6.80%) 736.59
smtp 300022 ( 3.20%) 49590433 ( 0.75%) 165.29
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 86149 ( 0.92%) 69405782 ( 1.05%) 805.65
pop3 5166 ( 0.06%) 2620825 ( 0.04%) 507.32
imap 2376 ( 0.03%) 333794 ( 0.01%) 140.49
telnet 968 ( 0.01%) 67048 ( 0.00%) 69.26
ssh 63434 ( 0.68%) 8540192 ( 0.13%) 134.63
dns 15746 ( 0.17%) 3005875 ( 0.05%) 190.90
bgp 166 ( 0.00%) 60249 ( 0.00%) 362.95
napster 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 20 ( 0.00%) 18531 ( 0.00%) 926.55
icecast 100 ( 0.00%) 6901 ( 0.00%) 69.01
hotline 93 ( 0.00%) 6460 ( 0.00%) 69.46
other 1670712 ( 17.83%) 939322598 ( 14.26%) 562.23
udp 1371547 ( 14.64%) 392894234 ( 5.96%) 286.46
dns 914267 ( 9.76%) 208763564 ( 3.17%) 228.34
realaud 9 ( 0.00%) 788 ( 0.00%) 87.56
halflif 44 ( 0.00%) 4878 ( 0.00%) 110.86
starcra 53 ( 0.00%) 10565 ( 0.00%) 199.34
everque 71 ( 0.00%) 12847 ( 0.00%) 180.94
unreal 9 ( 0.00%) 1974 ( 0.00%) 219.33
quake 21 ( 0.00%) 2576 ( 0.00%) 122.67
cuseeme 7 ( 0.00%) 1079 ( 0.00%) 154.14
other 456895 ( 4.88%) 183951931 ( 2.79%) 402.61
icmp 631187 ( 6.74%) 100433695 ( 1.52%) 159.12
ipip 297 ( 0.00%) 36122 ( 0.00%) 121.62
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 20937 ( 0.22%) 3667454 ( 0.06%) 175.17
other 18391 ( 0.20%) 2344467 ( 0.04%) 127.48
frag 49118 ( 0.52%) 53875373 ( 0.82%) 1096.86
ip6 25863 ( 0.28%) 7421911 ( 0.11%) 286.97
tcp6 8790 ( 0.09%) 5068787 ( 0.08%) 576.65
http(c) 4010 ( 0.04%) 342537 ( 0.01%) 85.42
smtp 282 ( 0.00%) 142729 ( 0.00%) 506.13
ftp 236 ( 0.00%) 28547 ( 0.00%) 120.96
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 379 ( 0.00%) 33214 ( 0.00%) 87.64
other 3881 ( 0.04%) 4521588 ( 0.07%) 1165.06
udp6 11394 ( 0.12%) 1680262 ( 0.03%) 147.47
dns 11310 ( 0.12%) 1670589 ( 0.03%) 147.71
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
other 83 ( 0.00%) 9574 ( 0.00%) 115.35
icmp6 5648 ( 0.06%) 668646 ( 0.01%) 118.39
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200904010700.dump.gz (232.47 MB)