Traffic Trace Info
DumpFile: 200904010745.dump
FileSize: 726.43MB
Id: 200904010745
StartTime: Wed Apr 1 07:45:00 2009
EndTime: Wed Apr 1 08:00:01 2009
TotalTime: 900.15 seconds
TotalCapSize: 570.06MB CapLen: 96 bytes
# of packets: 10246650 (7222.18MB)
AvgRate: 67.30Mbps stddev:10.11M
IP flow (unique src/dst pair) Information
# of flows: 627060 (avg. 16.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 3.1% 3.1% 3.0% 2.3% 1.6% 1.5% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 377194
Top 10 bandwidth usage (bytes/total in %):
22.6% 14.3% 10.7% 8.3% 6.5% 4.6% 3.4% 3.1% 3.1% 3.1%
# of IPv6 addresses: 848
Top 10 bandwidth usage (bytes/total in %):
34.2% 27.1% 26.9% 21.9% 11.8% 7.2% 5.6% 2.6% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010745.pktlen.png)
detailed numbers
[ 32- 63]: 1919075
[ 64- 127]: 2571213
[ 128- 255]: 486827
[ 256- 511]: 294310
[ 512- 1023]: 217220
[ 1024- 2047]: 4758005
Protocol Breakdown
![[protocol breakdown chart]](200904010745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10246650 (100.00%) 7573001062 (100.00%) 739.07
ip 10202929 ( 99.57%) 7566668319 ( 99.92%) 741.62
tcp 8300074 ( 81.00%) 7018474373 ( 92.68%) 845.59
http(s) 3769034 ( 36.78%) 5098036861 ( 67.32%) 1352.61
http(c) 1698379 ( 16.57%) 134826251 ( 1.78%) 79.39
squid 534485 ( 5.22%) 370025392 ( 4.89%) 692.30
smtp 391939 ( 3.83%) 75479957 ( 1.00%) 192.58
ftp 78568 ( 0.77%) 67932536 ( 0.90%) 864.63
pop3 5958 ( 0.06%) 1624589 ( 0.02%) 272.67
imap 2043 ( 0.02%) 450759 ( 0.01%) 220.64
telnet 7030 ( 0.07%) 517171 ( 0.01%) 73.57
ssh 24413 ( 0.24%) 3524060 ( 0.05%) 144.35
dns 13681 ( 0.13%) 1546887 ( 0.02%) 113.07
bgp 150 ( 0.00%) 46706 ( 0.00%) 311.37
napster 15 ( 0.00%) 2543 ( 0.00%) 169.53
realaud 19 ( 0.00%) 2507 ( 0.00%) 131.95
rtsp 15 ( 0.00%) 2865 ( 0.00%) 191.00
icecast 133 ( 0.00%) 8781 ( 0.00%) 66.02
other 1774156 ( 17.31%) 1264443148 ( 16.70%) 712.70
udp 1378128 ( 13.45%) 437629953 ( 5.78%) 317.55
dns 816608 ( 7.97%) 189154463 ( 2.50%) 231.63
realaud 16 ( 0.00%) 1716 ( 0.00%) 107.25
halflif 30 ( 0.00%) 2939 ( 0.00%) 97.97
starcra 22 ( 0.00%) 4047 ( 0.00%) 183.95
everque 73 ( 0.00%) 12903 ( 0.00%) 176.75
unreal 8 ( 0.00%) 1469 ( 0.00%) 183.62
quake 14 ( 0.00%) 1300 ( 0.00%) 92.86
cuseeme 9 ( 0.00%) 721 ( 0.00%) 80.11
other 561199 ( 5.48%) 248335030 ( 3.28%) 442.51
icmp 468732 ( 4.57%) 84857628 ( 1.12%) 181.04
ipip 352 ( 0.00%) 44120 ( 0.00%) 125.34
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 35650 ( 0.35%) 23164491 ( 0.31%) 649.78
other 19883 ( 0.19%) 2480342 ( 0.03%) 124.75
frag 43760 ( 0.43%) 47919259 ( 0.63%) 1095.05
ip6 43721 ( 0.43%) 6332743 ( 0.08%) 144.84
tcp6 29460 ( 0.29%) 4371521 ( 0.06%) 148.39
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 10850 ( 0.11%) 943357 ( 0.01%) 86.95
smtp 383 ( 0.00%) 195571 ( 0.00%) 510.63
bgp 381 ( 0.00%) 32891 ( 0.00%) 86.33
other 17842 ( 0.17%) 3199172 ( 0.04%) 179.31
udp6 8942 ( 0.09%) 1329039 ( 0.02%) 148.63
dns 8855 ( 0.09%) 1319264 ( 0.02%) 148.99
other 87 ( 0.00%) 9775 ( 0.00%) 112.36
icmp6 5288 ( 0.05%) 628043 ( 0.01%) 118.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 60 ( 0.00%) 60.00
tcpdump file: 200904010745.dump.gz (246.02 MB)