Traffic Trace Info
DumpFile: 200904010800.dump
FileSize: 633.75MB
Id: 200904010800
StartTime: Wed Apr 1 08:00:01 2009
EndTime: Wed Apr 1 08:15:01 2009
TotalTime: 899.94 seconds
TotalCapSize: 494.96MB CapLen: 96 bytes
# of packets: 9094900 (5976.30MB)
AvgRate: 55.70Mbps stddev:8.33M
IP flow (unique src/dst pair) Information
# of flows: 713016 (avg. 12.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.7% 2.7% 2.7% 2.2% 1.8% 1.8% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 493340
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.8% 8.7% 7.9% 7.3% 4.4% 3.7% 3.7% 3.7% 3.7%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
42.7% 40.9% 18.2% 15.8% 7.4% 5.8% 2.7% 2.7% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010800.pktlen.png)
detailed numbers
[ 32- 63]: 2003496
[ 64- 127]: 2199068
[ 128- 255]: 493396
[ 256- 511]: 301422
[ 512- 1023]: 216810
[ 1024- 2047]: 3880708
Protocol Breakdown
![[protocol breakdown chart]](200904010800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9094900 (100.00%) 6266609938 (100.00%) 689.02
ip 9060460 ( 99.62%) 6259650340 ( 99.89%) 690.88
tcp 7132309 ( 78.42%) 5667549728 ( 90.44%) 794.63
http(s) 3033695 ( 33.36%) 4057747569 ( 64.75%) 1337.56
http(c) 1430020 ( 15.72%) 121751909 ( 1.94%) 85.14
squid 504475 ( 5.55%) 334872249 ( 5.34%) 663.80
smtp 304524 ( 3.35%) 58210791 ( 0.93%) 191.15
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 81502 ( 0.90%) 72225883 ( 1.15%) 886.19
pop3 5367 ( 0.06%) 2875470 ( 0.05%) 535.77
imap 5991 ( 0.07%) 4282381 ( 0.07%) 714.80
telnet 100432 ( 1.10%) 7406521 ( 0.12%) 73.75
ssh 33915 ( 0.37%) 15389394 ( 0.25%) 453.76
dns 15321 ( 0.17%) 5156309 ( 0.08%) 336.55
bgp 136 ( 0.00%) 42237 ( 0.00%) 310.57
napster 53 ( 0.00%) 3801 ( 0.00%) 71.72
realaud 10 ( 0.00%) 716 ( 0.00%) 71.60
rtsp 15 ( 0.00%) 2865 ( 0.00%) 191.00
icecast 99 ( 0.00%) 6568 ( 0.00%) 66.34
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1616642 ( 17.78%) 987568345 ( 15.76%) 610.88
udp 1397092 ( 15.36%) 500395117 ( 7.99%) 358.17
dns 812416 ( 8.93%) 187049959 ( 2.98%) 230.24
realaud 9 ( 0.00%) 1002 ( 0.00%) 111.33
halflif 32 ( 0.00%) 3401 ( 0.00%) 106.28
starcra 21 ( 0.00%) 3424 ( 0.00%) 163.05
everque 44 ( 0.00%) 9730 ( 0.00%) 221.14
unreal 9 ( 0.00%) 2230 ( 0.00%) 247.78
quake 11 ( 0.00%) 1503 ( 0.00%) 136.64
cuseeme 5 ( 0.00%) 397 ( 0.00%) 79.40
other 584360 ( 6.43%) 313173565 ( 5.00%) 535.93
icmp 488831 ( 5.37%) 85920628 ( 1.37%) 175.77
ipip 302 ( 0.00%) 36288 ( 0.00%) 120.16
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 21554 ( 0.24%) 3141140 ( 0.05%) 145.73
other 20258 ( 0.22%) 2589499 ( 0.04%) 127.83
frag 44592 ( 0.49%) 48872645 ( 0.78%) 1096.00
ip6 34440 ( 0.38%) 6959598 ( 0.11%) 202.08
tcp6 18374 ( 0.20%) 4598412 ( 0.07%) 250.27
http(c) 2240 ( 0.02%) 199732 ( 0.00%) 89.17
smtp 446 ( 0.00%) 196621 ( 0.00%) 440.85
bgp 371 ( 0.00%) 33072 ( 0.00%) 89.14
other 15317 ( 0.17%) 4168987 ( 0.07%) 272.18
udp6 10683 ( 0.12%) 1716233 ( 0.03%) 160.65
dns 10612 ( 0.12%) 1708813 ( 0.03%) 161.03
other 71 ( 0.00%) 7420 ( 0.00%) 104.51
icmp6 5352 ( 0.06%) 640737 ( 0.01%) 119.72
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200904010800.dump.gz (222.84 MB)