Traffic Trace Info
DumpFile: 200904010900.dump
FileSize: 816.68MB
Id: 200904010900
StartTime: Wed Apr 1 09:00:01 2009
EndTime: Wed Apr 1 09:15:00 2009
TotalTime: 899.65 seconds
TotalCapSize: 639.58MB CapLen: 96 bytes
# of packets: 11606271 (6963.21MB)
AvgRate: 64.93Mbps stddev:9.00M
IP flow (unique src/dst pair) Information
# of flows: 889588 (avg. 13.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.1% 2.2% 2.1% 2.1% 1.9% 1.8% 1.5% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 478819
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.1% 8.4% 5.3% 5.0% 5.0% 4.0% 3.1% 3.1% 2.9%
# of IPv6 addresses: 937
Top 10 bandwidth usage (bytes/total in %):
29.7% 29.7% 23.8% 17.0% 13.5% 11.9% 8.8% 6.2% 5.0% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010900.pktlen.png)
detailed numbers
[ 32- 63]: 2453590
[ 64- 127]: 3518918
[ 128- 255]: 492262
[ 256- 511]: 316689
[ 512- 1023]: 326375
[ 1024- 2047]: 4498437
Protocol Breakdown
![[protocol breakdown chart]](200904010900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11606271 (100.00%) 7301454746 (100.00%) 629.10
ip 11532394 ( 99.36%) 7290798421 ( 99.85%) 632.20
tcp 8515491 ( 73.37%) 6421871744 ( 87.95%) 754.14
http(s) 3644564 ( 31.40%) 4839568018 ( 66.28%) 1327.89
http(c) 2110530 ( 18.18%) 182603738 ( 2.50%) 86.52
squid 598780 ( 5.16%) 474972234 ( 6.51%) 793.23
smtp 284867 ( 2.45%) 65314704 ( 0.89%) 229.28
ftp 71422 ( 0.62%) 60685666 ( 0.83%) 849.68
pop3 10579 ( 0.09%) 1909864 ( 0.03%) 180.53
imap 3518 ( 0.03%) 451413 ( 0.01%) 128.32
telnet 957 ( 0.01%) 91732 ( 0.00%) 95.85
ssh 142005 ( 1.22%) 55839847 ( 0.76%) 393.22
dns 15957 ( 0.14%) 2974217 ( 0.04%) 186.39
bgp 127 ( 0.00%) 33067 ( 0.00%) 260.37
napster 12 ( 0.00%) 1870 ( 0.00%) 155.83
realaud 17 ( 0.00%) 1474 ( 0.00%) 86.71
rtsp 3 ( 0.00%) 186 ( 0.00%) 62.00
icecast 126 ( 0.00%) 8472 ( 0.00%) 67.24
other 1632004 ( 14.06%) 737413862 ( 10.10%) 451.85
udp 1835226 ( 15.81%) 736708602 ( 10.09%) 401.43
dns 935325 ( 8.06%) 232439260 ( 3.18%) 248.51
realaud 8 ( 0.00%) 1276 ( 0.00%) 159.50
halflif 30 ( 0.00%) 2653 ( 0.00%) 88.43
starcra 29 ( 0.00%) 5404 ( 0.00%) 186.34
everque 46 ( 0.00%) 9616 ( 0.00%) 209.04
unreal 9 ( 0.00%) 1323 ( 0.00%) 147.00
quake 18 ( 0.00%) 2373 ( 0.00%) 131.83
cuseeme 6 ( 0.00%) 545 ( 0.00%) 90.83
other 899618 ( 7.75%) 504122010 ( 6.90%) 560.37
icmp 1146535 ( 9.88%) 126136030 ( 1.73%) 110.01
ipip 311 ( 0.00%) 38385 ( 0.00%) 123.42
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 23558 ( 0.20%) 3179580 ( 0.04%) 134.97
other 11163 ( 0.10%) 2846700 ( 0.04%) 255.01
frag 42268 ( 0.36%) 46513689 ( 0.64%) 1100.45
ip6 73877 ( 0.64%) 10656325 ( 0.15%) 144.24
tcp6 57432 ( 0.49%) 8370254 ( 0.11%) 145.74
http(s) 1476 ( 0.01%) 937093 ( 0.01%) 634.89
http(c) 3578 ( 0.03%) 667584 ( 0.01%) 186.58
smtp 922 ( 0.01%) 439482 ( 0.01%) 476.66
ftp 148 ( 0.00%) 13708 ( 0.00%) 92.62
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 369 ( 0.00%) 31206 ( 0.00%) 84.57
other 50937 ( 0.44%) 6281009 ( 0.09%) 123.31
udp6 11349 ( 0.10%) 1652876 ( 0.02%) 145.64
dns 11316 ( 0.10%) 1649235 ( 0.02%) 145.74
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 32 ( 0.00%) 3536 ( 0.00%) 110.50
icmp6 5058 ( 0.04%) 623656 ( 0.01%) 123.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 5459 ( 0.00%) 682.38
tcpdump file: 200904010900.dump.gz (271.01 MB)