Traffic Trace Info
DumpFile: 200904010915.dump
FileSize: 800.58MB
Id: 200904010915
StartTime: Wed Apr 1 09:15:00 2009
EndTime: Wed Apr 1 09:30:01 2009
TotalTime: 900.37 seconds
TotalCapSize: 626.65MB CapLen: 96 bytes
# of packets: 11398139 (7537.09MB)
AvgRate: 70.23Mbps stddev:10.37M
IP flow (unique src/dst pair) Information
# of flows: 705689 (avg. 16.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.9% 2.4% 2.3% 1.9% 1.9% 1.7% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 426649
Top 10 bandwidth usage (bytes/total in %):
14.9% 8.9% 7.4% 7.0% 5.4% 5.4% 2.9% 2.9% 2.8% 2.8%
# of IPv6 addresses: 920
Top 10 bandwidth usage (bytes/total in %):
78.9% 78.9% 4.0% 4.0% 4.0% 3.3% 3.3% 2.8% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010915.pktlen.png)
detailed numbers
[ 32- 63]: 2494737
[ 64- 127]: 2795287
[ 128- 255]: 513955
[ 256- 511]: 365518
[ 512- 1023]: 332571
[ 1024- 2047]: 4896071
Protocol Breakdown
![[protocol breakdown chart]](200904010915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11398139 (100.00%) 7903208170 (100.00%) 693.38
ip 11024126 ( 96.72%) 7870944708 ( 99.59%) 713.97
tcp 8957968 ( 78.59%) 7206903027 ( 91.19%) 804.52
http(s) 3986280 ( 34.97%) 5278845937 ( 66.79%) 1324.25
http(c) 1947248 ( 17.08%) 178113065 ( 2.25%) 91.47
squid 496112 ( 4.35%) 354718836 ( 4.49%) 715.00
smtp 239618 ( 2.10%) 50394908 ( 0.64%) 210.31
ftp 66821 ( 0.59%) 58937398 ( 0.75%) 882.02
pop3 8131 ( 0.07%) 5017461 ( 0.06%) 617.08
imap 2843 ( 0.02%) 301136 ( 0.00%) 105.92
telnet 909 ( 0.01%) 74762 ( 0.00%) 82.25
ssh 151362 ( 1.33%) 156003410 ( 1.97%) 1030.66
dns 14267 ( 0.13%) 1505461 ( 0.02%) 105.52
bgp 134 ( 0.00%) 33549 ( 0.00%) 250.37
napster 8 ( 0.00%) 3717 ( 0.00%) 464.62
realaud 23 ( 0.00%) 1909 ( 0.00%) 83.00
rtsp 222 ( 0.00%) 222296 ( 0.00%) 1001.33
icecast 113 ( 0.00%) 10990 ( 0.00%) 97.26
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2043685 ( 17.93%) 1122706672 ( 14.21%) 549.35
udp 1591117 ( 13.96%) 598005569 ( 7.57%) 375.84
dns 848743 ( 7.45%) 218747778 ( 2.77%) 257.73
realaud 12 ( 0.00%) 1657 ( 0.00%) 138.08
halflif 20 ( 0.00%) 1918 ( 0.00%) 95.90
starcra 27 ( 0.00%) 4884 ( 0.00%) 180.89
everque 56 ( 0.00%) 11095 ( 0.00%) 198.12
unreal 13 ( 0.00%) 1914 ( 0.00%) 147.23
quake 10 ( 0.00%) 3487 ( 0.00%) 348.70
cuseeme 4 ( 0.00%) 345 ( 0.00%) 86.25
other 742032 ( 6.51%) 379044752 ( 4.80%) 510.82
icmp 442615 ( 3.88%) 61638257 ( 0.78%) 139.26
ipip 340 ( 0.00%) 42521 ( 0.00%) 125.06
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 21638 ( 0.19%) 2951983 ( 0.04%) 136.43
other 10340 ( 0.09%) 1386287 ( 0.02%) 134.07
frag 40523 ( 0.36%) 44371180 ( 0.56%) 1094.96
ip6 374013 ( 3.28%) 32263462 ( 0.41%) 86.26
tcp6 358198 ( 3.14%) 30086912 ( 0.38%) 84.00
http(s) 1333 ( 0.01%) 887906 ( 0.01%) 666.10
http(c) 3229 ( 0.03%) 577065 ( 0.01%) 178.71
smtp 357 ( 0.00%) 134978 ( 0.00%) 378.09
ftp 50 ( 0.00%) 3856 ( 0.00%) 77.12
imap 1038 ( 0.01%) 1067540 ( 0.01%) 1028.46
ssh 3 ( 0.00%) 322 ( 0.00%) 107.33
bgp 370 ( 0.00%) 31299 ( 0.00%) 84.59
other 351818 ( 3.09%) 27383946 ( 0.35%) 77.84
udp6 10331 ( 0.09%) 1536520 ( 0.02%) 148.73
dns 10294 ( 0.09%) 1532522 ( 0.02%) 148.88
other 37 ( 0.00%) 3998 ( 0.00%) 108.05
icmp6 5445 ( 0.05%) 630810 ( 0.01%) 115.85
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 5004 ( 0.00%) 625.50
tcpdump file: 200904010915.dump.gz (270.44 MB)