Traffic Trace Info
DumpFile: 200904010930.dump
FileSize: 777.85MB
Id: 200904010930
StartTime: Wed Apr 1 09:30:01 2009
EndTime: Wed Apr 1 09:45:00 2009
TotalTime: 899.46 seconds
TotalCapSize: 609.85MB CapLen: 96 bytes
# of packets: 11009673 (7278.10MB)
AvgRate: 67.88Mbps stddev:10.57M
IP flow (unique src/dst pair) Information
# of flows: 613360 (avg. 17.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.0% 2.8% 2.5% 2.1% 1.9% 1.8% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 384772
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.4% 7.0% 6.2% 5.0% 5.0% 3.7% 3.0% 3.0% 2.8%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
81.4% 81.3% 4.1% 4.1% 4.1% 2.8% 2.0% 1.7% 1.7% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010930.pktlen.png)
detailed numbers
[ 32- 63]: 2396204
[ 64- 127]: 2720429
[ 128- 255]: 527402
[ 256- 511]: 337372
[ 512- 1023]: 340451
[ 1024- 2047]: 4687815
Protocol Breakdown
![[protocol breakdown chart]](200904010930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11009673 (100.00%) 7631638730 (100.00%) 693.18
ip 10638810 ( 96.63%) 7600481292 ( 99.59%) 714.41
tcp 8729101 ( 79.29%) 7081545510 ( 92.79%) 811.26
http(s) 3704030 ( 33.64%) 4886778643 ( 64.03%) 1319.31
http(c) 2064063 ( 18.75%) 200522179 ( 2.63%) 97.15
squid 396478 ( 3.60%) 274391703 ( 3.60%) 692.07
smtp 260372 ( 2.36%) 76280798 ( 1.00%) 292.97
ftp 104830 ( 0.95%) 94349846 ( 1.24%) 900.03
pop3 7143 ( 0.06%) 3254474 ( 0.04%) 455.62
imap 2455 ( 0.02%) 430379 ( 0.01%) 175.31
telnet 18097 ( 0.16%) 1457677 ( 0.02%) 80.55
ssh 238852 ( 2.17%) 168611342 ( 2.21%) 705.92
dns 15239 ( 0.14%) 3638521 ( 0.05%) 238.76
bgp 145 ( 0.00%) 49565 ( 0.00%) 341.83
napster 7 ( 0.00%) 769 ( 0.00%) 109.86
realaud 138 ( 0.00%) 9633 ( 0.00%) 69.80
rtsp 53 ( 0.00%) 21030 ( 0.00%) 396.79
icecast 175 ( 0.00%) 12243 ( 0.00%) 69.96
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1917004 ( 17.41%) 1371735508 ( 17.97%) 715.56
udp 1456390 ( 13.23%) 466460935 ( 6.11%) 320.29
dns 944836 ( 8.58%) 238445721 ( 3.12%) 252.37
realaud 6 ( 0.00%) 955 ( 0.00%) 159.17
halflif 27 ( 0.00%) 5929 ( 0.00%) 219.59
starcra 26 ( 0.00%) 4443 ( 0.00%) 170.88
everque 93 ( 0.00%) 16382 ( 0.00%) 176.15
unreal 8 ( 0.00%) 1165 ( 0.00%) 145.62
quake 13 ( 0.00%) 1396 ( 0.00%) 107.38
cuseeme 2 ( 0.00%) 147 ( 0.00%) 73.50
other 511193 ( 4.64%) 227835973 ( 2.99%) 445.69
icmp 415650 ( 3.78%) 40954557 ( 0.54%) 98.53
ipip 298 ( 0.00%) 36772 ( 0.00%) 123.40
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 27788 ( 0.25%) 10149482 ( 0.13%) 365.25
other 9469 ( 0.09%) 1316096 ( 0.02%) 138.99
frag 40244 ( 0.37%) 44150399 ( 0.58%) 1097.07
ip6 370863 ( 3.37%) 31157438 ( 0.41%) 84.01
tcp6 355136 ( 3.23%) 28917527 ( 0.38%) 81.43
http(s) 1494 ( 0.01%) 999992 ( 0.01%) 669.34
http(c) 3393 ( 0.03%) 594730 ( 0.01%) 175.28
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 237 ( 0.00%) 95905 ( 0.00%) 404.66
ftp 1 ( 0.00%) 86 ( 0.00%) 86.00
ssh 81 ( 0.00%) 8422 ( 0.00%) 103.98
bgp 363 ( 0.00%) 30530 ( 0.00%) 84.10
other 349564 ( 3.18%) 27187608 ( 0.36%) 77.78
udp6 11185 ( 0.10%) 1685235 ( 0.02%) 150.67
dns 11136 ( 0.10%) 1679775 ( 0.02%) 150.84
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
other 46 ( 0.00%) 5107 ( 0.00%) 111.02
icmp6 4508 ( 0.04%) 546490 ( 0.01%) 121.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4106 ( 0.00%) 1026.50
tcpdump file: 200904010930.dump.gz (267.46 MB)