Traffic Trace Info
DumpFile: 200904010945.dump
FileSize: 828.10MB
Id: 200904010945
StartTime: Wed Apr 1 09:45:00 2009
EndTime: Wed Apr 1 10:00:01 2009
TotalTime: 900.59 seconds
TotalCapSize: 645.53MB CapLen: 96 bytes
# of packets: 11964436 (8112.43MB)
AvgRate: 75.89Mbps stddev:13.38M
IP flow (unique src/dst pair) Information
# of flows: 650570 (avg. 18.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 4.4% 2.7% 2.6% 2.2% 1.3% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 406376
Top 10 bandwidth usage (bytes/total in %):
15.5% 8.5% 8.0% 8.0% 7.2% 4.8% 4.5% 4.5% 2.8% 2.7%
# of IPv6 addresses: 2036
Top 10 bandwidth usage (bytes/total in %):
52.3% 52.3% 9.5% 8.2% 8.2% 8.0% 5.6% 4.3% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904010945.pktlen.png)
detailed numbers
[ 32- 63]: 2786489
[ 64- 127]: 2692955
[ 128- 255]: 551324
[ 256- 511]: 343462
[ 512- 1023]: 358828
[ 1024- 2047]: 5231378
Protocol Breakdown
![[protocol breakdown chart]](200904010945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11964436 (100.00%) 8506496141 (100.00%) 710.98
ip 11823506 ( 98.82%) 8491044111 ( 99.82%) 718.15
tcp 9214142 ( 77.01%) 7308007128 ( 85.91%) 793.13
http(s) 4071784 ( 34.03%) 5458946687 ( 64.17%) 1340.68
http(c) 2360645 ( 19.73%) 228028645 ( 2.68%) 96.60
squid 521515 ( 4.36%) 402287801 ( 4.73%) 771.38
smtp 258208 ( 2.16%) 76680065 ( 0.90%) 296.97
ftp 88771 ( 0.74%) 73723786 ( 0.87%) 830.49
pop3 8600 ( 0.07%) 3964556 ( 0.05%) 460.99
imap 3472 ( 0.03%) 464860 ( 0.01%) 133.89
telnet 22988 ( 0.19%) 1799878 ( 0.02%) 78.30
ssh 28269 ( 0.24%) 5001998 ( 0.06%) 176.94
dns 14091 ( 0.12%) 2780454 ( 0.03%) 197.32
bgp 157 ( 0.00%) 49686 ( 0.00%) 316.47
napster 4 ( 0.00%) 248 ( 0.00%) 62.00
realaud 130 ( 0.00%) 9517 ( 0.00%) 73.21
rtsp 179230 ( 1.50%) 11162111 ( 0.13%) 62.28
icecast 171 ( 0.00%) 11753 ( 0.00%) 68.73
other 1656089 ( 13.84%) 1043094003 ( 12.26%) 629.85
udp 2121032 ( 17.73%) 1118877259 ( 13.15%) 527.52
dns 953062 ( 7.97%) 240476410 ( 2.83%) 252.32
realaud 13 ( 0.00%) 2256 ( 0.00%) 173.54
halflif 20 ( 0.00%) 2038 ( 0.00%) 101.90
starcra 22 ( 0.00%) 4002 ( 0.00%) 181.91
everque 51 ( 0.00%) 10567 ( 0.00%) 207.20
unreal 22 ( 0.00%) 3431 ( 0.00%) 155.95
quake 15 ( 0.00%) 1659 ( 0.00%) 110.60
cuseeme 11 ( 0.00%) 924 ( 0.00%) 84.00
other 1167375 ( 9.76%) 878206372 ( 10.32%) 752.29
icmp 438510 ( 3.67%) 39162275 ( 0.46%) 89.31
ipip 348 ( 0.00%) 42528 ( 0.00%) 122.21
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 40221 ( 0.34%) 23673646 ( 0.28%) 588.59
other 9143 ( 0.08%) 1263863 ( 0.01%) 138.23
frag 38273 ( 0.32%) 42059480 ( 0.49%) 1098.93
ip6 140930 ( 1.18%) 15452030 ( 0.18%) 109.64
tcp6 122079 ( 1.02%) 11703699 ( 0.14%) 95.87
http(s) 1272 ( 0.01%) 863706 ( 0.01%) 679.01
http(c) 3080 ( 0.03%) 532640 ( 0.01%) 172.94
smtp 951 ( 0.01%) 346844 ( 0.00%) 364.72
ftp 6 ( 0.00%) 444 ( 0.00%) 74.00
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 362 ( 0.00%) 30306 ( 0.00%) 83.72
other 116406 ( 0.97%) 9929534 ( 0.12%) 85.30
udp6 13732 ( 0.11%) 2645087 ( 0.03%) 192.62
dns 11485 ( 0.10%) 1720433 ( 0.02%) 149.80
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2246 ( 0.02%) 924545 ( 0.01%) 411.64
icmp6 4538 ( 0.04%) 572718 ( 0.01%) 126.20
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 552 ( 0.00%) 526582 ( 0.01%) 953.95
tcpdump file: 200904010945.dump.gz (284.50 MB)