Traffic Trace Info
DumpFile: 200904011000.dump
FileSize: 873.14MB
Id: 200904011000
StartTime: Wed Apr 1 10:00:01 2009
EndTime: Wed Apr 1 10:15:00 2009
TotalTime: 899.55 seconds
TotalCapSize: 678.29MB CapLen: 96 bytes
# of packets: 12769614 (9129.68MB)
AvgRate: 85.15Mbps stddev:15.98M
IP flow (unique src/dst pair) Information
# of flows: 644365 (avg. 19.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 3.2% 2.4% 2.0% 2.0% 1.6% 1.5% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 417721
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.3% 9.3% 8.5% 8.0% 6.8% 3.2% 3.1% 2.9% 2.7%
# of IPv6 addresses: 2222
Top 10 bandwidth usage (bytes/total in %):
26.7% 21.7% 13.7% 13.4% 12.9% 8.4% 7.6% 4.5% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011000.pktlen.png)
detailed numbers
[ 32- 63]: 2829059
[ 64- 127]: 2739906
[ 128- 255]: 530656
[ 256- 511]: 344713
[ 512- 1023]: 343895
[ 1024- 2047]: 5981385
Protocol Breakdown
![[protocol breakdown chart]](200904011000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12769614 (100.00%) 9573164840 (100.00%) 749.68
ip 12730707 ( 99.70%) 9563657377 ( 99.90%) 751.23
tcp 9732916 ( 76.22%) 8096283205 ( 84.57%) 831.85
http(s) 4324693 ( 33.87%) 5787171758 ( 60.45%) 1338.17
http(c) 2331264 ( 18.26%) 216108906 ( 2.26%) 92.70
squid 414765 ( 3.25%) 278050696 ( 2.90%) 670.38
smtp 297357 ( 2.33%) 100317464 ( 1.05%) 337.36
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 101832 ( 0.80%) 80684700 ( 0.84%) 792.33
pop3 14827 ( 0.12%) 10907075 ( 0.11%) 735.62
imap 3587 ( 0.03%) 1524150 ( 0.02%) 424.91
telnet 2080 ( 0.02%) 309595 ( 0.00%) 148.84
ssh 17862 ( 0.14%) 3539324 ( 0.04%) 198.15
dns 17123 ( 0.13%) 5262007 ( 0.05%) 307.31
bgp 136 ( 0.00%) 48874 ( 0.00%) 359.37
napster 65 ( 0.00%) 10580 ( 0.00%) 162.77
realaud 20 ( 0.00%) 1733 ( 0.00%) 86.65
rtsp 64070 ( 0.50%) 4157958 ( 0.04%) 64.90
icecast 138 ( 0.00%) 12159 ( 0.00%) 88.11
hotline 26 ( 0.00%) 1981 ( 0.00%) 76.19
other 2143058 ( 16.78%) 1608173313 ( 16.80%) 750.41
udp 2528280 ( 19.80%) 1422754307 ( 14.86%) 562.74
dns 919950 ( 7.20%) 214214210 ( 2.24%) 232.85
realaud 12483 ( 0.10%) 6302724 ( 0.07%) 504.90
halflif 19 ( 0.00%) 1951 ( 0.00%) 102.68
starcra 20 ( 0.00%) 3577 ( 0.00%) 178.85
everque 58 ( 0.00%) 11734 ( 0.00%) 202.31
unreal 11 ( 0.00%) 1676 ( 0.00%) 152.36
quake 14 ( 0.00%) 1576 ( 0.00%) 112.57
cuseeme 9 ( 0.00%) 775 ( 0.00%) 86.11
other 1595512 ( 12.49%) 1202043673 ( 12.56%) 753.39
icmp 430736 ( 3.37%) 39129478 ( 0.41%) 90.84
ipip 297 ( 0.00%) 36570 ( 0.00%) 123.13
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 28771 ( 0.23%) 4169783 ( 0.04%) 144.93
other 9597 ( 0.08%) 1266654 ( 0.01%) 131.98
frag 40105 ( 0.31%) 44532861 ( 0.47%) 1110.41
ip6 38907 ( 0.30%) 9507463 ( 0.10%) 244.36
tcp6 17439 ( 0.14%) 5612004 ( 0.06%) 321.81
http(s) 1707 ( 0.01%) 1445545 ( 0.02%) 846.83
http(c) 7811 ( 0.06%) 983248 ( 0.01%) 125.88
smtp 349 ( 0.00%) 110458 ( 0.00%) 316.50
bgp 368 ( 0.00%) 31434 ( 0.00%) 85.42
other 7204 ( 0.06%) 3041319 ( 0.03%) 422.17
udp6 15551 ( 0.12%) 2903467 ( 0.03%) 186.71
dns 12570 ( 0.10%) 1898408 ( 0.02%) 151.03
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 2978 ( 0.02%) 1004717 ( 0.01%) 337.38
icmp6 5589 ( 0.04%) 703340 ( 0.01%) 125.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 298 ( 0.00%) 284572 ( 0.00%) 954.94
tcpdump file: 200904011000.dump.gz (303.20 MB)