Traffic Trace Info
DumpFile: 200904011100.dump
FileSize: 1216.87MB
Id: 200904011100
StartTime: Wed Apr 1 11:00:00 2009
EndTime: Wed Apr 1 11:15:00 2009
TotalTime: 900.38 seconds
TotalCapSize: 953.07MB CapLen: 96 bytes
# of packets: 17287859 (12443.44MB)
AvgRate: 115.93Mbps stddev:21.62M
IP flow (unique src/dst pair) Information
# of flows: 924995 (avg. 18.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.9% 2.9% 2.7% 2.0% 1.9% 1.8% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 651629
Top 10 bandwidth usage (bytes/total in %):
13.1% 9.2% 8.9% 5.7% 4.7% 3.3% 3.0% 3.0% 3.0% 3.0%
# of IPv6 addresses: 2321
Top 10 bandwidth usage (bytes/total in %):
23.5% 17.9% 15.0% 14.4% 12.8% 11.9% 7.1% 5.1% 4.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011100.pktlen.png)
detailed numbers
[ 32- 63]: 4042325
[ 64- 127]: 3727953
[ 128- 255]: 571734
[ 256- 511]: 387285
[ 512- 1023]: 391340
[ 1024- 2047]: 8167222
Protocol Breakdown
![[protocol breakdown chart]](200904011100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17287859 (100.00%) 13047894444 (100.00%) 754.74
ip 17250508 ( 99.78%) 13037040770 ( 99.92%) 755.75
tcp 14606575 ( 84.49%) 12506020379 ( 95.85%) 856.19
http(s) 6232466 ( 36.05%) 8412483642 ( 64.47%) 1349.78
http(c) 3676097 ( 21.26%) 568166431 ( 4.35%) 154.56
squid 433111 ( 2.51%) 335757109 ( 2.57%) 775.22
smtp 330406 ( 1.91%) 142992598 ( 1.10%) 432.78
ftp 110051 ( 0.64%) 88097995 ( 0.68%) 800.52
pop3 11186 ( 0.06%) 4723536 ( 0.04%) 422.27
imap 8256 ( 0.05%) 4271171 ( 0.03%) 517.34
telnet 4377 ( 0.03%) 613839 ( 0.00%) 140.24
ssh 29263 ( 0.17%) 5895953 ( 0.05%) 201.48
dns 14423 ( 0.08%) 1569447 ( 0.01%) 108.82
bgp 144 ( 0.00%) 48896 ( 0.00%) 339.56
napster 15 ( 0.00%) 7479 ( 0.00%) 498.60
realaud 36 ( 0.00%) 3379 ( 0.00%) 93.86
rtsp 128826 ( 0.75%) 32321464 ( 0.25%) 250.89
icecast 212 ( 0.00%) 16932 ( 0.00%) 79.87
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3627186 ( 20.98%) 2908658716 ( 22.29%) 801.91
udp 1584049 ( 9.16%) 443635389 ( 3.40%) 280.06
dns 1015199 ( 5.87%) 248845139 ( 1.91%) 245.12
realaud 8 ( 0.00%) 720 ( 0.00%) 90.00
halflif 19 ( 0.00%) 1731 ( 0.00%) 91.11
starcra 24 ( 0.00%) 3997 ( 0.00%) 166.54
everque 60 ( 0.00%) 11458 ( 0.00%) 190.97
unreal 15 ( 0.00%) 2303 ( 0.00%) 153.53
quake 12 ( 0.00%) 1317 ( 0.00%) 109.75
cuseeme 3 ( 0.00%) 242 ( 0.00%) 80.67
other 568503 ( 3.29%) 194595308 ( 1.49%) 342.29
icmp 1022332 ( 5.91%) 80432130 ( 0.62%) 78.68
ipip 307 ( 0.00%) 38932 ( 0.00%) 126.81
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 26528 ( 0.15%) 4856585 ( 0.04%) 183.07
other 10609 ( 0.06%) 2040291 ( 0.02%) 192.32
frag 43587 ( 0.25%) 47757329 ( 0.37%) 1095.68
ip6 37351 ( 0.22%) 10853674 ( 0.08%) 290.59
tcp6 14359 ( 0.08%) 6512790 ( 0.05%) 453.57
http(s) 2428 ( 0.01%) 2106430 ( 0.02%) 867.56
http(c) 4123 ( 0.02%) 762039 ( 0.01%) 184.83
smtp 304 ( 0.00%) 122332 ( 0.00%) 402.41
ftp 1003 ( 0.01%) 97710 ( 0.00%) 97.42
imap 510 ( 0.00%) 481129 ( 0.00%) 943.39
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 382 ( 0.00%) 33153 ( 0.00%) 86.79
other 5607 ( 0.03%) 2909825 ( 0.02%) 518.96
udp6 16207 ( 0.09%) 2836185 ( 0.02%) 175.00
dns 13727 ( 0.08%) 2051523 ( 0.02%) 149.45
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 2477 ( 0.01%) 783860 ( 0.01%) 316.46
icmp6 5936 ( 0.03%) 722537 ( 0.01%) 121.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 819 ( 0.00%) 778082 ( 0.01%) 950.04
tcpdump file: 200904011100.dump.gz (403.93 MB)