Traffic Trace Info
DumpFile: 200904011115.dump
FileSize: 1028.44MB
Id: 200904011115
StartTime: Wed Apr 1 11:15:00 2009
EndTime: Wed Apr 1 11:30:01 2009
TotalTime: 900.33 seconds
TotalCapSize: 803.79MB CapLen: 96 bytes
# of packets: 14721692 (10407.45MB)
AvgRate: 96.97Mbps stddev:10.77M
IP flow (unique src/dst pair) Information
# of flows: 658159 (avg. 22.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.1% 3.1% 2.4% 2.3% 2.0% 1.8% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 424070
Top 10 bandwidth usage (bytes/total in %):
13.9% 7.4% 7.0% 5.5% 3.6% 3.6% 3.4% 3.2% 3.2% 3.2%
# of IPv6 addresses: 1714
Top 10 bandwidth usage (bytes/total in %):
22.8% 17.6% 17.6% 15.7% 9.8% 7.2% 6.3% 5.9% 5.9% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011115.pktlen.png)
detailed numbers
[ 32- 63]: 3570135
[ 64- 127]: 3060765
[ 128- 255]: 534969
[ 256- 511]: 361796
[ 512- 1023]: 374860
[ 1024- 2047]: 6819167
Protocol Breakdown
![[protocol breakdown chart]](200904011115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14721692 (100.00%) 10912997769 (100.00%) 741.29
ip 14688725 ( 99.78%) 10905732115 ( 99.93%) 742.46
tcp 12573016 ( 85.40%) 10360297393 ( 94.94%) 824.01
http(s) 5561722 ( 37.78%) 7411750507 ( 67.92%) 1332.64
http(c) 3315514 ( 22.52%) 507825207 ( 4.65%) 153.17
squid 411969 ( 2.80%) 282260363 ( 2.59%) 685.15
smtp 323835 ( 2.20%) 128000126 ( 1.17%) 395.26
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 74639 ( 0.51%) 62968687 ( 0.58%) 843.64
pop3 19032 ( 0.13%) 14179412 ( 0.13%) 745.03
imap 4667 ( 0.03%) 526751 ( 0.00%) 112.87
telnet 4797 ( 0.03%) 706024 ( 0.01%) 147.18
ssh 17051 ( 0.12%) 3778480 ( 0.03%) 221.60
dns 14404 ( 0.10%) 1447747 ( 0.01%) 100.51
bgp 137 ( 0.00%) 40386 ( 0.00%) 294.79
napster 15 ( 0.00%) 1799 ( 0.00%) 119.93
realaud 24 ( 0.00%) 1688 ( 0.00%) 70.33
rtsp 104571 ( 0.71%) 13941686 ( 0.13%) 133.32
icecast 194 ( 0.00%) 13069 ( 0.00%) 67.37
hotline 36 ( 0.00%) 2506 ( 0.00%) 69.61
other 2720356 ( 18.48%) 1932848527 ( 17.71%) 710.51
udp 1663468 ( 11.30%) 501298004 ( 4.59%) 301.36
dns 982047 ( 6.67%) 234664342 ( 2.15%) 238.95
realaud 25 ( 0.00%) 3462 ( 0.00%) 138.48
halflif 18 ( 0.00%) 1668 ( 0.00%) 92.67
starcra 41 ( 0.00%) 6970 ( 0.00%) 170.00
everque 64 ( 0.00%) 12912 ( 0.00%) 201.75
unreal 8 ( 0.00%) 1188 ( 0.00%) 148.50
quake 14 ( 0.00%) 1496 ( 0.00%) 106.86
cuseeme 4 ( 0.00%) 401 ( 0.00%) 100.25
other 681042 ( 4.63%) 266436044 ( 2.44%) 391.22
icmp 415376 ( 2.82%) 38242788 ( 0.35%) 92.07
ipip 347 ( 0.00%) 42754 ( 0.00%) 123.21
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 23258 ( 0.16%) 3658048 ( 0.03%) 157.28
other 13146 ( 0.09%) 2175188 ( 0.02%) 165.46
frag 39176 ( 0.27%) 43398772 ( 0.40%) 1107.79
ip6 32965 ( 0.22%) 7265534 ( 0.07%) 220.40
tcp6 12620 ( 0.09%) 4236351 ( 0.04%) 335.69
http(s) 2037 ( 0.01%) 1564770 ( 0.01%) 768.17
http(c) 3642 ( 0.02%) 685489 ( 0.01%) 188.22
smtp 399 ( 0.00%) 147938 ( 0.00%) 370.77
ftp 2332 ( 0.02%) 238999 ( 0.00%) 102.49
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 377 ( 0.00%) 32470 ( 0.00%) 86.13
other 3829 ( 0.03%) 1566227 ( 0.01%) 409.04
udp6 14499 ( 0.10%) 2276580 ( 0.02%) 157.02
dns 13309 ( 0.09%) 2018727 ( 0.02%) 151.68
starcra 2 ( 0.00%) 330 ( 0.00%) 165.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1187 ( 0.01%) 257417 ( 0.00%) 216.86
icmp6 5751 ( 0.04%) 695749 ( 0.01%) 120.98
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 64 ( 0.00%) 52638 ( 0.00%) 822.47
tcpdump file: 200904011115.dump.gz (358.59 MB)