Traffic Trace Info
DumpFile: 200904011130.dump
FileSize: 1013.18MB
Id: 200904011130
StartTime: Wed Apr 1 11:30:01 2009
EndTime: Wed Apr 1 11:45:01 2009
TotalTime: 900.03 seconds
TotalCapSize: 791.57MB CapLen: 96 bytes
# of packets: 14522850 (9704.36MB)
AvgRate: 90.45Mbps stddev:12.38M
IP flow (unique src/dst pair) Information
# of flows: 665915 (avg. 21.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.5% 2.5% 2.4% 2.1% 2.0% 2.0% 1.8% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 438848
Top 10 bandwidth usage (bytes/total in %):
15.6% 10.4% 6.3% 6.1% 5.4% 3.8% 3.8% 2.6% 2.6% 2.6%
# of IPv6 addresses: 2023
Top 10 bandwidth usage (bytes/total in %):
19.7% 18.5% 16.2% 16.2% 12.4% 8.7% 6.2% 5.6% 5.5% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011130.pktlen.png)
detailed numbers
[ 32- 63]: 3690692
[ 64- 127]: 3253547
[ 128- 255]: 552928
[ 256- 511]: 355874
[ 512- 1023]: 390320
[ 1024- 2047]: 6279489
Protocol Breakdown
![[protocol breakdown chart]](200904011130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14522850 (100.00%) 10175757081 (100.00%) 700.67
ip 14489739 ( 99.77%) 10167974124 ( 99.92%) 701.74
tcp 12262400 ( 84.44%) 9663460137 ( 94.97%) 788.06
http(s) 5610022 ( 38.63%) 7508293010 ( 73.79%) 1338.37
http(c) 3665872 ( 25.24%) 442830839 ( 4.35%) 120.80
squid 284067 ( 1.96%) 167819769 ( 1.65%) 590.78
smtp 292615 ( 2.01%) 107609870 ( 1.06%) 367.75
ftp 88419 ( 0.61%) 73340748 ( 0.72%) 829.47
pop3 11198 ( 0.08%) 2840457 ( 0.03%) 253.66
imap 6567 ( 0.05%) 635583 ( 0.01%) 96.78
telnet 5347 ( 0.04%) 756391 ( 0.01%) 141.46
ssh 17952 ( 0.12%) 5138471 ( 0.05%) 286.23
dns 15486 ( 0.11%) 3628424 ( 0.04%) 234.30
bgp 166 ( 0.00%) 66365 ( 0.00%) 399.79
napster 13 ( 0.00%) 1530 ( 0.00%) 117.69
realaud 19 ( 0.00%) 1822 ( 0.00%) 95.89
rtsp 101839 ( 0.70%) 13464221 ( 0.13%) 132.21
icecast 146 ( 0.00%) 10497 ( 0.00%) 71.90
hotline 247 ( 0.00%) 15561 ( 0.00%) 63.00
other 2162360 ( 14.89%) 1337002679 ( 13.14%) 618.31
udp 1638598 ( 11.28%) 449994445 ( 4.42%) 274.62
dns 1010784 ( 6.96%) 245419946 ( 2.41%) 242.80
realaud 17 ( 0.00%) 1514 ( 0.00%) 89.06
halflif 14 ( 0.00%) 1105 ( 0.00%) 78.93
starcra 29 ( 0.00%) 4580 ( 0.00%) 157.93
everque 56 ( 0.00%) 11802 ( 0.00%) 210.75
unreal 9 ( 0.00%) 1385 ( 0.00%) 153.89
quake 16 ( 0.00%) 1705 ( 0.00%) 106.56
cuseeme 2 ( 0.00%) 194 ( 0.00%) 97.00
other 627516 ( 4.32%) 204413915 ( 2.01%) 325.75
icmp 540808 ( 3.72%) 46503300 ( 0.46%) 85.99
ipip 298 ( 0.00%) 37372 ( 0.00%) 125.41
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 28201 ( 0.19%) 5106625 ( 0.05%) 181.08
other 19326 ( 0.13%) 2855181 ( 0.03%) 147.74
frag 36695 ( 0.25%) 41307126 ( 0.41%) 1125.69
ip6 33111 ( 0.23%) 7782957 ( 0.08%) 235.06
tcp6 11753 ( 0.08%) 3644343 ( 0.04%) 310.08
http(s) 1580 ( 0.01%) 1125870 ( 0.01%) 712.58
http(c) 3426 ( 0.02%) 642938 ( 0.01%) 187.66
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 169 ( 0.00%) 30002 ( 0.00%) 177.53
ftp 2343 ( 0.02%) 243024 ( 0.00%) 103.72
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 367 ( 0.00%) 30965 ( 0.00%) 84.37
other 3858 ( 0.03%) 1570639 ( 0.02%) 407.11
udp6 15209 ( 0.10%) 2600554 ( 0.03%) 170.99
dns 12995 ( 0.09%) 1973491 ( 0.02%) 151.87
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2210 ( 0.02%) 626623 ( 0.01%) 283.54
icmp6 5156 ( 0.04%) 629424 ( 0.01%) 122.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 963 ( 0.01%) 904556 ( 0.01%) 939.31
tcpdump file: 200904011130.dump.gz (353.36 MB)