Traffic Trace Info
DumpFile: 200904011200.dump
FileSize: 1055.11MB
Id: 200904011200
StartTime: Wed Apr 1 12:00:00 2009
EndTime: Wed Apr 1 12:15:00 2009
TotalTime: 900.29 seconds
TotalCapSize: 826.13MB CapLen: 96 bytes
# of packets: 14982374 (10222.26MB)
AvgRate: 95.24Mbps stddev:13.83M
IP flow (unique src/dst pair) Information
# of flows: 583002 (avg. 25.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 3.1% 2.8% 2.4% 2.1% 1.7% 1.4% 1.4% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 383266
Top 10 bandwidth usage (bytes/total in %):
14.4% 6.6% 6.5% 6.5% 6.1% 5.0% 3.2% 3.2% 3.1% 3.0%
# of IPv6 addresses: 2400
Top 10 bandwidth usage (bytes/total in %):
45.2% 41.8% 14.2% 13.7% 9.0% 5.7% 4.6% 3.2% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011200.pktlen.png)
detailed numbers
[ 32- 63]: 3534022
[ 64- 127]: 3518497
[ 128- 255]: 548111
[ 256- 511]: 354084
[ 512- 1023]: 423336
[ 1024- 2047]: 6604324
Protocol Breakdown
![[protocol breakdown chart]](200904011200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14982374 (100.00%) 10718819843 (100.00%) 715.43
ip 14939765 ( 99.72%) 10705347083 ( 99.87%) 716.57
tcp 12719199 ( 84.89%) 10167438354 ( 94.86%) 799.38
http(s) 5720774 ( 38.18%) 7732225377 ( 72.14%) 1351.60
http(c) 3975787 ( 26.54%) 525899961 ( 4.91%) 132.28
squid 363601 ( 2.43%) 213151644 ( 1.99%) 586.22
smtp 286471 ( 1.91%) 139373057 ( 1.30%) 486.52
ftp 95237 ( 0.64%) 79034969 ( 0.74%) 829.88
pop3 12928 ( 0.09%) 3614367 ( 0.03%) 279.58
imap 4956 ( 0.03%) 827105 ( 0.01%) 166.89
telnet 4673 ( 0.03%) 615435 ( 0.01%) 131.70
ssh 29297 ( 0.20%) 15945970 ( 0.15%) 544.29
dns 16607 ( 0.11%) 5230076 ( 0.05%) 314.93
bgp 142 ( 0.00%) 44314 ( 0.00%) 312.07
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 15 ( 0.00%) 1646 ( 0.00%) 109.73
rtsp 78325 ( 0.52%) 12207389 ( 0.11%) 155.86
icecast 308 ( 0.00%) 20144 ( 0.00%) 65.40
other 2130071 ( 14.22%) 1439246476 ( 13.43%) 675.68
udp 1731176 ( 11.55%) 490012981 ( 4.57%) 283.05
dns 986272 ( 6.58%) 248736713 ( 2.32%) 252.20
realaud 9 ( 0.00%) 1201 ( 0.00%) 133.44
halflif 14 ( 0.00%) 1055 ( 0.00%) 75.36
starcra 32 ( 0.00%) 4772 ( 0.00%) 149.12
everque 998 ( 0.01%) 184302 ( 0.00%) 184.67
unreal 10 ( 0.00%) 1355 ( 0.00%) 135.50
quake 16 ( 0.00%) 1932 ( 0.00%) 120.75
cuseeme 8 ( 0.00%) 925 ( 0.00%) 115.62
other 743612 ( 4.96%) 240906881 ( 2.25%) 323.97
icmp 447349 ( 2.99%) 40298003 ( 0.38%) 90.08
ipip 308 ( 0.00%) 37704 ( 0.00%) 122.42
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 26125 ( 0.17%) 4681911 ( 0.04%) 179.21
other 15500 ( 0.10%) 2861066 ( 0.03%) 184.58
frag 49759 ( 0.33%) 52421123 ( 0.49%) 1053.50
ip6 42609 ( 0.28%) 13472760 ( 0.13%) 316.20
tcp6 17994 ( 0.12%) 8507938 ( 0.08%) 472.82
http(s) 1962 ( 0.01%) 1379710 ( 0.01%) 703.22
http(c) 4078 ( 0.03%) 796341 ( 0.01%) 195.28
smtp 358 ( 0.00%) 126053 ( 0.00%) 352.10
ftp 2387 ( 0.02%) 246831 ( 0.00%) 103.41
bgp 360 ( 0.00%) 30241 ( 0.00%) 84.00
other 8849 ( 0.06%) 5928762 ( 0.06%) 669.99
udp6 17160 ( 0.11%) 3184932 ( 0.03%) 185.60
dns 14237 ( 0.10%) 2269145 ( 0.02%) 159.38
starcra 2 ( 0.00%) 326 ( 0.00%) 163.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2920 ( 0.02%) 915358 ( 0.01%) 313.48
icmp6 6401 ( 0.04%) 801703 ( 0.01%) 125.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1024 ( 0.01%) 974107 ( 0.01%) 951.28
tcpdump file: 200904011200.dump.gz (366.85 MB)