Traffic Trace Info
DumpFile: 200904011215.dump
FileSize: 1037.80MB
Id: 200904011215
StartTime: Wed Apr 1 12:15:00 2009
EndTime: Wed Apr 1 12:30:01 2009
TotalTime: 900.30 seconds
TotalCapSize: 811.44MB CapLen: 96 bytes
# of packets: 14826390 (10194.23MB)
AvgRate: 94.99Mbps stddev:10.38M
IP flow (unique src/dst pair) Information
# of flows: 634031 (avg. 23.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 3.2% 2.5% 2.5% 2.5% 1.6% 1.6% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 388131
Top 10 bandwidth usage (bytes/total in %):
14.6% 9.5% 7.2% 7.2% 5.4% 5.1% 5.1% 3.3% 3.3% 2.6%
# of IPv6 addresses: 1982
Top 10 bandwidth usage (bytes/total in %):
35.3% 24.5% 10.8% 10.0% 8.8% 6.8% 6.2% 6.2% 5.2% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011215.pktlen.png)
detailed numbers
[ 32- 63]: 3401348
[ 64- 127]: 3430792
[ 128- 255]: 618272
[ 256- 511]: 357012
[ 512- 1023]: 394788
[ 1024- 2047]: 6624178
Protocol Breakdown
![[protocol breakdown chart]](200904011215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14826390 (100.00%) 10689428122 (100.00%) 720.97
ip 14792025 ( 99.77%) 10682452305 ( 99.93%) 722.18
tcp 12185922 ( 82.19%) 9966425282 ( 93.24%) 817.86
http(s) 5753408 ( 38.81%) 7770285715 ( 72.69%) 1350.55
http(c) 3569626 ( 24.08%) 456481672 ( 4.27%) 127.88
squid 388725 ( 2.62%) 266750744 ( 2.50%) 686.22
smtp 292781 ( 1.97%) 141164910 ( 1.32%) 482.15
ftp 73738 ( 0.50%) 59583059 ( 0.56%) 808.04
pop3 14527 ( 0.10%) 3592474 ( 0.03%) 247.30
imap 4889 ( 0.03%) 915375 ( 0.01%) 187.23
telnet 5317 ( 0.04%) 690503 ( 0.01%) 129.87
ssh 192997 ( 1.30%) 150591364 ( 1.41%) 780.28
dns 23022 ( 0.16%) 14029366 ( 0.13%) 609.39
bgp 139 ( 0.00%) 41591 ( 0.00%) 299.22
napster 23 ( 0.00%) 1891 ( 0.00%) 82.22
realaud 21 ( 0.00%) 2056 ( 0.00%) 97.90
rtsp 73567 ( 0.50%) 15426907 ( 0.14%) 209.70
icecast 526 ( 0.00%) 36277 ( 0.00%) 68.97
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1792588 ( 12.09%) 1086828392 ( 10.17%) 606.29
udp 2053128 ( 13.85%) 663863876 ( 6.21%) 323.34
dns 959552 ( 6.47%) 243663050 ( 2.28%) 253.93
realaud 8 ( 0.00%) 691 ( 0.00%) 86.38
halflif 15 ( 0.00%) 1583 ( 0.00%) 105.53
starcra 26 ( 0.00%) 4650 ( 0.00%) 178.85
everque 54 ( 0.00%) 12432 ( 0.00%) 230.22
unreal 8 ( 0.00%) 1510 ( 0.00%) 188.75
quake 11 ( 0.00%) 920 ( 0.00%) 83.64
cuseeme 6 ( 0.00%) 495 ( 0.00%) 82.50
other 1093248 ( 7.37%) 420004236 ( 3.93%) 384.18
icmp 511369 ( 3.45%) 45000946 ( 0.42%) 88.00
ipip 349 ( 0.00%) 42956 ( 0.00%) 123.08
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 26487 ( 0.18%) 4341349 ( 0.04%) 163.90
other 14662 ( 0.10%) 2760832 ( 0.03%) 188.30
frag 50058 ( 0.34%) 52278432 ( 0.49%) 1044.36
ip6 34365 ( 0.23%) 6975817 ( 0.07%) 202.99
tcp6 13066 ( 0.09%) 3546669 ( 0.03%) 271.44
http(s) 2700 ( 0.02%) 1924223 ( 0.02%) 712.68
http(c) 4355 ( 0.03%) 904294 ( 0.01%) 207.65
smtp 341 ( 0.00%) 137719 ( 0.00%) 403.87
ftp 2348 ( 0.02%) 243634 ( 0.00%) 103.76
dns 10 ( 0.00%) 1292 ( 0.00%) 129.20
bgp 355 ( 0.00%) 29290 ( 0.00%) 82.51
other 2957 ( 0.02%) 306217 ( 0.00%) 103.56
udp6 14974 ( 0.10%) 2518850 ( 0.02%) 168.21
dns 13188 ( 0.09%) 2069163 ( 0.02%) 156.90
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1784 ( 0.01%) 449478 ( 0.00%) 251.95
icmp6 6122 ( 0.04%) 743306 ( 0.01%) 121.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 172 ( 0.00%) 162776 ( 0.00%) 946.37
tcpdump file: 200904011215.dump.gz (361.25 MB)