Traffic Trace Info
DumpFile: 200904011230.dump
FileSize: 1125.23MB
Id: 200904011230
StartTime: Wed Apr 1 12:30:01 2009
EndTime: Wed Apr 1 12:45:00 2009
TotalTime: 899.32 seconds
TotalCapSize: 879.20MB CapLen: 96 bytes
# of packets: 16107389 (11579.64MB)
AvgRate: 108.00Mbps stddev:15.43M
IP flow (unique src/dst pair) Information
# of flows: 601670 (avg. 26.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 6.0% 2.9% 2.3% 2.2% 2.1% 1.7% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 395118
Top 10 bandwidth usage (bytes/total in %):
9.4% 9.2% 8.4% 6.4% 6.0% 6.0% 4.9% 4.2% 4.1% 4.1%
# of IPv6 addresses: 1855
Top 10 bandwidth usage (bytes/total in %):
29.2% 20.4% 13.7% 13.6% 12.4% 8.9% 7.1% 4.9% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011230.pktlen.png)
detailed numbers
[ 32- 63]: 3631613
[ 64- 127]: 3463164
[ 128- 255]: 573471
[ 256- 511]: 395345
[ 512- 1023]: 451947
[ 1024- 2047]: 7591849
Protocol Breakdown
![[protocol breakdown chart]](200904011230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16107389 (100.00%) 12142132104 (100.00%) 753.82
ip 16070873 ( 99.77%) 12132842202 ( 99.92%) 754.96
tcp 13024783 ( 80.86%) 11068151921 ( 91.15%) 849.78
http(s) 6596009 ( 40.95%) 8893926436 ( 73.25%) 1348.38
http(c) 3321089 ( 20.62%) 398970713 ( 3.29%) 120.13
squid 403568 ( 2.51%) 255644326 ( 2.11%) 633.46
smtp 302413 ( 1.88%) 106796496 ( 0.88%) 353.15
nntp 245 ( 0.00%) 15006 ( 0.00%) 61.25
ftp 73027 ( 0.45%) 49184297 ( 0.41%) 673.51
pop3 12735 ( 0.08%) 3752815 ( 0.03%) 294.69
imap 6440 ( 0.04%) 1087467 ( 0.01%) 168.86
telnet 6260 ( 0.04%) 803707 ( 0.01%) 128.39
ssh 19133 ( 0.12%) 6155029 ( 0.05%) 321.70
dns 15919 ( 0.10%) 3636670 ( 0.03%) 228.45
bgp 228 ( 0.00%) 51570 ( 0.00%) 226.18
napster 133 ( 0.00%) 8144 ( 0.00%) 61.23
realaud 153 ( 0.00%) 12958 ( 0.00%) 84.69
rtsp 230763 ( 1.43%) 51501537 ( 0.42%) 223.18
icecast 598 ( 0.00%) 44877 ( 0.00%) 75.05
hotline 5 ( 0.00%) 714 ( 0.00%) 142.80
other 2036029 ( 12.64%) 1296555697 ( 10.68%) 636.81
udp 2581762 ( 16.03%) 1018830920 ( 8.39%) 394.63
dns 979739 ( 6.08%) 250210922 ( 2.06%) 255.39
rip 123 ( 0.00%) 8118 ( 0.00%) 66.00
realaud 2 ( 0.00%) 149 ( 0.00%) 74.50
halflif 9 ( 0.00%) 739 ( 0.00%) 82.11
starcra 38 ( 0.00%) 5150 ( 0.00%) 135.53
everque 59 ( 0.00%) 13416 ( 0.00%) 227.39
unreal 54 ( 0.00%) 3937 ( 0.00%) 72.91
quake 21 ( 0.00%) 2596 ( 0.00%) 123.62
cuseeme 9 ( 0.00%) 758 ( 0.00%) 84.22
other 1601060 ( 9.94%) 768370066 ( 6.33%) 479.91
icmp 426893 ( 2.65%) 38838979 ( 0.32%) 90.98
ipip 304 ( 0.00%) 38750 ( 0.00%) 127.47
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 25424 ( 0.16%) 5037340 ( 0.04%) 198.13
other 11597 ( 0.07%) 1926912 ( 0.02%) 166.16
frag 40459 ( 0.25%) 44803441 ( 0.37%) 1107.38
ip6 36516 ( 0.23%) 9289902 ( 0.08%) 254.41
tcp6 15127 ( 0.09%) 5408433 ( 0.04%) 357.54
http(s) 3276 ( 0.02%) 2473413 ( 0.02%) 755.01
http(c) 5220 ( 0.03%) 1037682 ( 0.01%) 198.79
smtp 110 ( 0.00%) 51208 ( 0.00%) 465.53
ftp 2335 ( 0.01%) 240927 ( 0.00%) 103.18
dns 5 ( 0.00%) 542 ( 0.00%) 108.40
bgp 361 ( 0.00%) 30536 ( 0.00%) 84.59
other 3820 ( 0.02%) 1574125 ( 0.01%) 412.07
udp6 14775 ( 0.09%) 2454270 ( 0.02%) 166.11
dns 13009 ( 0.08%) 2034302 ( 0.02%) 156.38
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
other 1764 ( 0.01%) 419745 ( 0.00%) 237.95
icmp6 5837 ( 0.04%) 707607 ( 0.01%) 121.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 747 ( 0.00%) 715512 ( 0.01%) 957.85
tcpdump file: 200904011230.dump.gz (387.92 MB)