Traffic Trace Info
DumpFile: 200904011245.dump
FileSize: 1152.65MB
Id: 200904011245
StartTime: Wed Apr 1 12:45:00 2009
EndTime: Wed Apr 1 13:00:00 2009
TotalTime: 900.34 seconds
TotalCapSize: 901.99MB CapLen: 96 bytes
# of packets: 16414485 (12146.40MB)
AvgRate: 113.18Mbps stddev:13.86M
IP flow (unique src/dst pair) Information
# of flows: 685997 (avg. 23.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 5.7% 3.1% 3.1% 2.6% 2.1% 2.1% 2.1% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 463427
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.6% 8.5% 8.3% 5.7% 5.7% 4.3% 4.1% 4.0% 4.0%
# of IPv6 addresses: 1806
Top 10 bandwidth usage (bytes/total in %):
34.6% 18.4% 17.4% 17.2% 12.6% 5.9% 5.9% 5.9% 5.8% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011245.pktlen.png)
detailed numbers
[ 32- 63]: 3405725
[ 64- 127]: 3487188
[ 128- 255]: 590371
[ 256- 511]: 423135
[ 512- 1023]: 473309
[ 1024- 2047]: 8034757
Protocol Breakdown
![[protocol breakdown chart]](200904011245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16414485 (100.00%) 12736428074 (100.00%) 775.93
ip 16378336 ( 99.78%) 12725097809 ( 99.91%) 776.95
tcp 13261080 ( 80.79%) 11576962388 ( 90.90%) 873.00
http(s) 6968502 ( 42.45%) 9481733825 ( 74.45%) 1360.66
http(c) 3369934 ( 20.53%) 413598671 ( 3.25%) 122.73
squid 389331 ( 2.37%) 247548838 ( 1.94%) 635.83
smtp 252559 ( 1.54%) 91710324 ( 0.72%) 363.12
nntp 49 ( 0.00%) 3024 ( 0.00%) 61.71
ftp 183325 ( 1.12%) 138140661 ( 1.08%) 753.53
pop3 13070 ( 0.08%) 4878111 ( 0.04%) 373.23
imap 4328 ( 0.03%) 735272 ( 0.01%) 169.89
telnet 6951 ( 0.04%) 1001614 ( 0.01%) 144.10
ssh 39557 ( 0.24%) 4398786 ( 0.03%) 111.20
dns 14030 ( 0.09%) 1459028 ( 0.01%) 103.99
bgp 212 ( 0.00%) 43792 ( 0.00%) 206.57
napster 31 ( 0.00%) 2234 ( 0.00%) 72.06
realaud 71 ( 0.00%) 6503 ( 0.00%) 91.59
rtsp 77272 ( 0.47%) 12240866 ( 0.10%) 158.41
icecast 229 ( 0.00%) 15000 ( 0.00%) 65.50
hotline 65 ( 0.00%) 8208 ( 0.00%) 126.28
other 1941560 ( 11.83%) 1179437391 ( 9.26%) 607.47
udp 2597186 ( 15.82%) 1097960765 ( 8.62%) 422.75
dns 964724 ( 5.88%) 251295506 ( 1.97%) 260.48
rip 14 ( 0.00%) 924 ( 0.00%) 66.00
realaud 370 ( 0.00%) 24282 ( 0.00%) 65.63
halflif 16 ( 0.00%) 1634 ( 0.00%) 102.12
starcra 30 ( 0.00%) 4674 ( 0.00%) 155.80
everque 55 ( 0.00%) 12259 ( 0.00%) 222.89
unreal 30 ( 0.00%) 2626 ( 0.00%) 87.53
quake 10 ( 0.00%) 808 ( 0.00%) 80.80
cuseeme 3 ( 0.00%) 282 ( 0.00%) 94.00
other 1631774 ( 9.94%) 846484407 ( 6.65%) 518.75
icmp 468041 ( 2.85%) 42181991 ( 0.33%) 90.12
ipip 338 ( 0.00%) 41704 ( 0.00%) 123.38
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 24975 ( 0.15%) 3655012 ( 0.03%) 146.35
other 26604 ( 0.16%) 4278221 ( 0.03%) 160.81
frag 37467 ( 0.23%) 42321621 ( 0.33%) 1129.57
ip6 36149 ( 0.22%) 11330265 ( 0.09%) 313.43
tcp6 16281 ( 0.10%) 8111652 ( 0.06%) 498.23
http(s) 3016 ( 0.02%) 2575433 ( 0.02%) 853.92
http(c) 4041 ( 0.02%) 836133 ( 0.01%) 206.91
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 589 ( 0.00%) 192567 ( 0.00%) 326.94
ftp 2383 ( 0.01%) 246478 ( 0.00%) 103.43
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
dns 10 ( 0.00%) 1088 ( 0.00%) 108.80
bgp 375 ( 0.00%) 32363 ( 0.00%) 86.30
other 5860 ( 0.04%) 4226992 ( 0.03%) 721.33
udp6 13861 ( 0.08%) 2247407 ( 0.02%) 162.14
dns 12532 ( 0.08%) 1915306 ( 0.02%) 152.83
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1326 ( 0.01%) 331306 ( 0.00%) 249.85
icmp6 5655 ( 0.03%) 664631 ( 0.01%) 117.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 322 ( 0.00%) 302495 ( 0.00%) 939.43
tcpdump file: 200904011245.dump.gz (392.43 MB)