Traffic Trace Info
DumpFile: 200904011300.dump
FileSize: 1037.46MB
Id: 200904011300
StartTime: Wed Apr 1 13:00:00 2009
EndTime: Wed Apr 1 13:15:01 2009
TotalTime: 900.25 seconds
TotalCapSize: 813.07MB CapLen: 96 bytes
# of packets: 14705334 (9985.12MB)
AvgRate: 93.04Mbps stddev:12.46M
IP flow (unique src/dst pair) Information
# of flows: 688602 (avg. 21.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 3.7% 2.4% 2.3% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 414558
Top 10 bandwidth usage (bytes/total in %):
9.1% 8.2% 7.4% 7.0% 7.0% 5.1% 4.9% 4.4% 3.7% 3.1%
# of IPv6 addresses: 1633
Top 10 bandwidth usage (bytes/total in %):
28.6% 28.6% 20.2% 13.7% 8.1% 6.4% 5.2% 4.7% 4.6% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011300.pktlen.png)
detailed numbers
[ 32- 63]: 3025149
[ 64- 127]: 3661911
[ 128- 255]: 648713
[ 256- 511]: 436857
[ 512- 1023]: 447169
[ 1024- 2047]: 6485535
Protocol Breakdown
![[protocol breakdown chart]](200904011300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14705334 (100.00%) 10470158622 (100.00%) 712.00
ip 14669360 ( 99.76%) 10460866186 ( 99.91%) 713.11
tcp 11840382 ( 80.52%) 9528839946 ( 91.01%) 804.77
http(s) 5594182 ( 38.04%) 7367295910 ( 70.36%) 1316.96
http(c) 3314014 ( 22.54%) 495045349 ( 4.73%) 149.38
squid 430591 ( 2.93%) 293090691 ( 2.80%) 680.67
smtp 320279 ( 2.18%) 142798385 ( 1.36%) 445.86
ftp 234923 ( 1.60%) 202037037 ( 1.93%) 860.01
pop3 14766 ( 0.10%) 3765127 ( 0.04%) 254.99
imap 4208 ( 0.03%) 521902 ( 0.00%) 124.03
telnet 6939 ( 0.05%) 1118522 ( 0.01%) 161.19
ssh 268350 ( 1.82%) 37696058 ( 0.36%) 140.47
dns 15130 ( 0.10%) 1615257 ( 0.02%) 106.76
bgp 144 ( 0.00%) 47069 ( 0.00%) 326.87
napster 19 ( 0.00%) 1212 ( 0.00%) 63.79
realaud 12 ( 0.00%) 878 ( 0.00%) 73.17
rtsp 76895 ( 0.52%) 55587863 ( 0.53%) 722.91
icecast 223 ( 0.00%) 19517 ( 0.00%) 87.52
hotline 142 ( 0.00%) 9183 ( 0.00%) 64.67
other 1559564 ( 10.61%) 928189926 ( 8.87%) 595.16
udp 2312585 ( 15.73%) 881260276 ( 8.42%) 381.07
dns 977940 ( 6.65%) 244104414 ( 2.33%) 249.61
realaud 71 ( 0.00%) 4514 ( 0.00%) 63.58
halflif 7 ( 0.00%) 903 ( 0.00%) 129.00
starcra 40 ( 0.00%) 13849 ( 0.00%) 346.23
everque 1035 ( 0.01%) 160531 ( 0.00%) 155.10
unreal 14 ( 0.00%) 1886 ( 0.00%) 134.71
quake 18 ( 0.00%) 1640 ( 0.00%) 91.11
cuseeme 8 ( 0.00%) 797 ( 0.00%) 99.62
other 1333274 ( 9.07%) 636817398 ( 6.08%) 477.63
icmp 458729 ( 3.12%) 41432695 ( 0.40%) 90.32
ipip 302 ( 0.00%) 37712 ( 0.00%) 124.87
ipsec 112 ( 0.00%) 17624 ( 0.00%) 157.36
ip6 23202 ( 0.16%) 3252267 ( 0.03%) 140.17
other 34048 ( 0.23%) 6025666 ( 0.06%) 176.98
frag 38823 ( 0.26%) 43841635 ( 0.42%) 1129.27
ip6 35974 ( 0.24%) 9292436 ( 0.09%) 258.31
tcp6 15226 ( 0.10%) 6175604 ( 0.06%) 405.60
http(s) 2293 ( 0.02%) 1763297 ( 0.02%) 768.99
http(c) 4068 ( 0.03%) 778491 ( 0.01%) 191.37
smtp 1054 ( 0.01%) 377126 ( 0.00%) 357.80
ftp 2348 ( 0.02%) 243045 ( 0.00%) 103.51
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 375 ( 0.00%) 32450 ( 0.00%) 86.53
other 5082 ( 0.03%) 2980566 ( 0.03%) 586.49
udp6 15218 ( 0.10%) 2419786 ( 0.02%) 159.01
dns 14196 ( 0.10%) 2226613 ( 0.02%) 156.85
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1021 ( 0.01%) 193064 ( 0.00%) 189.09
icmp6 5487 ( 0.04%) 687749 ( 0.01%) 125.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 5217 ( 0.00%) 401.31
tcpdump file: 200904011300.dump.gz (366.85 MB)