Traffic Trace Info
DumpFile: 200904011315.dump
FileSize: 1232.07MB
Id: 200904011315
StartTime: Wed Apr 1 13:15:01 2009
EndTime: Wed Apr 1 13:30:00 2009
TotalTime: 899.92 seconds
TotalCapSize: 968.03MB CapLen: 96 bytes
# of packets: 17303666 (11617.18MB)
AvgRate: 108.34Mbps stddev:23.34M
IP flow (unique src/dst pair) Information
# of flows: 619334 (avg. 27.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.9% 3.2% 2.5% 1.6% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 408226
Top 10 bandwidth usage (bytes/total in %):
18.3% 6.2% 6.2% 6.1% 6.0% 4.7% 4.1% 3.9% 3.9% 3.8%
# of IPv6 addresses: 1389
Top 10 bandwidth usage (bytes/total in %):
29.1% 20.0% 10.8% 9.6% 9.6% 9.0% 6.7% 6.4% 6.4% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011315.pktlen.png)
detailed numbers
[ 32- 63]: 2804988
[ 64- 127]: 5145220
[ 128- 255]: 896051
[ 256- 511]: 398517
[ 512- 1023]: 546351
[ 1024- 2047]: 7512539
Protocol Breakdown
![[protocol breakdown chart]](200904011315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17303666 (100.00%) 12181496669 (100.00%) 703.98
ip 17270749 ( 99.81%) 12174729049 ( 99.94%) 704.93
tcp 13985777 ( 80.83%) 11018193719 ( 90.45%) 787.81
http(s) 6422670 ( 37.12%) 8696745220 ( 71.39%) 1354.07
http(c) 3941538 ( 22.78%) 485479790 ( 3.99%) 123.17
squid 556561 ( 3.22%) 429124437 ( 3.52%) 771.03
smtp 346895 ( 2.00%) 145863794 ( 1.20%) 420.48
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 171001 ( 0.99%) 115575081 ( 0.95%) 675.87
pop3 14195 ( 0.08%) 4664805 ( 0.04%) 328.62
imap 3860 ( 0.02%) 405114 ( 0.00%) 104.95
telnet 16368 ( 0.09%) 7882214 ( 0.06%) 481.56
ssh 1079016 ( 6.24%) 409708576 ( 3.36%) 379.71
dns 14832 ( 0.09%) 1521926 ( 0.01%) 102.61
bgp 154 ( 0.00%) 55302 ( 0.00%) 359.10
napster 20 ( 0.00%) 2242 ( 0.00%) 112.10
realaud 34 ( 0.00%) 14335 ( 0.00%) 421.62
rtsp 80391 ( 0.46%) 12361047 ( 0.10%) 153.76
icecast 8825 ( 0.05%) 6575905 ( 0.05%) 745.15
other 1329408 ( 7.68%) 702213391 ( 5.76%) 528.22
udp 2683342 ( 15.51%) 1100200498 ( 9.03%) 410.01
dns 948892 ( 5.48%) 236778424 ( 1.94%) 249.53
realaud 529 ( 0.00%) 37902 ( 0.00%) 71.65
halflif 19 ( 0.00%) 2364 ( 0.00%) 124.42
starcra 36 ( 0.00%) 6269 ( 0.00%) 174.14
everque 1461 ( 0.01%) 518825 ( 0.00%) 355.12
unreal 16 ( 0.00%) 2536 ( 0.00%) 158.50
quake 11 ( 0.00%) 999 ( 0.00%) 90.82
cuseeme 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1732165 ( 10.01%) 862677021 ( 7.08%) 498.03
icmp 543427 ( 3.14%) 47020460 ( 0.39%) 86.53
ipip 331 ( 0.00%) 41990 ( 0.00%) 126.86
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 22389 ( 0.13%) 3140658 ( 0.03%) 140.28
other 35373 ( 0.20%) 6114344 ( 0.05%) 172.85
frag 36280 ( 0.21%) 41000302 ( 0.34%) 1130.11
ip6 32917 ( 0.19%) 6767620 ( 0.06%) 205.60
tcp6 12651 ( 0.07%) 3882252 ( 0.03%) 306.87
http(s) 2560 ( 0.01%) 2165934 ( 0.02%) 846.07
http(c) 3814 ( 0.02%) 760328 ( 0.01%) 199.35
smtp 350 ( 0.00%) 120653 ( 0.00%) 344.72
ftp 2307 ( 0.01%) 238183 ( 0.00%) 103.24
imap 280 ( 0.00%) 275153 ( 0.00%) 982.69
bgp 375 ( 0.00%) 32556 ( 0.00%) 86.82
other 2965 ( 0.02%) 289445 ( 0.00%) 97.62
udp6 13801 ( 0.08%) 2087829 ( 0.02%) 151.28
dns 13147 ( 0.08%) 2000039 ( 0.02%) 152.13
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 653 ( 0.00%) 87684 ( 0.00%) 134.28
icmp6 6425 ( 0.04%) 786589 ( 0.01%) 122.43
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9 ( 0.00%) 6734 ( 0.00%) 748.22
tcpdump file: 200904011315.dump.gz (430.73 MB)