Traffic Trace Info
DumpFile: 200904011330.dump
FileSize: 1057.11MB
Id: 200904011330
StartTime: Wed Apr 1 13:30:00 2009
EndTime: Wed Apr 1 13:45:01 2009
TotalTime: 900.22 seconds
TotalCapSize: 827.73MB CapLen: 96 bytes
# of packets: 15030325 (9650.28MB)
AvgRate: 89.93Mbps stddev:11.29M
IP flow (unique src/dst pair) Information
# of flows: 652699 (avg. 23.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 3.7% 3.2% 1.7% 1.5% 1.5% 1.4% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 439055
Top 10 bandwidth usage (bytes/total in %):
8.4% 8.2% 7.5% 7.5% 7.4% 5.4% 4.7% 3.9% 3.7% 3.2%
# of IPv6 addresses: 1373
Top 10 bandwidth usage (bytes/total in %):
28.4% 20.5% 16.8% 16.8% 8.9% 7.9% 7.0% 5.6% 5.5% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011330.pktlen.png)
detailed numbers
[ 32- 63]: 3279730
[ 64- 127]: 3878712
[ 128- 255]: 757841
[ 256- 511]: 394073
[ 512- 1023]: 531999
[ 1024- 2047]: 6187970
Protocol Breakdown
![[protocol breakdown chart]](200904011330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15030325 (100.00%) 10119051779 (100.00%) 673.24
ip 14997589 ( 99.78%) 10111539001 ( 99.93%) 674.21
tcp 11998838 ( 79.83%) 9155269120 ( 90.48%) 763.01
http(s) 5362810 ( 35.68%) 7071178796 ( 69.88%) 1318.56
http(c) 3410809 ( 22.69%) 522762453 ( 5.17%) 153.27
squid 541470 ( 3.60%) 392897588 ( 3.88%) 725.61
smtp 390374 ( 2.60%) 190729795 ( 1.88%) 488.58
ftp 253030 ( 1.68%) 127832679 ( 1.26%) 505.21
pop3 11257 ( 0.07%) 4685997 ( 0.05%) 416.27
imap 5914 ( 0.04%) 535910 ( 0.01%) 90.62
telnet 6867 ( 0.05%) 1547422 ( 0.02%) 225.34
ssh 668243 ( 4.45%) 228266204 ( 2.26%) 341.59
dns 16836 ( 0.11%) 3713447 ( 0.04%) 220.57
bgp 133 ( 0.00%) 43540 ( 0.00%) 327.37
napster 31 ( 0.00%) 3260 ( 0.00%) 105.16
realaud 10 ( 0.00%) 1954 ( 0.00%) 195.40
rtsp 64171 ( 0.43%) 11304575 ( 0.11%) 176.16
icecast 10132 ( 0.07%) 7873710 ( 0.08%) 777.11
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1256747 ( 8.36%) 591891550 ( 5.85%) 470.97
udp 2451531 ( 16.31%) 903443752 ( 8.93%) 368.52
dns 1045198 ( 6.95%) 242711616 ( 2.40%) 232.22
realaud 360 ( 0.00%) 24535 ( 0.00%) 68.15
halflif 17 ( 0.00%) 1655 ( 0.00%) 97.35
starcra 45 ( 0.00%) 8034 ( 0.00%) 178.53
everque 209 ( 0.00%) 26541 ( 0.00%) 126.99
unreal 13 ( 0.00%) 1400 ( 0.00%) 107.69
quake 17 ( 0.00%) 2376 ( 0.00%) 139.76
cuseeme 7 ( 0.00%) 574 ( 0.00%) 82.00
other 1405471 ( 9.35%) 660502497 ( 6.53%) 469.95
icmp 482888 ( 3.21%) 41895894 ( 0.41%) 86.76
ipip 321 ( 0.00%) 39218 ( 0.00%) 122.17
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 22508 ( 0.15%) 3066370 ( 0.03%) 136.23
other 41395 ( 0.28%) 7807583 ( 0.08%) 188.61
frag 37085 ( 0.25%) 41851919 ( 0.41%) 1128.54
ip6 32736 ( 0.22%) 7512778 ( 0.07%) 229.50
tcp6 13470 ( 0.09%) 4720084 ( 0.05%) 350.41
http(s) 2644 ( 0.02%) 2057445 ( 0.02%) 778.16
http(c) 4111 ( 0.03%) 779535 ( 0.01%) 189.62
squid 18 ( 0.00%) 1524 ( 0.00%) 84.67
smtp 129 ( 0.00%) 29878 ( 0.00%) 231.61
ftp 2237 ( 0.01%) 231321 ( 0.00%) 103.41
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 412 ( 0.00%) 38415 ( 0.00%) 93.24
other 3917 ( 0.03%) 1581794 ( 0.02%) 403.83
udp6 13504 ( 0.09%) 2090238 ( 0.02%) 154.79
dns 12970 ( 0.09%) 2017582 ( 0.02%) 155.56
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 533 ( 0.00%) 72551 ( 0.00%) 136.12
icmp6 5730 ( 0.04%) 697598 ( 0.01%) 121.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 778 ( 0.00%) 389.00
tcpdump file: 200904011330.dump.gz (372.15 MB)