Traffic Trace Info
DumpFile: 200904011345.dump
FileSize: 1061.13MB
Id: 200904011345
StartTime: Wed Apr 1 13:45:01 2009
EndTime: Wed Apr 1 14:00:01 2009
TotalTime: 900.04 seconds
TotalCapSize: 832.90MB CapLen: 96 bytes
# of packets: 14956555 (10088.71MB)
AvgRate: 94.03Mbps stddev:10.06M
IP flow (unique src/dst pair) Information
# of flows: 598406 (avg. 24.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 4.9% 3.6% 1.7% 1.5% 1.4% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 396596
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.6% 8.5% 7.0% 7.0% 5.1% 5.0% 4.9% 4.6% 3.6%
# of IPv6 addresses: 1283
Top 10 bandwidth usage (bytes/total in %):
25.8% 17.1% 16.5% 16.5% 8.9% 8.7% 8.6% 8.6% 6.7% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011345.pktlen.png)
detailed numbers
[ 32- 63]: 3363793
[ 64- 127]: 3534398
[ 128- 255]: 641133
[ 256- 511]: 385970
[ 512- 1023]: 499768
[ 1024- 2047]: 6531493
Protocol Breakdown
![[protocol breakdown chart]](200904011345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14956555 (100.00%) 10578782195 (100.00%) 707.30
ip 14923698 ( 99.78%) 10571138616 ( 99.93%) 708.35
tcp 12581535 ( 84.12%) 9835808448 ( 92.98%) 781.77
http(s) 6068024 ( 40.57%) 8111868398 ( 76.68%) 1336.82
http(c) 3697783 ( 24.72%) 517288598 ( 4.89%) 139.89
squid 595780 ( 3.98%) 476728864 ( 4.51%) 800.18
smtp 264386 ( 1.77%) 70670625 ( 0.67%) 267.30
ftp 38720 ( 0.26%) 3508371 ( 0.03%) 90.61
pop3 7779 ( 0.05%) 2873546 ( 0.03%) 369.40
imap 3001 ( 0.02%) 320172 ( 0.00%) 106.69
telnet 7718 ( 0.05%) 1789534 ( 0.02%) 231.86
ssh 441297 ( 2.95%) 66737464 ( 0.63%) 151.23
dns 13859 ( 0.09%) 1448702 ( 0.01%) 104.53
bgp 158 ( 0.00%) 58228 ( 0.00%) 368.53
napster 19 ( 0.00%) 2101 ( 0.00%) 110.58
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 90917 ( 0.61%) 13566617 ( 0.13%) 149.22
icecast 10850 ( 0.07%) 7915552 ( 0.07%) 729.54
other 1341207 ( 8.97%) 561029316 ( 5.30%) 418.30
udp 1821881 ( 12.18%) 682947350 ( 6.46%) 374.86
dns 901404 ( 6.03%) 231597693 ( 2.19%) 256.93
realaud 962 ( 0.01%) 62146 ( 0.00%) 64.60
halflif 18 ( 0.00%) 1499 ( 0.00%) 83.28
starcra 37 ( 0.00%) 5937 ( 0.00%) 160.46
everque 65 ( 0.00%) 13860 ( 0.00%) 213.23
unreal 11 ( 0.00%) 1945 ( 0.00%) 176.82
quake 7 ( 0.00%) 575 ( 0.00%) 82.14
cuseeme 4 ( 0.00%) 333 ( 0.00%) 83.25
other 919158 ( 6.15%) 451079472 ( 4.26%) 490.75
icmp 447163 ( 2.99%) 39220066 ( 0.37%) 87.71
ipip 335 ( 0.00%) 41414 ( 0.00%) 123.62
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 21434 ( 0.14%) 2944775 ( 0.03%) 137.39
other 51238 ( 0.34%) 10158835 ( 0.10%) 198.27
frag 36645 ( 0.25%) 41386465 ( 0.39%) 1129.39
ip6 32857 ( 0.22%) 7643579 ( 0.07%) 232.63
tcp6 13985 ( 0.09%) 4940142 ( 0.05%) 353.25
http(s) 2626 ( 0.02%) 2125484 ( 0.02%) 809.40
http(c) 4243 ( 0.03%) 841182 ( 0.01%) 198.25
squid 42 ( 0.00%) 3556 ( 0.00%) 84.67
smtp 330 ( 0.00%) 107917 ( 0.00%) 327.02
ftp 2368 ( 0.02%) 245385 ( 0.00%) 103.63
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 416 ( 0.00%) 39251 ( 0.00%) 94.35
other 3958 ( 0.03%) 1577142 ( 0.01%) 398.47
udp6 13301 ( 0.09%) 2021587 ( 0.02%) 151.99
dns 12841 ( 0.09%) 1959076 ( 0.02%) 152.56
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 458 ( 0.00%) 62259 ( 0.00%) 135.94
icmp6 5539 ( 0.04%) 677650 ( 0.01%) 122.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200904011345.dump.gz (373.79 MB)