Traffic Trace Info
DumpFile: 200904011415.dump
FileSize: 1022.78MB
Id: 200904011415
StartTime: Wed Apr 1 14:15:00 2009
EndTime: Wed Apr 1 14:30:00 2009
TotalTime: 900.10 seconds
TotalCapSize: 801.51MB CapLen: 96 bytes
# of packets: 14500721 (9697.20MB)
AvgRate: 90.37Mbps stddev:13.32M
IP flow (unique src/dst pair) Information
# of flows: 727562 (avg. 19.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 5.3% 1.7% 1.6% 1.2% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 499726
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.0% 8.0% 6.6% 5.4% 5.3% 5.3% 5.3% 5.0% 2.5%
# of IPv6 addresses: 960
Top 10 bandwidth usage (bytes/total in %):
40.9% 40.9% 13.9% 10.3% 10.3% 9.5% 6.3% 4.7% 4.4% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011415.pktlen.png)
detailed numbers
[ 32- 63]: 3643224
[ 64- 127]: 3225297
[ 128- 255]: 585690
[ 256- 511]: 380425
[ 512- 1023]: 432713
[ 1024- 2047]: 6233372
Protocol Breakdown
![[protocol breakdown chart]](200904011415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14500721 (100.00%) 10168250554 (100.00%) 701.22
ip 14463438 ( 99.74%) 10155921555 ( 99.88%) 702.18
tcp 12116582 ( 83.56%) 9498071802 ( 93.41%) 783.89
http(s) 5283453 ( 36.44%) 7009795658 ( 68.94%) 1326.75
http(c) 4030057 ( 27.79%) 1075124984 ( 10.57%) 266.78
squid 462519 ( 3.19%) 338457132 ( 3.33%) 731.77
smtp 306258 ( 2.11%) 117991099 ( 1.16%) 385.27
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 26843 ( 0.19%) 6069441 ( 0.06%) 226.11
pop3 20587 ( 0.14%) 21213391 ( 0.21%) 1030.43
imap 4653 ( 0.03%) 534096 ( 0.01%) 114.79
telnet 12253 ( 0.08%) 3191698 ( 0.03%) 260.48
ssh 81747 ( 0.56%) 13825727 ( 0.14%) 169.13
dns 24066 ( 0.17%) 14056949 ( 0.14%) 584.10
bgp 161 ( 0.00%) 62549 ( 0.00%) 388.50
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 63938 ( 0.44%) 26876909 ( 0.26%) 420.36
icecast 10212 ( 0.07%) 7876878 ( 0.08%) 771.34
other 1789684 ( 12.34%) 862985077 ( 8.49%) 482.20
udp 1817047 ( 12.53%) 603723524 ( 5.94%) 332.26
dns 943687 ( 6.51%) 231522586 ( 2.28%) 245.34
realaud 11494 ( 0.08%) 3533637 ( 0.03%) 307.43
halflif 20 ( 0.00%) 1653 ( 0.00%) 82.65
starcra 24 ( 0.00%) 3527 ( 0.00%) 146.96
everque 78 ( 0.00%) 14205 ( 0.00%) 182.12
unreal 15 ( 0.00%) 2364 ( 0.00%) 157.60
quake 21 ( 0.00%) 2042 ( 0.00%) 97.24
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 860733 ( 5.94%) 368034840 ( 3.62%) 427.58
icmp 463284 ( 3.19%) 41756775 ( 0.41%) 90.13
ipip 317 ( 0.00%) 39171 ( 0.00%) 123.57
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 21487 ( 0.15%) 3291358 ( 0.03%) 153.18
other 44611 ( 0.31%) 9021545 ( 0.09%) 202.23
frag 44910 ( 0.31%) 49834749 ( 0.49%) 1109.66
ip6 37283 ( 0.26%) 12328999 ( 0.12%) 330.69
tcp6 17767 ( 0.12%) 9452521 ( 0.09%) 532.03
http(s) 5477 ( 0.04%) 6417080 ( 0.06%) 1171.64
http(c) 4769 ( 0.03%) 795004 ( 0.01%) 166.70
smtp 797 ( 0.01%) 385163 ( 0.00%) 483.27
ftp 2394 ( 0.02%) 249491 ( 0.00%) 104.22
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 387 ( 0.00%) 33922 ( 0.00%) 87.65
other 3938 ( 0.03%) 1571317 ( 0.02%) 399.01
udp6 14124 ( 0.10%) 2200749 ( 0.02%) 155.82
dns 14086 ( 0.10%) 2196468 ( 0.02%) 155.93
halflif 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 36 ( 0.00%) 4060 ( 0.00%) 112.78
icmp6 5361 ( 0.04%) 671513 ( 0.01%) 125.26
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200904011415.dump.gz (362.28 MB)