Traffic Trace Info
DumpFile: 200904011445.dump
FileSize: 1258.11MB
Id: 200904011445
StartTime: Wed Apr 1 14:45:00 2009
EndTime: Wed Apr 1 15:00:00 2009
TotalTime: 899.96 seconds
TotalCapSize: 985.52MB CapLen: 96 bytes
# of packets: 17863677 (12950.13MB)
AvgRate: 120.72Mbps stddev:11.58M
IP flow (unique src/dst pair) Information
# of flows: 633200 (avg. 28.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 5.9% 5.9% 4.7% 1.6% 1.6% 1.5% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 408980
Top 10 bandwidth usage (bytes/total in %):
20.9% 9.2% 8.8% 6.7% 6.0% 5.9% 5.9% 5.9% 4.8% 4.4%
# of IPv6 addresses: 1023
Top 10 bandwidth usage (bytes/total in %):
24.4% 24.4% 18.0% 12.3% 11.7% 11.7% 11.7% 11.7% 6.7% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011445.pktlen.png)
detailed numbers
[ 32- 63]: 3958269
[ 64- 127]: 3938788
[ 128- 255]: 654871
[ 256- 511]: 407810
[ 512- 1023]: 449334
[ 1024- 2047]: 8454605
Protocol Breakdown
![[protocol breakdown chart]](200904011445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17863677 (100.00%) 13579192184 (100.00%) 760.16
ip 17795534 ( 99.62%) 13568288144 ( 99.92%) 762.45
tcp 15135891 ( 84.73%) 12906350021 ( 95.05%) 852.70
http(s) 7547823 ( 42.25%) 10127143306 ( 74.58%) 1341.73
http(c) 4843480 ( 27.11%) 1354176287 ( 9.97%) 279.59
squid 360668 ( 2.02%) 224978960 ( 1.66%) 623.78
smtp 296166 ( 1.66%) 103253996 ( 0.76%) 348.64
ftp 25463 ( 0.14%) 3017548 ( 0.02%) 118.51
pop3 16592 ( 0.09%) 10282053 ( 0.08%) 619.70
imap 6645 ( 0.04%) 4261499 ( 0.03%) 641.31
telnet 13155 ( 0.07%) 3407566 ( 0.03%) 259.03
ssh 132676 ( 0.74%) 20939532 ( 0.15%) 157.82
dns 16317 ( 0.09%) 2938229 ( 0.02%) 180.07
bgp 248 ( 0.00%) 131634 ( 0.00%) 530.78
napster 7 ( 0.00%) 936 ( 0.00%) 133.71
realaud 20 ( 0.00%) 1890 ( 0.00%) 94.50
rtsp 27089 ( 0.15%) 22896502 ( 0.17%) 845.23
icecast 10309 ( 0.06%) 7894493 ( 0.06%) 765.79
hotline 50 ( 0.00%) 3737 ( 0.00%) 74.74
other 1839177 ( 10.30%) 1021021493 ( 7.52%) 555.15
udp 1916199 ( 10.73%) 597950109 ( 4.40%) 312.05
dns 1009497 ( 5.65%) 236512308 ( 1.74%) 234.29
realaud 20296 ( 0.11%) 4899120 ( 0.04%) 241.38
halflif 25 ( 0.00%) 2417 ( 0.00%) 96.68
starcra 34 ( 0.00%) 5200 ( 0.00%) 152.94
everque 110 ( 0.00%) 20135 ( 0.00%) 183.05
unreal 13 ( 0.00%) 1501 ( 0.00%) 115.46
quake 12 ( 0.00%) 1493 ( 0.00%) 124.42
cuseeme 4 ( 0.00%) 607 ( 0.00%) 151.75
other 885017 ( 4.95%) 355799487 ( 2.62%) 402.03
icmp 705422 ( 3.95%) 58156299 ( 0.43%) 82.44
ipip 330 ( 0.00%) 42270 ( 0.00%) 128.09
ipsec 116 ( 0.00%) 18288 ( 0.00%) 157.66
ip6 18317 ( 0.10%) 2544574 ( 0.02%) 138.92
other 19259 ( 0.11%) 3226583 ( 0.02%) 167.54
frag 45481 ( 0.25%) 48910686 ( 0.36%) 1075.41
ip6 68143 ( 0.38%) 10904040 ( 0.08%) 160.02
tcp6 48624 ( 0.27%) 8029434 ( 0.06%) 165.13
http(s) 2864 ( 0.02%) 2614824 ( 0.02%) 913.00
http(c) 38804 ( 0.22%) 3451213 ( 0.03%) 88.94
smtp 251 ( 0.00%) 99677 ( 0.00%) 397.12
ftp 2473 ( 0.01%) 260291 ( 0.00%) 105.25
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
dns 7 ( 0.00%) 744 ( 0.00%) 106.29
bgp 390 ( 0.00%) 34698 ( 0.00%) 88.97
other 3831 ( 0.02%) 1567643 ( 0.01%) 409.20
udp6 14180 ( 0.08%) 2233009 ( 0.02%) 157.48
dns 14136 ( 0.08%) 2220989 ( 0.02%) 157.12
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
other 41 ( 0.00%) 11702 ( 0.00%) 285.41
icmp6 5303 ( 0.03%) 635022 ( 0.00%) 119.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 2495 ( 0.00%) 415.83
tcpdump file: 200904011445.dump.gz (428.17 MB)