Traffic Trace Info
DumpFile: 200904011500.dump
FileSize: 1254.75MB
Id: 200904011500
StartTime: Wed Apr 1 15:00:00 2009
EndTime: Wed Apr 1 15:15:00 2009
TotalTime: 899.95 seconds
TotalCapSize: 986.12MB CapLen: 96 bytes
# of packets: 17603842 (11963.94MB)
AvgRate: 111.53Mbps stddev:13.51M
IP flow (unique src/dst pair) Information
# of flows: 735765 (avg. 23.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 6.4% 5.6% 1.5% 1.3% 1.3% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 459637
Top 10 bandwidth usage (bytes/total in %):
19.4% 9.8% 9.2% 6.4% 6.4% 6.1% 5.8% 5.8% 5.0% 4.4%
# of IPv6 addresses: 2322
Top 10 bandwidth usage (bytes/total in %):
40.3% 40.3% 12.4% 12.4% 12.0% 9.3% 8.0% 6.5% 6.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011500.pktlen.png)
detailed numbers
[ 32- 63]: 3580331
[ 64- 127]: 4795012
[ 128- 255]: 734890
[ 256- 511]: 379778
[ 512- 1023]: 347774
[ 1024- 2047]: 7766057
Protocol Breakdown
![[protocol breakdown chart]](200904011500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17603842 (100.00%) 12545105507 (100.00%) 712.63
ip 17524740 ( 99.55%) 12523913133 ( 99.83%) 714.64
tcp 14708287 ( 83.55%) 11925035485 ( 95.06%) 810.77
http(s) 6856677 ( 38.95%) 8999459279 ( 71.74%) 1312.51
http(c) 4407924 ( 25.04%) 1226744996 ( 9.78%) 278.30
squid 389384 ( 2.21%) 263505100 ( 2.10%) 676.72
smtp 291738 ( 1.66%) 113767569 ( 0.91%) 389.96
ftp 44805 ( 0.25%) 21330819 ( 0.17%) 476.08
pop3 16138 ( 0.09%) 5214465 ( 0.04%) 323.12
imap 3778 ( 0.02%) 348520 ( 0.00%) 92.25
telnet 4870 ( 0.03%) 797170 ( 0.01%) 163.69
ssh 68657 ( 0.39%) 11926937 ( 0.10%) 173.72
dns 16360 ( 0.09%) 1824836 ( 0.01%) 111.54
bgp 145 ( 0.00%) 61598 ( 0.00%) 424.81
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 13 ( 0.00%) 1272 ( 0.00%) 97.85
rtsp 86560 ( 0.49%) 28811269 ( 0.23%) 332.85
icecast 10765 ( 0.06%) 7922272 ( 0.06%) 735.93
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2510443 ( 14.26%) 1243317583 ( 9.91%) 495.26
udp 1837041 ( 10.44%) 516537329 ( 4.12%) 281.18
dns 1008771 ( 5.73%) 216682290 ( 1.73%) 214.80
realaud 20553 ( 0.12%) 5175698 ( 0.04%) 251.82
halflif 37 ( 0.00%) 3011 ( 0.00%) 81.38
starcra 37 ( 0.00%) 6500 ( 0.00%) 175.68
everque 148 ( 0.00%) 31657 ( 0.00%) 213.90
unreal 15 ( 0.00%) 1775 ( 0.00%) 118.33
quake 19 ( 0.00%) 1904 ( 0.00%) 100.21
cuseeme 7 ( 0.00%) 681 ( 0.00%) 97.29
other 807248 ( 4.59%) 294453926 ( 2.35%) 364.76
icmp 935661 ( 5.32%) 74400791 ( 0.59%) 79.52
ipip 301 ( 0.00%) 36176 ( 0.00%) 120.19
ipsec 60 ( 0.00%) 9480 ( 0.00%) 158.00
ip6 27084 ( 0.15%) 4862248 ( 0.04%) 179.52
other 16306 ( 0.09%) 3031624 ( 0.02%) 185.92
frag 54133 ( 0.31%) 59257750 ( 0.47%) 1094.67
ip6 79102 ( 0.45%) 21192374 ( 0.17%) 267.91
tcp6 54628 ( 0.31%) 17365056 ( 0.14%) 317.88
http(s) 2673 ( 0.02%) 2216043 ( 0.02%) 829.05
http(c) 38471 ( 0.22%) 3404342 ( 0.03%) 88.49
smtp 237 ( 0.00%) 101551 ( 0.00%) 428.49
ftp 2376 ( 0.01%) 248796 ( 0.00%) 104.71
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 381 ( 0.00%) 33076 ( 0.00%) 86.81
other 10488 ( 0.06%) 11361076 ( 0.09%) 1083.25
udp6 18636 ( 0.11%) 3087392 ( 0.02%) 165.67
dns 14801 ( 0.08%) 2289473 ( 0.02%) 154.68
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 3834 ( 0.02%) 797807 ( 0.01%) 208.09
icmp6 5772 ( 0.03%) 703383 ( 0.01%) 121.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 35 ( 0.00%) 32327 ( 0.00%) 923.63
tcpdump file: 200904011500.dump.gz (424.35 MB)