Traffic Trace Info
DumpFile: 200904011515.dump
FileSize: 1200.96MB
Id: 200904011515
StartTime: Wed Apr 1 15:15:00 2009
EndTime: Wed Apr 1 15:30:01 2009
TotalTime: 900.84 seconds
TotalCapSize: 942.71MB CapLen: 96 bytes
# of packets: 16923946 (11513.19MB)
AvgRate: 107.21Mbps stddev:14.40M
IP flow (unique src/dst pair) Information
# of flows: 700617 (avg. 24.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 6.6% 5.8% 1.6% 1.5% 1.1% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 448174
Top 10 bandwidth usage (bytes/total in %):
14.7% 8.3% 7.0% 6.9% 6.6% 6.6% 5.8% 5.7% 5.6% 3.4%
# of IPv6 addresses: 2058
Top 10 bandwidth usage (bytes/total in %):
21.9% 21.9% 15.0% 11.0% 10.9% 10.5% 10.3% 6.2% 5.3% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011515.pktlen.png)
detailed numbers
[ 32- 63]: 3603544
[ 64- 127]: 4319124
[ 128- 255]: 746270
[ 256- 511]: 401337
[ 512- 1023]: 385463
[ 1024- 2047]: 7468208
Protocol Breakdown
![[protocol breakdown chart]](200904011515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16923946 (100.00%) 12072458397 (100.00%) 713.34
ip 16853245 ( 99.58%) 12060668422 ( 99.90%) 715.63
tcp 14309047 ( 84.55%) 11426345121 ( 94.65%) 798.54
http(s) 6480028 ( 38.29%) 8337031498 ( 69.06%) 1286.57
http(c) 4391806 ( 25.95%) 1399342541 ( 11.59%) 318.63
squid 389420 ( 2.30%) 265498172 ( 2.20%) 681.78
smtp 291881 ( 1.72%) 106565014 ( 0.88%) 365.10
ftp 65027 ( 0.38%) 34234116 ( 0.28%) 526.46
pop3 10265 ( 0.06%) 5448885 ( 0.05%) 530.82
imap 3286 ( 0.02%) 630398 ( 0.01%) 191.84
telnet 5625 ( 0.03%) 798668 ( 0.01%) 141.99
ssh 89748 ( 0.53%) 12660626 ( 0.10%) 141.07
dns 15814 ( 0.09%) 1605624 ( 0.01%) 101.53
bgp 129 ( 0.00%) 42055 ( 0.00%) 326.01
napster 8476 ( 0.05%) 509275 ( 0.00%) 60.08
realaud 12 ( 0.00%) 876 ( 0.00%) 73.00
rtsp 31412 ( 0.19%) 38655531 ( 0.32%) 1230.60
icecast 10785 ( 0.06%) 7920423 ( 0.07%) 734.39
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2515328 ( 14.86%) 1215401119 ( 10.07%) 483.20
udp 1961669 ( 11.59%) 577841682 ( 4.79%) 294.57
dns 958275 ( 5.66%) 212204462 ( 1.76%) 221.44
realaud 21614 ( 0.13%) 6291889 ( 0.05%) 291.10
halflif 24 ( 0.00%) 1865 ( 0.00%) 77.71
starcra 34 ( 0.00%) 5881 ( 0.00%) 172.97
everque 26201 ( 0.15%) 10089250 ( 0.08%) 385.07
unreal 14 ( 0.00%) 1558 ( 0.00%) 111.29
quake 16 ( 0.00%) 1818 ( 0.00%) 113.62
cuseeme 6 ( 0.00%) 550 ( 0.00%) 91.67
other 955230 ( 5.64%) 349023897 ( 2.89%) 365.38
icmp 535229 ( 3.16%) 49185920 ( 0.41%) 91.90
ipip 340 ( 0.00%) 42817 ( 0.00%) 125.93
ipsec 50 ( 0.00%) 8932 ( 0.00%) 178.64
ip6 24958 ( 0.15%) 3734258 ( 0.03%) 149.62
other 21952 ( 0.13%) 3509692 ( 0.03%) 159.88
frag 57094 ( 0.34%) 59671363 ( 0.49%) 1045.14
ip6 70699 ( 0.42%) 11789855 ( 0.10%) 166.76
tcp6 47761 ( 0.28%) 7569821 ( 0.06%) 158.49
http(s) 1847 ( 0.01%) 1238759 ( 0.01%) 670.69
http(c) 37839 ( 0.22%) 3323116 ( 0.03%) 87.82
smtp 693 ( 0.00%) 218534 ( 0.00%) 315.34
ftp 2340 ( 0.01%) 245371 ( 0.00%) 104.86
dns 6 ( 0.00%) 570 ( 0.00%) 95.00
bgp 396 ( 0.00%) 34945 ( 0.00%) 88.24
other 4640 ( 0.03%) 2508526 ( 0.02%) 540.63
udp6 16412 ( 0.10%) 2830279 ( 0.02%) 172.45
dns 14488 ( 0.09%) 2273235 ( 0.02%) 156.90
other 1924 ( 0.01%) 557044 ( 0.00%) 289.52
icmp6 5771 ( 0.03%) 694296 ( 0.01%) 120.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 725 ( 0.00%) 691379 ( 0.01%) 953.63
tcpdump file: 200904011515.dump.gz (417.49 MB)