Traffic Trace Info
DumpFile: 200904011530.dump
FileSize: 1251.06MB
Id: 200904011530
StartTime: Wed Apr 1 15:30:01 2009
EndTime: Wed Apr 1 15:45:01 2009
TotalTime: 899.80 seconds
TotalCapSize: 982.03MB CapLen: 96 bytes
# of packets: 17624453 (11961.99MB)
AvgRate: 111.52Mbps stddev:11.84M
IP flow (unique src/dst pair) Information
# of flows: 642931 (avg. 27.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 6.1% 2.5% 2.0% 2.0% 1.7% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 421206
Top 10 bandwidth usage (bytes/total in %):
12.0% 11.2% 6.9% 6.7% 6.6% 6.6% 6.3% 6.3% 4.8% 2.5%
# of IPv6 addresses: 2240
Top 10 bandwidth usage (bytes/total in %):
25.0% 25.0% 15.7% 12.4% 12.0% 10.4% 8.5% 7.1% 5.5% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011530.pktlen.png)
detailed numbers
[ 32- 63]: 3848123
[ 64- 127]: 4343392
[ 128- 255]: 767176
[ 256- 511]: 430453
[ 512- 1023]: 458722
[ 1024- 2047]: 7776587
Protocol Breakdown
![[protocol breakdown chart]](200904011530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17624453 (100.00%) 12543053674 (100.00%) 711.68
ip 17554090 ( 99.60%) 12532531425 ( 99.92%) 713.94
tcp 14168738 ( 80.39%) 11850193304 ( 94.48%) 836.36
http(s) 6665687 ( 37.82%) 8582004993 ( 68.42%) 1287.49
http(c) 4372377 ( 24.81%) 1389836756 ( 11.08%) 317.87
squid 425735 ( 2.42%) 327710418 ( 2.61%) 769.75
smtp 283980 ( 1.61%) 87695243 ( 0.70%) 308.81
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 85462 ( 0.48%) 60270666 ( 0.48%) 705.23
pop3 11086 ( 0.06%) 3700596 ( 0.03%) 333.81
imap 4058 ( 0.02%) 1011139 ( 0.01%) 249.17
telnet 6156 ( 0.03%) 841363 ( 0.01%) 136.67
ssh 86777 ( 0.49%) 18581205 ( 0.15%) 214.13
dns 21632 ( 0.12%) 8097870 ( 0.06%) 374.35
bgp 172 ( 0.00%) 67786 ( 0.00%) 394.10
napster 20106 ( 0.11%) 1206956 ( 0.01%) 60.03
realaud 50 ( 0.00%) 16173 ( 0.00%) 323.46
rtsp 91795 ( 0.52%) 28255582 ( 0.23%) 307.81
icecast 10800 ( 0.06%) 7911408 ( 0.06%) 732.54
other 2082837 ( 11.82%) 1332983470 ( 10.63%) 639.98
udp 2043989 ( 11.60%) 575729400 ( 4.59%) 281.67
dns 1135038 ( 6.44%) 275593262 ( 2.20%) 242.81
realaud 21568 ( 0.12%) 6280291 ( 0.05%) 291.19
halflif 22 ( 0.00%) 1675 ( 0.00%) 76.14
starcra 36 ( 0.00%) 5332 ( 0.00%) 148.11
everque 45544 ( 0.26%) 14412118 ( 0.11%) 316.44
unreal 13 ( 0.00%) 2060 ( 0.00%) 158.46
quake 22 ( 0.00%) 2303 ( 0.00%) 104.68
cuseeme 2 ( 0.00%) 161 ( 0.00%) 80.50
other 841523 ( 4.77%) 279243466 ( 2.23%) 331.83
icmp 1302735 ( 7.39%) 100758324 ( 0.80%) 77.34
ipip 320 ( 0.00%) 39692 ( 0.00%) 124.04
ip6 25522 ( 0.14%) 3936724 ( 0.03%) 154.25
other 12786 ( 0.07%) 1873981 ( 0.01%) 146.57
frag 64374 ( 0.37%) 65440828 ( 0.52%) 1016.57
ip6 70363 ( 0.40%) 10522249 ( 0.08%) 149.54
tcp6 47378 ( 0.27%) 6679593 ( 0.05%) 140.99
http(s) 1796 ( 0.01%) 1169439 ( 0.01%) 651.14
http(c) 38463 ( 0.22%) 3367008 ( 0.03%) 87.54
smtp 420 ( 0.00%) 196546 ( 0.00%) 467.97
ftp 2263 ( 0.01%) 234830 ( 0.00%) 103.77
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 2 ( 0.00%) 186 ( 0.00%) 93.00
bgp 372 ( 0.00%) 34348 ( 0.00%) 92.33
other 4060 ( 0.02%) 1677064 ( 0.01%) 413.07
udp6 17174 ( 0.10%) 3006829 ( 0.02%) 175.08
dns 14711 ( 0.08%) 2278334 ( 0.02%) 154.87
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2461 ( 0.01%) 728284 ( 0.01%) 295.93
icmp6 5610 ( 0.03%) 665794 ( 0.01%) 118.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 171 ( 0.00%) 165953 ( 0.00%) 970.49
tcpdump file: 200904011530.dump.gz (423.94 MB)