Traffic Trace Info
DumpFile: 200904011600.dump
FileSize: 1268.22MB
Id: 200904011600
StartTime: Wed Apr 1 16:00:01 2009
EndTime: Wed Apr 1 16:15:00 2009
TotalTime: 899.35 seconds
TotalCapSize: 991.71MB CapLen: 96 bytes
# of packets: 18113634 (12664.19MB)
AvgRate: 118.15Mbps stddev:14.41M
IP flow (unique src/dst pair) Information
# of flows: 750336 (avg. 24.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.7% 3.7% 1.5% 1.5% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 485760
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.7% 10.9% 7.0% 5.8% 5.8% 4.9% 4.9% 3.7% 3.7%
# of IPv6 addresses: 2433
Top 10 bandwidth usage (bytes/total in %):
80.5% 64.2% 16.3% 4.2% 4.2% 3.8% 2.9% 2.5% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011600.pktlen.png)
detailed numbers
[ 32- 63]: 4264014
[ 64- 127]: 3835052
[ 128- 255]: 712224
[ 256- 511]: 446068
[ 512- 1023]: 569583
[ 1024- 2047]: 8286693
Protocol Breakdown
![[protocol breakdown chart]](200904011600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18113634 (100.00%) 13279368332 (100.00%) 733.11
ip 18002474 ( 99.39%) 13212544099 ( 99.50%) 733.93
tcp 15097846 ( 83.35%) 12365977575 ( 93.12%) 819.06
http(s) 7124060 ( 39.33%) 9378470010 ( 70.62%) 1316.45
http(c) 4479556 ( 24.73%) 1007820091 ( 7.59%) 224.98
squid 413864 ( 2.28%) 286191944 ( 2.16%) 691.51
smtp 291680 ( 1.61%) 107657828 ( 0.81%) 369.10
ftp 52906 ( 0.29%) 26954704 ( 0.20%) 509.48
pop3 11103 ( 0.06%) 5337686 ( 0.04%) 480.74
imap 4550 ( 0.03%) 571194 ( 0.00%) 125.54
telnet 42620 ( 0.24%) 3401935 ( 0.03%) 79.82
ssh 71149 ( 0.39%) 23316948 ( 0.18%) 327.72
dns 27965 ( 0.15%) 16080757 ( 0.12%) 575.03
bgp 176 ( 0.00%) 70642 ( 0.00%) 401.38
napster 17 ( 0.00%) 2390 ( 0.00%) 140.59
realaud 41 ( 0.00%) 5398 ( 0.00%) 131.66
rtsp 115334 ( 0.64%) 22382391 ( 0.17%) 194.07
icecast 10975 ( 0.06%) 7929536 ( 0.06%) 722.51
hotline 10 ( 0.00%) 1235 ( 0.00%) 123.50
other 2451819 ( 13.54%) 1479781626 ( 11.14%) 603.54
udp 2346992 ( 12.96%) 777973283 ( 5.86%) 331.48
dns 1196850 ( 6.61%) 288814549 ( 2.17%) 241.31
realaud 20660 ( 0.11%) 6236936 ( 0.05%) 301.88
halflif 19 ( 0.00%) 1525 ( 0.00%) 80.26
starcra 28 ( 0.00%) 5748 ( 0.00%) 205.29
everque 133 ( 0.00%) 28774 ( 0.00%) 216.35
unreal 14 ( 0.00%) 1595 ( 0.00%) 113.93
quake 17 ( 0.00%) 1812 ( 0.00%) 106.59
cuseeme 10 ( 0.00%) 889 ( 0.00%) 88.90
other 1129009 ( 6.23%) 482692692 ( 3.63%) 427.54
icmp 479751 ( 2.65%) 43175965 ( 0.33%) 90.00
ipip 322 ( 0.00%) 39048 ( 0.00%) 121.27
ipsec 34114 ( 0.19%) 17936244 ( 0.14%) 525.77
ip6 27186 ( 0.15%) 4362354 ( 0.03%) 160.46
other 16263 ( 0.09%) 3079630 ( 0.02%) 189.36
frag 56392 ( 0.31%) 60272335 ( 0.45%) 1068.81
ip6 111160 ( 0.61%) 66824233 ( 0.50%) 601.15
tcp6 86864 ( 0.48%) 62622597 ( 0.47%) 720.93
http(s) 31059 ( 0.17%) 44742740 ( 0.34%) 1440.57
http(c) 40323 ( 0.22%) 3551807 ( 0.03%) 88.08
smtp 912 ( 0.01%) 364040 ( 0.00%) 399.17
ftp 2253 ( 0.01%) 233865 ( 0.00%) 103.80
dns 11 ( 0.00%) 5400 ( 0.00%) 490.91
bgp 372 ( 0.00%) 32333 ( 0.00%) 86.92
other 11934 ( 0.07%) 13692412 ( 0.10%) 1147.34
udp6 18240 ( 0.10%) 3284187 ( 0.02%) 180.05
dns 15801 ( 0.09%) 2494641 ( 0.02%) 157.88
starcra 2 ( 0.00%) 666 ( 0.00%) 333.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2434 ( 0.01%) 788562 ( 0.01%) 323.98
icmp6 5821 ( 0.03%) 721599 ( 0.01%) 123.96
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 204 ( 0.00%) 191634 ( 0.00%) 939.38
tcpdump file: 200904011600.dump.gz (443.79 MB)