Traffic Trace Info
DumpFile: 200904011645.dump
FileSize: 1366.34MB
Id: 200904011645
StartTime: Wed Apr 1 16:45:00 2009
EndTime: Wed Apr 1 17:00:00 2009
TotalTime: 900.26 seconds
TotalCapSize: 1069.57MB CapLen: 96 bytes
# of packets: 19435148 (13596.25MB)
AvgRate: 126.68Mbps stddev:12.98M
IP flow (unique src/dst pair) Information
# of flows: 740308 (avg. 26.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 5.9% 2.9% 1.9% 1.8% 1.4% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 490432
Top 10 bandwidth usage (bytes/total in %):
8.5% 8.2% 8.0% 7.3% 7.2% 6.4% 6.1% 6.1% 3.7% 3.4%
# of IPv6 addresses: 1962
Top 10 bandwidth usage (bytes/total in %):
28.9% 21.0% 21.0% 19.5% 14.1% 9.8% 9.3% 6.2% 5.6% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011645.pktlen.png)
detailed numbers
[ 32- 63]: 4195208
[ 64- 127]: 4476979
[ 128- 255]: 719738
[ 256- 511]: 529381
[ 512- 1023]: 637602
[ 1024- 2047]: 8876240
Protocol Breakdown
![[protocol breakdown chart]](200904011645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19435148 (100.00%) 14256700118 (100.00%) 733.55
ip 19360641 ( 99.62%) 14243144428 ( 99.90%) 735.68
tcp 16409609 ( 84.43%) 13355786361 ( 93.68%) 813.90
http(s) 7623224 ( 39.22%) 9824505011 ( 68.91%) 1288.76
http(c) 5257002 ( 27.05%) 1612931600 ( 11.31%) 306.82
squid 544157 ( 2.80%) 471520061 ( 3.31%) 866.51
smtp 291855 ( 1.50%) 94040333 ( 0.66%) 322.22
ftp 128179 ( 0.66%) 106921188 ( 0.75%) 834.16
pop3 9948 ( 0.05%) 3964409 ( 0.03%) 398.51
imap 7042 ( 0.04%) 5190672 ( 0.04%) 737.10
telnet 6533 ( 0.03%) 796855 ( 0.01%) 121.97
ssh 95852 ( 0.49%) 17743272 ( 0.12%) 185.11
dns 27253 ( 0.14%) 11969279 ( 0.08%) 439.19
bgp 148 ( 0.00%) 57877 ( 0.00%) 391.06
napster 28 ( 0.00%) 4953 ( 0.00%) 176.89
realaud 43 ( 0.00%) 10355 ( 0.00%) 240.81
rtsp 98305 ( 0.51%) 14548015 ( 0.10%) 147.99
icecast 9771 ( 0.05%) 7850494 ( 0.06%) 803.45
hotline 160 ( 0.00%) 9884 ( 0.00%) 61.77
other 2310084 ( 11.89%) 1183720603 ( 8.30%) 512.41
udp 2394184 ( 12.32%) 827578604 ( 5.80%) 345.66
dns 1137655 ( 5.85%) 285208847 ( 2.00%) 250.70
realaud 6684 ( 0.03%) 438946 ( 0.00%) 65.67
halflif 25 ( 0.00%) 5335 ( 0.00%) 213.40
starcra 25 ( 0.00%) 4208 ( 0.00%) 168.32
everque 154 ( 0.00%) 21635 ( 0.00%) 140.49
unreal 20 ( 0.00%) 2914 ( 0.00%) 145.70
quake 12 ( 0.00%) 1163 ( 0.00%) 96.92
cuseeme 5 ( 0.00%) 428 ( 0.00%) 85.60
other 1249270 ( 6.43%) 541646365 ( 3.80%) 433.57
icmp 506565 ( 2.61%) 44238465 ( 0.31%) 87.33
ipip 318 ( 0.00%) 38426 ( 0.00%) 120.84
ip6 32482 ( 0.17%) 12352144 ( 0.09%) 380.28
other 17483 ( 0.09%) 3150428 ( 0.02%) 180.20
frag 65309 ( 0.34%) 66933262 ( 0.47%) 1024.87
ip6 74507 ( 0.38%) 13555690 ( 0.10%) 181.94
tcp6 52178 ( 0.27%) 9739694 ( 0.07%) 186.66
http(s) 2117 ( 0.01%) 1509067 ( 0.01%) 712.83
http(c) 41404 ( 0.21%) 3611254 ( 0.03%) 87.22
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 334 ( 0.00%) 138267 ( 0.00%) 413.97
ftp 2341 ( 0.01%) 241976 ( 0.00%) 103.36
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 377 ( 0.00%) 33627 ( 0.00%) 89.20
other 5598 ( 0.03%) 4204905 ( 0.03%) 751.14
udp6 15757 ( 0.08%) 2628421 ( 0.02%) 166.81
dns 14252 ( 0.07%) 2237436 ( 0.02%) 156.99
starcra 2 ( 0.00%) 684 ( 0.00%) 342.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1502 ( 0.01%) 390191 ( 0.00%) 259.78
icmp6 6070 ( 0.03%) 735187 ( 0.01%) 121.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 472 ( 0.00%) 448308 ( 0.00%) 949.81
tcpdump file: 200904011645.dump.gz (473.15 MB)