Traffic Trace Info
DumpFile: 200904011700.dump
FileSize: 1381.24MB
Id: 200904011700
StartTime: Wed Apr 1 17:00:00 2009
EndTime: Wed Apr 1 17:15:00 2009
TotalTime: 899.51 seconds
TotalCapSize: 1082.40MB CapLen: 96 bytes
# of packets: 19572295 (13124.58MB)
AvgRate: 122.40Mbps stddev:12.12M
IP flow (unique src/dst pair) Information
# of flows: 804761 (avg. 24.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.7% 2.3% 2.2% 2.2% 1.4% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 514123
Top 10 bandwidth usage (bytes/total in %):
10.6% 7.9% 6.8% 6.4% 6.4% 6.1% 6.1% 5.7% 4.2% 2.7%
# of IPv6 addresses: 2298
Top 10 bandwidth usage (bytes/total in %):
24.8% 24.8% 16.3% 11.2% 11.2% 10.9% 10.1% 8.1% 6.9% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011700.pktlen.png)
detailed numbers
[ 32- 63]: 4144070
[ 64- 127]: 5022038
[ 128- 255]: 759033
[ 256- 511]: 461608
[ 512- 1023]: 556521
[ 1024- 2047]: 8629025
Protocol Breakdown
![[protocol breakdown chart]](200904011700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19572295 (100.00%) 13762115359 (100.00%) 703.14
ip 19455598 ( 99.40%) 13746378503 ( 99.89%) 706.55
tcp 16140176 ( 82.46%) 12592351207 ( 91.50%) 780.19
http(s) 6877518 ( 35.14%) 8833200440 ( 64.18%) 1284.36
http(c) 5314803 ( 27.15%) 1545709280 ( 11.23%) 290.83
squid 580451 ( 2.97%) 475815110 ( 3.46%) 819.73
smtp 307953 ( 1.57%) 109019605 ( 0.79%) 354.01
ftp 150757 ( 0.77%) 160203604 ( 1.16%) 1062.66
pop3 21220 ( 0.11%) 14182539 ( 0.10%) 668.36
imap 4514 ( 0.02%) 1590344 ( 0.01%) 352.31
telnet 50931 ( 0.26%) 4020356 ( 0.03%) 78.94
ssh 49470 ( 0.25%) 9096547 ( 0.07%) 183.88
dns 29957 ( 0.15%) 14967679 ( 0.11%) 499.64
bgp 167 ( 0.00%) 69010 ( 0.00%) 413.23
napster 22 ( 0.00%) 2176 ( 0.00%) 98.91
realaud 35 ( 0.00%) 3504 ( 0.00%) 100.11
rtsp 150425 ( 0.77%) 45846280 ( 0.33%) 304.78
icecast 9642 ( 0.05%) 7835442 ( 0.06%) 812.64
hotline 131 ( 0.00%) 8519 ( 0.00%) 65.03
other 2592178 ( 13.24%) 1370780652 ( 9.96%) 528.81
udp 2776307 ( 14.18%) 1099444369 ( 7.99%) 396.01
dns 1202306 ( 6.14%) 296125037 ( 2.15%) 246.30
realaud 935 ( 0.00%) 56956 ( 0.00%) 60.92
halflif 24 ( 0.00%) 2233 ( 0.00%) 93.04
starcra 28 ( 0.00%) 5325 ( 0.00%) 190.18
everque 51484 ( 0.26%) 23982968 ( 0.17%) 465.83
unreal 25 ( 0.00%) 3647 ( 0.00%) 145.88
quake 20 ( 0.00%) 1860 ( 0.00%) 93.00
cuseeme 7 ( 0.00%) 864 ( 0.00%) 123.43
other 1521245 ( 7.77%) 779068854 ( 5.66%) 512.13
icmp 480033 ( 2.45%) 42581190 ( 0.31%) 88.70
ipip 340 ( 0.00%) 43101 ( 0.00%) 126.77
ip6 27039 ( 0.14%) 3965517 ( 0.03%) 146.66
other 31703 ( 0.16%) 7993119 ( 0.06%) 252.13
frag 63452 ( 0.32%) 66360450 ( 0.48%) 1045.84
ip6 116697 ( 0.60%) 15736856 ( 0.11%) 134.85
tcp6 91380 ( 0.47%) 11476410 ( 0.08%) 125.59
http(s) 2161 ( 0.01%) 1743487 ( 0.01%) 806.80
http(c) 28699 ( 0.15%) 2595799 ( 0.02%) 90.45
smtp 225 ( 0.00%) 93827 ( 0.00%) 417.01
ftp 2363 ( 0.01%) 244625 ( 0.00%) 103.52
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 381 ( 0.00%) 34339 ( 0.00%) 90.13
other 57549 ( 0.29%) 6764161 ( 0.05%) 117.54
udp6 18120 ( 0.09%) 3127141 ( 0.02%) 172.58
dns 15891 ( 0.08%) 2442338 ( 0.02%) 153.69
starcra 2 ( 0.00%) 666 ( 0.00%) 333.00
other 2227 ( 0.01%) 684137 ( 0.00%) 307.20
icmp6 6849 ( 0.03%) 827199 ( 0.01%) 120.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 318 ( 0.00%) 302026 ( 0.00%) 949.77
tcpdump file: 200904011700.dump.gz (478.57 MB)