Traffic Trace Info
DumpFile: 200904011745.dump
FileSize: 1376.55MB
Id: 200904011745
StartTime: Wed Apr 1 17:45:00 2009
EndTime: Wed Apr 1 18:00:01 2009
TotalTime: 900.83 seconds
TotalCapSize: 1072.58MB CapLen: 96 bytes
# of packets: 19906512 (14575.19MB)
AvgRate: 135.73Mbps stddev:12.01M
IP flow (unique src/dst pair) Information
# of flows: 747744 (avg. 26.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 3.1% 2.4% 2.3% 2.3% 1.7% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 485647
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.8% 9.0% 8.9% 7.6% 5.9% 3.9% 3.5% 3.3% 3.3%
# of IPv6 addresses: 2201
Top 10 bandwidth usage (bytes/total in %):
38.8% 38.8% 13.3% 9.3% 8.2% 8.2% 7.1% 5.9% 5.2% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011745.pktlen.png)
detailed numbers
[ 32- 63]: 3995626
[ 64- 127]: 4032811
[ 128- 255]: 1039723
[ 256- 511]: 445261
[ 512- 1023]: 479157
[ 1024- 2047]: 9913934
Protocol Breakdown
![[protocol breakdown chart]](200904011745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19906512 (100.00%) 15283193134 (100.00%) 767.75
ip 19781007 ( 99.37%) 15267674632 ( 99.90%) 771.84
tcp 15339275 ( 77.06%) 13255216698 ( 86.73%) 864.14
http(s) 7824477 ( 39.31%) 10498417802 ( 68.69%) 1341.74
http(c) 4265616 ( 21.43%) 831835199 ( 5.44%) 195.01
squid 389286 ( 1.96%) 293093259 ( 1.92%) 752.90
smtp 304752 ( 1.53%) 97932695 ( 0.64%) 321.35
ftp 123764 ( 0.62%) 128149573 ( 0.84%) 1035.43
pop3 12308 ( 0.06%) 8282706 ( 0.05%) 672.95
imap 3520 ( 0.02%) 561492 ( 0.00%) 159.51
telnet 6411 ( 0.03%) 732674 ( 0.00%) 114.28
ssh 17753 ( 0.09%) 3004479 ( 0.02%) 169.24
dns 84391 ( 0.42%) 73695169 ( 0.48%) 873.26
bgp 158 ( 0.00%) 67087 ( 0.00%) 424.60
realaud 11 ( 0.00%) 826 ( 0.00%) 75.09
rtsp 87686 ( 0.44%) 12064922 ( 0.08%) 137.59
icecast 9787 ( 0.05%) 7854673 ( 0.05%) 802.56
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2209348 ( 11.10%) 1299523722 ( 8.50%) 588.19
udp 3641988 ( 18.30%) 1877616718 ( 12.29%) 515.55
dns 1199431 ( 6.03%) 287889185 ( 1.88%) 240.02
realaud 625 ( 0.00%) 38377 ( 0.00%) 61.40
halflif 26 ( 0.00%) 2025 ( 0.00%) 77.88
starcra 23 ( 0.00%) 3613 ( 0.00%) 157.09
everque 10357 ( 0.05%) 10092143 ( 0.07%) 974.43
unreal 17 ( 0.00%) 1972 ( 0.00%) 116.00
quake 17 ( 0.00%) 1501 ( 0.00%) 88.29
cuseeme 2 ( 0.00%) 154 ( 0.00%) 77.00
other 2431165 ( 12.21%) 1579342037 ( 10.33%) 649.62
icmp 709794 ( 3.57%) 69705940 ( 0.46%) 98.21
ipip 316 ( 0.00%) 39750 ( 0.00%) 125.79
ip6 64090 ( 0.32%) 60859487 ( 0.40%) 949.59
other 25544 ( 0.13%) 4236039 ( 0.03%) 165.83
frag 57758 ( 0.29%) 61483430 ( 0.40%) 1064.50
ip6 125505 ( 0.63%) 15518502 ( 0.10%) 123.65
tcp6 102886 ( 0.52%) 11675520 ( 0.08%) 113.48
http(s) 2144 ( 0.01%) 1440673 ( 0.01%) 671.96
http(c) 12025 ( 0.06%) 1484679 ( 0.01%) 123.47
smtp 269 ( 0.00%) 111521 ( 0.00%) 414.58
ftp 2244 ( 0.01%) 234508 ( 0.00%) 104.50
imap 818 ( 0.00%) 802029 ( 0.01%) 980.48
bgp 378 ( 0.00%) 32997 ( 0.00%) 87.29
other 85008 ( 0.43%) 7569113 ( 0.05%) 89.04
udp6 16491 ( 0.08%) 2821502 ( 0.02%) 171.09
dns 14459 ( 0.07%) 2223333 ( 0.01%) 153.77
starcra 2 ( 0.00%) 685 ( 0.00%) 342.50
everque 2 ( 0.00%) 245 ( 0.00%) 122.50
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 2 ( 0.00%) 231 ( 0.00%) 115.50
other 2025 ( 0.01%) 596906 ( 0.00%) 294.77
icmp6 5787 ( 0.03%) 711992 ( 0.00%) 123.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 311 ( 0.00%) 305408 ( 0.00%) 982.02
tcpdump file: 200904011745.dump.gz (480.32 MB)