Traffic Trace Info
DumpFile: 200904011800.dump
FileSize: 1317.69MB
Id: 200904011800
StartTime: Wed Apr 1 18:00:01 2009
EndTime: Wed Apr 1 18:15:00 2009
TotalTime: 899.11 seconds
TotalCapSize: 1027.85MB CapLen: 96 bytes
# of packets: 18985471 (13522.57MB)
AvgRate: 126.16Mbps stddev:13.11M
IP flow (unique src/dst pair) Information
# of flows: 822713 (avg. 23.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 1.7% 1.6% 1.4% 1.3% 1.3% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 510570
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.3% 8.1% 8.1% 6.6% 6.3% 5.2% 3.1% 2.6% 1.9%
# of IPv6 addresses: 2615
Top 10 bandwidth usage (bytes/total in %):
23.0% 18.0% 15.3% 15.2% 12.4% 11.5% 7.7% 5.6% 5.2% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011800.pktlen.png)
detailed numbers
[ 32- 63]: 4244575
[ 64- 127]: 3711313
[ 128- 255]: 1081440
[ 256- 511]: 428091
[ 512- 1023]: 449396
[ 1024- 2047]: 9070656
Protocol Breakdown
![[protocol breakdown chart]](200904011800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18985471 (100.00%) 14179443992 (100.00%) 746.86
ip 18944499 ( 99.78%) 14168427980 ( 99.92%) 747.89
tcp 15045884 ( 79.25%) 12658053779 ( 89.27%) 841.30
http(s) 7283747 ( 38.36%) 9935946945 ( 70.07%) 1364.13
http(c) 4002652 ( 21.08%) 511294419 ( 3.61%) 127.74
squid 334792 ( 1.76%) 215158171 ( 1.52%) 642.66
smtp 506376 ( 2.67%) 309380576 ( 2.18%) 610.97
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 104038 ( 0.55%) 103037316 ( 0.73%) 990.38
pop3 14332 ( 0.08%) 2794340 ( 0.02%) 194.97
imap 4481 ( 0.02%) 747325 ( 0.01%) 166.78
telnet 6705 ( 0.04%) 758788 ( 0.01%) 113.17
ssh 17714 ( 0.09%) 2964545 ( 0.02%) 167.36
dns 122546 ( 0.65%) 129258465 ( 0.91%) 1054.78
bgp 139 ( 0.00%) 52216 ( 0.00%) 375.65
napster 272 ( 0.00%) 16978 ( 0.00%) 62.42
realaud 17 ( 0.00%) 2111 ( 0.00%) 124.18
rtsp 26109 ( 0.14%) 9863751 ( 0.07%) 377.79
icecast 9780 ( 0.05%) 7843101 ( 0.06%) 801.95
other 2612158 ( 13.76%) 1428933172 ( 10.08%) 547.03
udp 3125653 ( 16.46%) 1403140584 ( 9.90%) 448.91
dns 1257287 ( 6.62%) 293454752 ( 2.07%) 233.40
realaud 286 ( 0.00%) 21404 ( 0.00%) 74.84
halflif 35 ( 0.00%) 2927 ( 0.00%) 83.63
starcra 54 ( 0.00%) 7059 ( 0.00%) 130.72
everque 145 ( 0.00%) 24956 ( 0.00%) 172.11
unreal 1786 ( 0.01%) 1321169 ( 0.01%) 739.74
quake 12 ( 0.00%) 1048 ( 0.00%) 87.33
cuseeme 2 ( 0.00%) 160 ( 0.00%) 80.00
other 1865807 ( 9.83%) 1108103597 ( 7.81%) 593.90
icmp 696007 ( 3.67%) 68628197 ( 0.48%) 98.60
ipip 316 ( 0.00%) 39220 ( 0.00%) 124.11
ip6 47842 ( 0.25%) 34008656 ( 0.24%) 710.85
other 28797 ( 0.15%) 4557544 ( 0.03%) 158.26
frag 60530 ( 0.32%) 64235950 ( 0.45%) 1061.23
ip6 40972 ( 0.22%) 11016012 ( 0.08%) 268.87
tcp6 15070 ( 0.08%) 6184401 ( 0.04%) 410.38
http(s) 2071 ( 0.01%) 1365257 ( 0.01%) 659.23
http(c) 3864 ( 0.02%) 769582 ( 0.01%) 199.17
smtp 1341 ( 0.01%) 406854 ( 0.00%) 303.40
ftp 2189 ( 0.01%) 228068 ( 0.00%) 104.19
imap 566 ( 0.00%) 560451 ( 0.00%) 990.20
bgp 367 ( 0.00%) 30724 ( 0.00%) 83.72
other 4672 ( 0.02%) 2823465 ( 0.02%) 604.34
udp6 19529 ( 0.10%) 3619111 ( 0.03%) 185.32
dns 16060 ( 0.08%) 2462259 ( 0.02%) 153.32
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3468 ( 0.02%) 1156742 ( 0.01%) 333.55
icmp6 5810 ( 0.03%) 699847 ( 0.00%) 120.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 533 ( 0.00%) 508573 ( 0.00%) 954.17
tcpdump file: 200904011800.dump.gz (463.20 MB)