Traffic Trace Info
DumpFile: 200904011830.dump
FileSize: 1184.62MB
Id: 200904011830
StartTime: Wed Apr 1 18:30:00 2009
EndTime: Wed Apr 1 18:45:00 2009
TotalTime: 899.70 seconds
TotalCapSize: 925.16MB CapLen: 96 bytes
# of packets: 16986089 (11778.29MB)
AvgRate: 109.80Mbps stddev:11.64M
IP flow (unique src/dst pair) Information
# of flows: 696997 (avg. 24.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 4.0% 2.0% 1.6% 1.2% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 454577
Top 10 bandwidth usage (bytes/total in %):
10.3% 10.2% 9.4% 9.2% 8.2% 8.1% 4.2% 4.1% 3.1% 2.5%
# of IPv6 addresses: 1708
Top 10 bandwidth usage (bytes/total in %):
19.6% 19.1% 19.1% 12.9% 11.4% 11.4% 7.9% 6.8% 6.3% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011830.pktlen.png)
detailed numbers
[ 32- 63]: 3558518
[ 64- 127]: 3863381
[ 128- 255]: 926554
[ 256- 511]: 460495
[ 512- 1023]: 409133
[ 1024- 2047]: 7768008
Protocol Breakdown
![[protocol breakdown chart]](200904011830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16986089 (100.00%) 12350433800 (100.00%) 727.09
ip 16923393 ( 99.63%) 12339311850 ( 99.91%) 729.13
tcp 13407819 ( 78.93%) 11219000161 ( 90.84%) 836.75
http(s) 6703827 ( 39.47%) 9101803635 ( 73.70%) 1357.70
http(c) 3517560 ( 20.71%) 324495611 ( 2.63%) 92.25
squid 377479 ( 2.22%) 241984780 ( 1.96%) 641.05
smtp 489093 ( 2.88%) 237798511 ( 1.93%) 486.20
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 80379 ( 0.47%) 76188324 ( 0.62%) 947.86
pop3 7395 ( 0.04%) 3680467 ( 0.03%) 497.70
imap 5084 ( 0.03%) 508720 ( 0.00%) 100.06
telnet 12222 ( 0.07%) 3301495 ( 0.03%) 270.13
ssh 19333 ( 0.11%) 4322564 ( 0.03%) 223.58
dns 96612 ( 0.57%) 99817427 ( 0.81%) 1033.18
bgp 154 ( 0.00%) 56610 ( 0.00%) 367.60
napster 13 ( 0.00%) 2046 ( 0.00%) 157.38
realaud 22 ( 0.00%) 2176 ( 0.00%) 98.91
rtsp 45609 ( 0.27%) 14976346 ( 0.12%) 328.36
icecast 9898 ( 0.06%) 7875828 ( 0.06%) 795.70
hotline 199 ( 0.00%) 12747 ( 0.00%) 64.06
other 2042920 ( 12.03%) 1102171674 ( 8.92%) 539.51
udp 2751649 ( 16.20%) 1001863857 ( 8.11%) 364.10
dns 1218787 ( 7.18%) 266110928 ( 2.15%) 218.34
realaud 934 ( 0.01%) 58480 ( 0.00%) 62.61
halflif 21 ( 0.00%) 1523 ( 0.00%) 72.52
starcra 22 ( 0.00%) 3767 ( 0.00%) 171.23
everque 77 ( 0.00%) 13062 ( 0.00%) 169.64
unreal 22 ( 0.00%) 2681 ( 0.00%) 121.86
quake 664 ( 0.00%) 56358 ( 0.00%) 84.88
cuseeme 4 ( 0.00%) 370 ( 0.00%) 92.50
other 1529893 ( 9.01%) 735329603 ( 5.95%) 480.64
icmp 682017 ( 4.02%) 67521589 ( 0.55%) 99.00
ipip 331 ( 0.00%) 42965 ( 0.00%) 129.80
ip6 55260 ( 0.33%) 45990090 ( 0.37%) 832.25
other 26317 ( 0.15%) 4893188 ( 0.04%) 185.93
frag 58139 ( 0.34%) 59994277 ( 0.49%) 1031.91
ip6 62696 ( 0.37%) 11121950 ( 0.09%) 177.39
tcp6 41512 ( 0.24%) 7425564 ( 0.06%) 178.88
http(s) 2538 ( 0.01%) 1953473 ( 0.02%) 769.69
http(c) 31930 ( 0.19%) 3157934 ( 0.03%) 98.90
smtp 289 ( 0.00%) 135102 ( 0.00%) 467.48
ftp 2238 ( 0.01%) 232391 ( 0.00%) 103.84
imap 441 ( 0.00%) 366790 ( 0.00%) 831.72
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 374 ( 0.00%) 32541 ( 0.00%) 87.01
other 3697 ( 0.02%) 1546789 ( 0.01%) 418.39
udp6 15351 ( 0.09%) 2469166 ( 0.02%) 160.85
dns 14013 ( 0.08%) 2181258 ( 0.02%) 155.66
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1337 ( 0.01%) 287795 ( 0.00%) 215.25
icmp6 5172 ( 0.03%) 620249 ( 0.01%) 119.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 631 ( 0.00%) 602891 ( 0.00%) 955.45
tcpdump file: 200904011830.dump.gz (425.61 MB)