Traffic Trace Info
DumpFile: 200904011900.dump
FileSize: 1302.10MB
Id: 200904011900
StartTime: Wed Apr 1 19:00:00 2009
EndTime: Wed Apr 1 19:15:01 2009
TotalTime: 900.59 seconds
TotalCapSize: 1018.41MB CapLen: 96 bytes
# of packets: 18568522 (12764.60MB)
AvgRate: 118.90Mbps stddev:9.41M
IP flow (unique src/dst pair) Information
# of flows: 924368 (avg. 20.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 5.3% 3.9% 3.1% 1.8% 1.6% 1.4% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 579334
Top 10 bandwidth usage (bytes/total in %):
12.7% 11.4% 10.6% 7.9% 6.6% 5.7% 5.3% 3.9% 3.6% 3.3%
# of IPv6 addresses: 2137
Top 10 bandwidth usage (bytes/total in %):
24.3% 22.6% 16.1% 15.7% 12.3% 8.6% 7.7% 6.9% 4.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011900.pktlen.png)
detailed numbers
[ 32- 63]: 3851627
[ 64- 127]: 4360598
[ 128- 255]: 1016360
[ 256- 511]: 442820
[ 512- 1023]: 511684
[ 1024- 2047]: 8385433
Protocol Breakdown
![[protocol breakdown chart]](200904011900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18568522 (100.00%) 13384649480 (100.00%) 720.82
ip 18525526 ( 99.77%) 13374242015 ( 99.92%) 721.94
tcp 15176694 ( 81.73%) 12345063534 ( 92.23%) 813.42
http(s) 7524947 ( 40.53%) 10314827571 ( 77.06%) 1370.75
http(c) 4071996 ( 21.93%) 391428358 ( 2.92%) 96.13
squid 402541 ( 2.17%) 235963754 ( 1.76%) 586.19
smtp 376104 ( 2.03%) 104160024 ( 0.78%) 276.94
ftp 53327 ( 0.29%) 42061434 ( 0.31%) 788.75
pop3 6857 ( 0.04%) 3477129 ( 0.03%) 507.09
imap 4501 ( 0.02%) 449888 ( 0.00%) 99.95
telnet 13957 ( 0.08%) 4998375 ( 0.04%) 358.13
ssh 526562 ( 2.84%) 78189716 ( 0.58%) 148.49
dns 57528 ( 0.31%) 48441255 ( 0.36%) 842.05
bgp 154 ( 0.00%) 60308 ( 0.00%) 391.61
napster 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 43930 ( 0.24%) 2791760 ( 0.02%) 63.55
icecast 9143 ( 0.05%) 7285703 ( 0.05%) 796.86
other 2085134 ( 11.23%) 1110927337 ( 8.30%) 532.78
udp 2513536 ( 13.54%) 896150083 ( 6.70%) 356.53
dns 1128443 ( 6.08%) 255183096 ( 1.91%) 226.14
realaud 2788 ( 0.02%) 167426 ( 0.00%) 60.05
halflif 19 ( 0.00%) 1378 ( 0.00%) 72.53
starcra 610 ( 0.00%) 347566 ( 0.00%) 569.78
everque 77 ( 0.00%) 13986 ( 0.00%) 181.64
unreal 19 ( 0.00%) 1793 ( 0.00%) 94.37
quake 20 ( 0.00%) 1841 ( 0.00%) 92.05
cuseeme 9 ( 0.00%) 712 ( 0.00%) 79.11
other 1380821 ( 7.44%) 640219464 ( 4.78%) 463.65
icmp 741228 ( 3.99%) 76727288 ( 0.57%) 103.51
ipip 301 ( 0.00%) 37210 ( 0.00%) 123.62
ip6 59183 ( 0.32%) 49832267 ( 0.37%) 842.00
other 34584 ( 0.19%) 6431633 ( 0.05%) 185.97
frag 65638 ( 0.35%) 67890784 ( 0.51%) 1034.32
ip6 42996 ( 0.23%) 10407465 ( 0.08%) 242.06
tcp6 19771 ( 0.11%) 6517972 ( 0.05%) 329.67
http(s) 2443 ( 0.01%) 1635927 ( 0.01%) 669.64
http(c) 9558 ( 0.05%) 1294637 ( 0.01%) 135.45
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 197 ( 0.00%) 63678 ( 0.00%) 323.24
ftp 2209 ( 0.01%) 227572 ( 0.00%) 103.02
imap 480 ( 0.00%) 462528 ( 0.00%) 963.60
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 374 ( 0.00%) 32086 ( 0.00%) 85.79
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 4505 ( 0.02%) 2801150 ( 0.02%) 621.79
udp6 16985 ( 0.09%) 2786103 ( 0.02%) 164.03
dns 15258 ( 0.08%) 2302531 ( 0.02%) 150.91
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1725 ( 0.01%) 483361 ( 0.00%) 280.21
icmp6 5769 ( 0.03%) 680454 ( 0.01%) 117.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 441 ( 0.00%) 418856 ( 0.00%) 949.79
tcpdump file: 200904011900.dump.gz (462.61 MB)