Traffic Trace Info
DumpFile: 200904011915.dump
FileSize: 1177.31MB
Id: 200904011915
StartTime: Wed Apr 1 19:15:01 2009
EndTime: Wed Apr 1 19:30:00 2009
TotalTime: 899.83 seconds
TotalCapSize: 919.90MB CapLen: 96 bytes
# of packets: 16846862 (11840.58MB)
AvgRate: 110.39Mbps stddev:12.31M
IP flow (unique src/dst pair) Information
# of flows: 909285 (avg. 18.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.2% 1.9% 1.7% 1.7% 1.4% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 625672
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.3% 8.9% 7.1% 4.4% 3.9% 3.3% 3.2% 3.0% 2.4%
# of IPv6 addresses: 1998
Top 10 bandwidth usage (bytes/total in %):
26.0% 17.7% 16.0% 15.9% 8.6% 8.3% 7.9% 5.2% 5.2% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011915.pktlen.png)
detailed numbers
[ 32- 63]: 3622076
[ 64- 127]: 3707191
[ 128- 255]: 848938
[ 256- 511]: 433207
[ 512- 1023]: 432087
[ 1024- 2047]: 7803363
Protocol Breakdown
![[protocol breakdown chart]](200904011915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16846862 (100.00%) 12415751255 (100.00%) 736.98
ip 16810163 ( 99.78%) 12407770070 ( 99.94%) 738.11
tcp 13607201 ( 80.77%) 11391020420 ( 91.75%) 837.13
http(s) 6701951 ( 39.78%) 9195382294 ( 74.06%) 1372.05
http(c) 3746220 ( 22.24%) 331218814 ( 2.67%) 88.41
squid 468257 ( 2.78%) 322218160 ( 2.60%) 688.12
smtp 351023 ( 2.08%) 109447305 ( 0.88%) 311.80
ftp 60271 ( 0.36%) 44599558 ( 0.36%) 739.98
pop3 13738 ( 0.08%) 8356195 ( 0.07%) 608.25
imap 5381 ( 0.03%) 512753 ( 0.00%) 95.29
telnet 20544 ( 0.12%) 10026976 ( 0.08%) 488.07
ssh 64366 ( 0.38%) 11035737 ( 0.09%) 171.45
dns 50630 ( 0.30%) 39503525 ( 0.32%) 780.24
bgp 145 ( 0.00%) 56687 ( 0.00%) 390.94
napster 24 ( 0.00%) 5951 ( 0.00%) 247.96
realaud 17 ( 0.00%) 2809 ( 0.00%) 165.24
rtsp 16575 ( 0.10%) 1150864 ( 0.01%) 69.43
icecast 1102 ( 0.01%) 125592 ( 0.00%) 113.97
other 2106956 ( 12.51%) 1317377140 ( 10.61%) 625.25
udp 2307233 ( 13.70%) 850421225 ( 6.85%) 368.59
dns 1025012 ( 6.08%) 232762317 ( 1.87%) 227.08
realaud 2793 ( 0.02%) 168151 ( 0.00%) 60.20
halflif 22 ( 0.00%) 2188 ( 0.00%) 99.45
starcra 18 ( 0.00%) 2695 ( 0.00%) 149.72
everque 102 ( 0.00%) 16109 ( 0.00%) 157.93
unreal 14 ( 0.00%) 2094 ( 0.00%) 149.57
quake 15 ( 0.00%) 1641 ( 0.00%) 109.40
cuseeme 8 ( 0.00%) 649 ( 0.00%) 81.12
other 1278855 ( 7.59%) 617276709 ( 4.97%) 482.68
icmp 805302 ( 4.78%) 109003264 ( 0.88%) 135.36
ipip 358 ( 0.00%) 45308 ( 0.00%) 126.56
ipsec 1 ( 0.00%) 64 ( 0.00%) 64.00
ip6 59796 ( 0.35%) 51259303 ( 0.41%) 857.24
other 30272 ( 0.18%) 6020486 ( 0.05%) 198.88
frag 67428 ( 0.40%) 68295969 ( 0.55%) 1012.87
ip6 36697 ( 0.22%) 7981065 ( 0.06%) 217.49
tcp6 15036 ( 0.09%) 4604231 ( 0.04%) 306.21
http(s) 2519 ( 0.01%) 1613672 ( 0.01%) 640.60
http(c) 5850 ( 0.03%) 1012683 ( 0.01%) 173.11
smtp 256 ( 0.00%) 146358 ( 0.00%) 571.71
ftp 2175 ( 0.01%) 223865 ( 0.00%) 102.93
dns 8 ( 0.00%) 922 ( 0.00%) 115.25
bgp 406 ( 0.00%) 38537 ( 0.00%) 94.92
other 3822 ( 0.02%) 1568194 ( 0.01%) 410.31
udp6 15850 ( 0.09%) 2623160 ( 0.02%) 165.50
dns 13563 ( 0.08%) 2061454 ( 0.02%) 151.99
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2285 ( 0.01%) 561491 ( 0.00%) 245.73
icmp6 5729 ( 0.03%) 702007 ( 0.01%) 122.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 52 ( 0.00%) 47587 ( 0.00%) 915.13
tcpdump file: 200904011915.dump.gz (418.77 MB)