Traffic Trace Info
DumpFile: 200904011930.dump
FileSize: 1175.74MB
Id: 200904011930
StartTime: Wed Apr 1 19:30:00 2009
EndTime: Wed Apr 1 19:45:00 2009
TotalTime: 899.81 seconds
TotalCapSize: 917.03MB CapLen: 96 bytes
# of packets: 16937501 (11248.33MB)
AvgRate: 104.88Mbps stddev:10.23M
IP flow (unique src/dst pair) Information
# of flows: 900571 (avg. 18.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.1% 3.3% 2.1% 1.6% 1.3% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 558579
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.3% 9.0% 8.7% 7.8% 4.7% 4.2% 3.6% 3.3% 3.3%
# of IPv6 addresses: 1808
Top 10 bandwidth usage (bytes/total in %):
22.8% 15.7% 14.4% 14.4% 13.4% 9.3% 8.9% 7.1% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011930.pktlen.png)
detailed numbers
[ 32- 63]: 3935686
[ 64- 127]: 3795737
[ 128- 255]: 877365
[ 256- 511]: 430313
[ 512- 1023]: 541523
[ 1024- 2047]: 7356877
Protocol Breakdown
![[protocol breakdown chart]](200904011930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16937501 (100.00%) 11794729666 (100.00%) 696.37
ip 16897276 ( 99.76%) 11785933474 ( 99.93%) 697.50
tcp 13415435 ( 79.21%) 10687714618 ( 90.61%) 796.67
http(s) 6423036 ( 37.92%) 8730518591 ( 74.02%) 1359.25
http(c) 3776973 ( 22.30%) 312780223 ( 2.65%) 82.81
squid 468622 ( 2.77%) 325844051 ( 2.76%) 695.32
smtp 337212 ( 1.99%) 126344527 ( 1.07%) 374.67
ftp 60610 ( 0.36%) 41523743 ( 0.35%) 685.10
pop3 22618 ( 0.13%) 15670906 ( 0.13%) 692.85
imap 4215 ( 0.02%) 1378111 ( 0.01%) 326.95
telnet 3706 ( 0.02%) 608869 ( 0.01%) 164.29
ssh 281523 ( 1.66%) 53349881 ( 0.45%) 189.50
dns 20872 ( 0.12%) 5434145 ( 0.05%) 260.36
bgp 156 ( 0.00%) 56278 ( 0.00%) 360.76
napster 67 ( 0.00%) 23308 ( 0.00%) 347.88
realaud 46 ( 0.00%) 8551 ( 0.00%) 185.89
rtsp 402 ( 0.00%) 119665 ( 0.00%) 297.67
icecast 436 ( 0.00%) 36484 ( 0.00%) 83.68
hotline 8 ( 0.00%) 480 ( 0.00%) 60.00
other 2014913 ( 11.90%) 1074015605 ( 9.11%) 533.03
udp 2580530 ( 15.24%) 936434231 ( 7.94%) 362.88
dns 1126444 ( 6.65%) 249450482 ( 2.11%) 221.45
realaud 2929 ( 0.02%) 176800 ( 0.00%) 60.36
halflif 28 ( 0.00%) 2418 ( 0.00%) 86.36
starcra 20 ( 0.00%) 2735 ( 0.00%) 136.75
everque 2678 ( 0.02%) 447322 ( 0.00%) 167.04
unreal 13 ( 0.00%) 1438 ( 0.00%) 110.62
quake 11 ( 0.00%) 1144 ( 0.00%) 104.00
cuseeme 6 ( 0.00%) 870 ( 0.00%) 145.00
other 1447996 ( 8.55%) 686156557 ( 5.82%) 473.87
icmp 822388 ( 4.86%) 109351601 ( 0.93%) 132.97
ipip 304 ( 0.00%) 36600 ( 0.00%) 120.39
ip6 53595 ( 0.32%) 45973725 ( 0.39%) 857.80
other 25024 ( 0.15%) 6422699 ( 0.05%) 256.66
frag 70947 ( 0.42%) 71422297 ( 0.61%) 1006.70
ip6 40225 ( 0.24%) 8796192 ( 0.07%) 218.67
tcp6 18338 ( 0.11%) 4901610 ( 0.04%) 267.29
http(s) 2239 ( 0.01%) 1541134 ( 0.01%) 688.31
http(c) 9121 ( 0.05%) 1233326 ( 0.01%) 135.22
smtp 565 ( 0.00%) 281110 ( 0.00%) 497.54
ftp 2128 ( 0.01%) 221312 ( 0.00%) 104.00
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 390 ( 0.00%) 36373 ( 0.00%) 93.26
other 3891 ( 0.02%) 1587958 ( 0.01%) 408.11
udp6 15253 ( 0.09%) 2325864 ( 0.02%) 152.49
dns 13784 ( 0.08%) 2022647 ( 0.02%) 146.74
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1468 ( 0.01%) 303112 ( 0.00%) 206.48
icmp6 5680 ( 0.03%) 687358 ( 0.01%) 121.01
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 923 ( 0.01%) 877144 ( 0.01%) 950.32
tcpdump file: 200904011930.dump.gz (421.34 MB)