Traffic Trace Info
DumpFile: 200904011945.dump
FileSize: 1218.75MB
Id: 200904011945
StartTime: Wed Apr 1 19:45:00 2009
EndTime: Wed Apr 1 20:00:00 2009
TotalTime: 899.85 seconds
TotalCapSize: 950.51MB CapLen: 96 bytes
# of packets: 17555068 (12198.17MB)
AvgRate: 113.72Mbps stddev:13.03M
IP flow (unique src/dst pair) Information
# of flows: 848733 (avg. 20.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.8% 2.0% 1.9% 1.9% 1.7% 1.6% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 560555
Top 10 bandwidth usage (bytes/total in %):
11.4% 11.3% 9.4% 7.3% 6.3% 4.4% 3.9% 3.9% 3.4% 2.8%
# of IPv6 addresses: 1988
Top 10 bandwidth usage (bytes/total in %):
27.2% 19.8% 16.8% 13.2% 11.2% 10.9% 10.7% 6.6% 5.9% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904011945.pktlen.png)
detailed numbers
[ 32- 63]: 4064045
[ 64- 127]: 3605293
[ 128- 255]: 887646
[ 256- 511]: 402649
[ 512- 1023]: 485348
[ 1024- 2047]: 8110087
Protocol Breakdown
![[protocol breakdown chart]](200904011945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17555068 (100.00%) 12790712523 (100.00%) 728.61
ip 17517510 ( 99.79%) 12778789045 ( 99.91%) 729.49
tcp 14034573 ( 79.95%) 11605697302 ( 90.74%) 826.94
http(s) 7223492 ( 41.15%) 9787584129 ( 76.52%) 1354.97
http(c) 3956350 ( 22.54%) 318448759 ( 2.49%) 80.49
squid 484927 ( 2.76%) 356828021 ( 2.79%) 735.84
smtp 344481 ( 1.96%) 100707456 ( 0.79%) 292.35
ftp 70149 ( 0.40%) 46438254 ( 0.36%) 661.99
pop3 16102 ( 0.09%) 8346721 ( 0.07%) 518.37
imap 3920 ( 0.02%) 322017 ( 0.00%) 82.15
telnet 5471 ( 0.03%) 513234 ( 0.00%) 93.81
ssh 162764 ( 0.93%) 27790472 ( 0.22%) 170.74
dns 18235 ( 0.10%) 1954877 ( 0.02%) 107.20
bgp 146 ( 0.00%) 52297 ( 0.00%) 358.20
napster 30 ( 0.00%) 5145 ( 0.00%) 171.50
realaud 30 ( 0.00%) 4562 ( 0.00%) 152.07
rtsp 10375 ( 0.06%) 688850 ( 0.01%) 66.40
icecast 386 ( 0.00%) 27061 ( 0.00%) 70.11
hotline 6 ( 0.00%) 364 ( 0.00%) 60.67
other 1737674 ( 9.90%) 955982971 ( 7.47%) 550.15
udp 2611058 ( 14.87%) 1006672482 ( 7.87%) 385.54
dns 1150107 ( 6.55%) 251508741 ( 1.97%) 218.68
realaud 3078 ( 0.02%) 185843 ( 0.00%) 60.38
halflif 23 ( 0.00%) 2924 ( 0.00%) 127.13
starcra 17 ( 0.00%) 2720 ( 0.00%) 160.00
everque 1569 ( 0.01%) 510796 ( 0.00%) 325.56
unreal 12 ( 0.00%) 2127 ( 0.00%) 177.25
quake 19 ( 0.00%) 1764 ( 0.00%) 92.84
cuseeme 12 ( 0.00%) 6515 ( 0.00%) 542.92
other 1456050 ( 8.29%) 754308648 ( 5.90%) 518.05
icmp 784122 ( 4.47%) 106899574 ( 0.84%) 136.33
ipip 361 ( 0.00%) 46267 ( 0.00%) 128.16
ip6 58220 ( 0.33%) 50608021 ( 0.40%) 869.25
other 29176 ( 0.17%) 8865399 ( 0.07%) 303.86
frag 47765 ( 0.27%) 53265978 ( 0.42%) 1115.17
ip6 37558 ( 0.21%) 11923478 ( 0.09%) 317.47
tcp6 16907 ( 0.10%) 8728879 ( 0.07%) 516.29
http(s) 5087 ( 0.03%) 5274619 ( 0.04%) 1036.88
http(c) 4203 ( 0.02%) 913613 ( 0.01%) 217.37
smtp 481 ( 0.00%) 232739 ( 0.00%) 483.86
ftp 2222 ( 0.01%) 234712 ( 0.00%) 105.63
imap 212 ( 0.00%) 123321 ( 0.00%) 581.70
dns 43 ( 0.00%) 10440 ( 0.00%) 242.79
bgp 389 ( 0.00%) 35102 ( 0.00%) 90.24
other 4270 ( 0.02%) 1904333 ( 0.01%) 445.98
udp6 15352 ( 0.09%) 2526601 ( 0.02%) 164.58
dns 13703 ( 0.08%) 2094638 ( 0.02%) 152.86
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1646 ( 0.01%) 431178 ( 0.00%) 261.96
icmp6 5204 ( 0.03%) 603909 ( 0.00%) 116.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 65 ( 0.00%) 60009 ( 0.00%) 923.22
tcpdump file: 200904011945.dump.gz (429.31 MB)