Traffic Trace Info
DumpFile: 200904012015.dump
FileSize: 1260.10MB
Id: 200904012015
StartTime: Wed Apr 1 20:15:01 2009
EndTime: Wed Apr 1 20:30:01 2009
TotalTime: 899.87 seconds
TotalCapSize: 983.63MB CapLen: 96 bytes
# of packets: 18096565 (12981.41MB)
AvgRate: 121.02Mbps stddev:12.53M
IP flow (unique src/dst pair) Information
# of flows: 711866 (avg. 25.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.8% 3.5% 2.7% 2.1% 1.6% 1.5% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 467547
Top 10 bandwidth usage (bytes/total in %):
13.0% 12.2% 10.5% 6.6% 5.6% 5.5% 3.8% 3.8% 3.6% 3.6%
# of IPv6 addresses: 1931
Top 10 bandwidth usage (bytes/total in %):
29.5% 20.4% 18.9% 16.9% 11.9% 11.6% 9.0% 7.1% 6.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012015.pktlen.png)
detailed numbers
[ 32- 63]: 3946424
[ 64- 127]: 3833351
[ 128- 255]: 879270
[ 256- 511]: 392145
[ 512- 1023]: 383583
[ 1024- 2047]: 8661792
Protocol Breakdown
![[protocol breakdown chart]](200904012015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18096565 (100.00%) 13611991341 (100.00%) 752.19
ip 18031701 ( 99.64%) 13601024970 ( 99.92%) 754.28
tcp 14533818 ( 80.31%) 12611535008 ( 92.65%) 867.74
http(s) 7164387 ( 39.59%) 9834314704 ( 72.25%) 1372.67
http(c) 4215090 ( 23.29%) 837059256 ( 6.15%) 198.59
squid 638322 ( 3.53%) 497521176 ( 3.66%) 779.42
smtp 367462 ( 2.03%) 133889345 ( 0.98%) 364.36
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 78886 ( 0.44%) 59015257 ( 0.43%) 748.11
pop3 8417 ( 0.05%) 4101983 ( 0.03%) 487.35
imap 2964 ( 0.02%) 479449 ( 0.00%) 161.76
telnet 2995 ( 0.02%) 241817 ( 0.00%) 80.74
ssh 37627 ( 0.21%) 36974057 ( 0.27%) 982.65
dns 27395 ( 0.15%) 14621070 ( 0.11%) 533.71
bgp 133 ( 0.00%) 47714 ( 0.00%) 358.75
napster 66 ( 0.00%) 7701 ( 0.00%) 116.68
realaud 12 ( 0.00%) 2062 ( 0.00%) 171.83
rtsp 5286 ( 0.03%) 348017 ( 0.00%) 65.84
icecast 374 ( 0.00%) 40136 ( 0.00%) 107.32
hotline 39 ( 0.00%) 28392 ( 0.00%) 728.00
other 1984326 ( 10.97%) 1192840652 ( 8.76%) 601.13
udp 2406477 ( 13.30%) 805531616 ( 5.92%) 334.73
dns 1131919 ( 6.25%) 238249513 ( 1.75%) 210.48
realaud 2734 ( 0.02%) 164571 ( 0.00%) 60.19
halflif 30 ( 0.00%) 2676 ( 0.00%) 89.20
starcra 26 ( 0.00%) 4809 ( 0.00%) 184.96
everque 94 ( 0.00%) 15221 ( 0.00%) 161.93
unreal 16 ( 0.00%) 2102 ( 0.00%) 131.38
quake 29 ( 0.00%) 3234 ( 0.00%) 111.52
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 1271149 ( 7.02%) 566544068 ( 4.16%) 445.69
icmp 943454 ( 5.21%) 118391268 ( 0.87%) 125.49
ipip 347 ( 0.00%) 42356 ( 0.00%) 122.06
ip6 52520 ( 0.29%) 46282601 ( 0.34%) 881.24
other 95085 ( 0.53%) 19242121 ( 0.14%) 202.37
frag 50675 ( 0.28%) 57195187 ( 0.42%) 1128.67
ip6 64864 ( 0.36%) 10966371 ( 0.08%) 169.07
tcp6 42813 ( 0.24%) 7425910 ( 0.05%) 173.45
http(s) 3219 ( 0.02%) 2240534 ( 0.02%) 696.03
http(c) 32624 ( 0.18%) 3234122 ( 0.02%) 99.13
smtp 289 ( 0.00%) 95005 ( 0.00%) 328.74
ftp 2292 ( 0.01%) 239844 ( 0.00%) 104.64
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
dns 11 ( 0.00%) 1127 ( 0.00%) 102.45
bgp 375 ( 0.00%) 32707 ( 0.00%) 87.22
other 4001 ( 0.02%) 1582346 ( 0.01%) 395.49
udp6 15969 ( 0.09%) 2520991 ( 0.02%) 157.87
dns 14384 ( 0.08%) 2168074 ( 0.02%) 150.73
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1582 ( 0.01%) 352595 ( 0.00%) 222.88
icmp6 5708 ( 0.03%) 688858 ( 0.01%) 120.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 344 ( 0.00%) 326532 ( 0.00%) 949.22
tcpdump file: 200904012015.dump.gz (435.99 MB)