Traffic Trace Info
DumpFile: 200904012045.dump
FileSize: 1248.56MB
Id: 200904012045
StartTime: Wed Apr 1 20:45:00 2009
EndTime: Wed Apr 1 21:00:01 2009
TotalTime: 900.17 seconds
TotalCapSize: 971.86MB CapLen: 96 bytes
# of packets: 18116164 (12364.16MB)
AvgRate: 115.22Mbps stddev:20.12M
IP flow (unique src/dst pair) Information
# of flows: 761327 (avg. 23.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.7% 2.5% 2.4% 2.0% 2.0% 1.7% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 493176
Top 10 bandwidth usage (bytes/total in %):
13.1% 12.4% 9.0% 7.9% 6.9% 4.3% 3.2% 2.8% 2.7% 2.5%
# of IPv6 addresses: 2258
Top 10 bandwidth usage (bytes/total in %):
21.4% 20.4% 14.8% 10.3% 10.1% 8.1% 7.5% 7.5% 6.6% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012045.pktlen.png)
detailed numbers
[ 32- 63]: 4210442
[ 64- 127]: 3799053
[ 128- 255]: 1059024
[ 256- 511]: 376946
[ 512- 1023]: 430958
[ 1024- 2047]: 8239741
Protocol Breakdown
![[protocol breakdown chart]](200904012045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18116164 (100.00%) 12964763199 (100.00%) 715.65
ip 18056990 ( 99.67%) 12952284596 ( 99.90%) 717.30
tcp 14134448 ( 78.02%) 11607688713 ( 89.53%) 821.23
http(s) 6432700 ( 35.51%) 8753578197 ( 67.52%) 1360.79
http(c) 3616073 ( 19.96%) 551654470 ( 4.26%) 152.56
squid 504419 ( 2.78%) 347074498 ( 2.68%) 688.07
smtp 402132 ( 2.22%) 83765815 ( 0.65%) 208.30
ftp 89042 ( 0.49%) 75736132 ( 0.58%) 850.57
pop3 11866 ( 0.07%) 8060559 ( 0.06%) 679.30
imap 2763 ( 0.02%) 266770 ( 0.00%) 96.55
telnet 3637 ( 0.02%) 309534 ( 0.00%) 85.11
ssh 423815 ( 2.34%) 51145491 ( 0.39%) 120.68
dns 18690 ( 0.10%) 3252037 ( 0.03%) 174.00
bgp 145 ( 0.00%) 59782 ( 0.00%) 412.29
napster 55 ( 0.00%) 6919 ( 0.00%) 125.80
realaud 23 ( 0.00%) 2862 ( 0.00%) 124.43
rtsp 13250 ( 0.07%) 852585 ( 0.01%) 64.35
icecast 387 ( 0.00%) 45319 ( 0.00%) 117.10
hotline 13 ( 0.00%) 940 ( 0.00%) 72.31
other 2615291 ( 14.44%) 1731867983 ( 13.36%) 662.21
udp 3082948 ( 17.02%) 1198542560 ( 9.24%) 388.77
dns 1267900 ( 7.00%) 264259150 ( 2.04%) 208.42
realaud 3095 ( 0.02%) 189958 ( 0.00%) 61.38
halflif 26 ( 0.00%) 2324 ( 0.00%) 89.38
starcra 27 ( 0.00%) 4967 ( 0.00%) 183.96
everque 86 ( 0.00%) 14571 ( 0.00%) 169.43
unreal 17 ( 0.00%) 1804 ( 0.00%) 106.12
quake 17 ( 0.00%) 1509 ( 0.00%) 88.76
cuseeme 5 ( 0.00%) 688 ( 0.00%) 137.60
other 1810169 ( 9.99%) 932095646 ( 7.19%) 514.92
icmp 716655 ( 3.96%) 103338295 ( 0.80%) 144.20
ipip 349 ( 0.00%) 43738 ( 0.00%) 125.32
ip6 42744 ( 0.24%) 26583476 ( 0.21%) 621.92
other 79846 ( 0.44%) 16087814 ( 0.12%) 201.49
frag 62878 ( 0.35%) 70130272 ( 0.54%) 1115.34
ip6 59174 ( 0.33%) 12478603 ( 0.10%) 210.88
tcp6 37689 ( 0.21%) 8742175 ( 0.07%) 231.96
http(s) 3329 ( 0.02%) 2564336 ( 0.02%) 770.30
http(c) 18427 ( 0.10%) 2235144 ( 0.02%) 121.30
smtp 261 ( 0.00%) 106067 ( 0.00%) 406.39
ftp 2343 ( 0.01%) 242110 ( 0.00%) 103.33
ssh 8112 ( 0.04%) 718100 ( 0.01%) 88.52
dns 21 ( 0.00%) 2387 ( 0.00%) 113.67
bgp 378 ( 0.00%) 33192 ( 0.00%) 87.81
other 4818 ( 0.03%) 2840839 ( 0.02%) 589.63
udp6 16186 ( 0.09%) 2774018 ( 0.02%) 171.38
dns 14049 ( 0.08%) 2145916 ( 0.02%) 152.75
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
other 2136 ( 0.01%) 627536 ( 0.00%) 293.79
icmp6 4860 ( 0.03%) 567962 ( 0.00%) 116.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 409 ( 0.00%) 390368 ( 0.00%) 954.44
tcpdump file: 200904012045.dump.gz (444.25 MB)