Traffic Trace Info
DumpFile: 200904012100.dump
FileSize: 1317.79MB
Id: 200904012100
StartTime: Wed Apr 1 21:00:01 2009
EndTime: Wed Apr 1 21:15:00 2009
TotalTime: 899.90 seconds
TotalCapSize: 1020.46MB CapLen: 96 bytes
# of packets: 19467481 (11726.32MB)
AvgRate: 109.31Mbps stddev:11.15M
IP flow (unique src/dst pair) Information
# of flows: 752394 (avg. 25.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.7% 1.6% 1.3% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 489492
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.7% 10.4% 9.6% 7.1% 4.6% 3.2% 3.1% 2.7% 2.7%
# of IPv6 addresses: 2302
Top 10 bandwidth usage (bytes/total in %):
25.2% 23.1% 17.5% 15.5% 11.6% 10.8% 7.8% 7.6% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012100.pktlen.png)
detailed numbers
[ 32- 63]: 5348563
[ 64- 127]: 4267616
[ 128- 255]: 1153383
[ 256- 511]: 367585
[ 512- 1023]: 363448
[ 1024- 2047]: 7966886
Protocol Breakdown
![[protocol breakdown chart]](200904012100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19467481 (100.00%) 12295937602 (100.00%) 631.61
ip 19425929 ( 99.79%) 12284996939 ( 99.91%) 632.40
tcp 13510591 ( 69.40%) 9726835861 ( 79.11%) 719.94
http(s) 5502304 ( 28.26%) 7439769892 ( 60.51%) 1352.12
http(c) 3359078 ( 17.25%) 600802072 ( 4.89%) 178.86
squid 450164 ( 2.31%) 300147928 ( 2.44%) 666.75
smtp 367151 ( 1.89%) 73640799 ( 0.60%) 200.57
ftp 94370 ( 0.48%) 75631332 ( 0.62%) 801.43
pop3 13727 ( 0.07%) 9641849 ( 0.08%) 702.40
imap 2850 ( 0.01%) 255626 ( 0.00%) 89.69
telnet 3950 ( 0.02%) 327924 ( 0.00%) 83.02
ssh 168241 ( 0.86%) 19703962 ( 0.16%) 117.12
dns 18444 ( 0.09%) 3218334 ( 0.03%) 174.49
bgp 140 ( 0.00%) 51306 ( 0.00%) 366.47
napster 294 ( 0.00%) 107716 ( 0.00%) 366.38
realaud 33 ( 0.00%) 4813 ( 0.00%) 145.85
rtsp 20476 ( 0.11%) 5297805 ( 0.04%) 258.73
icecast 410 ( 0.00%) 48126 ( 0.00%) 117.38
other 3508731 ( 18.02%) 1198172697 ( 9.74%) 341.48
udp 4575897 ( 23.51%) 2397964321 ( 19.50%) 524.04
dns 1232575 ( 6.33%) 253481381 ( 2.06%) 205.65
realaud 2805 ( 0.01%) 168877 ( 0.00%) 60.21
halflif 26 ( 0.00%) 2809 ( 0.00%) 108.04
starcra 16 ( 0.00%) 2113 ( 0.00%) 132.06
everque 105 ( 0.00%) 16558 ( 0.00%) 157.70
unreal 13 ( 0.00%) 1731 ( 0.00%) 133.15
quake 20 ( 0.00%) 1915 ( 0.00%) 95.75
cuseeme 7 ( 0.00%) 625 ( 0.00%) 89.29
other 3339505 ( 17.15%) 2143262029 ( 17.43%) 641.79
icmp 1236155 ( 6.35%) 138704577 ( 1.13%) 112.21
ipip 297 ( 0.00%) 35928 ( 0.00%) 120.97
ip6 29456 ( 0.15%) 6595338 ( 0.05%) 223.90
other 73533 ( 0.38%) 14860914 ( 0.12%) 202.10
frag 60065 ( 0.31%) 66086868 ( 0.54%) 1100.26
ip6 41552 ( 0.21%) 10940663 ( 0.09%) 263.30
tcp6 17522 ( 0.09%) 6772413 ( 0.06%) 386.51
http(s) 2881 ( 0.01%) 1912511 ( 0.02%) 663.84
http(c) 6014 ( 0.03%) 1208255 ( 0.01%) 200.91
smtp 1298 ( 0.01%) 554585 ( 0.00%) 427.26
ftp 2303 ( 0.01%) 237157 ( 0.00%) 102.98
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 391 ( 0.00%) 35442 ( 0.00%) 90.64
other 4633 ( 0.02%) 2824291 ( 0.02%) 609.60
udp6 18069 ( 0.09%) 2993368 ( 0.02%) 165.66
dns 15412 ( 0.08%) 2329705 ( 0.02%) 151.16
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2653 ( 0.01%) 663250 ( 0.01%) 250.00
icmp6 5464 ( 0.03%) 725953 ( 0.01%) 132.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 467 ( 0.00%) 444849 ( 0.00%) 952.57
tcpdump file: 200904012100.dump.gz (455.26 MB)