Traffic Trace Info
DumpFile: 200904012130.dump
FileSize: 1135.43MB
Id: 200904012130
StartTime: Wed Apr 1 21:30:00 2009
EndTime: Wed Apr 1 21:45:01 2009
TotalTime: 900.58 seconds
TotalCapSize: 885.32MB CapLen: 96 bytes
# of packets: 16374265 (10920.84MB)
AvgRate: 101.73Mbps stddev:10.63M
IP flow (unique src/dst pair) Information
# of flows: 875440 (avg. 18.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 4.2% 1.8% 1.7% 1.3% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 534084
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.4% 9.1% 8.9% 8.6% 6.2% 4.2% 4.2% 2.6% 2.5%
# of IPv6 addresses: 2382
Top 10 bandwidth usage (bytes/total in %):
28.7% 20.9% 13.1% 13.1% 13.1% 7.8% 7.8% 7.7% 7.7% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012130.pktlen.png)
detailed numbers
[ 32- 63]: 3485138
[ 64- 127]: 3928066
[ 128- 255]: 966495
[ 256- 511]: 398161
[ 512- 1023]: 418531
[ 1024- 2047]: 7177874
Protocol Breakdown
![[protocol breakdown chart]](200904012130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16374265 (100.00%) 11451335746 (100.00%) 699.35
ip 16336249 ( 99.77%) 11441660330 ( 99.92%) 700.38
tcp 12110371 ( 73.96%) 10364169481 ( 90.51%) 855.81
http(s) 6556166 ( 40.04%) 8925950137 ( 77.95%) 1361.46
http(c) 2894645 ( 17.68%) 258205376 ( 2.25%) 89.20
squid 390514 ( 2.38%) 252222232 ( 2.20%) 645.87
smtp 317895 ( 1.94%) 65995939 ( 0.58%) 207.60
ftp 73099 ( 0.45%) 59436623 ( 0.52%) 813.10
pop3 12259 ( 0.07%) 10389265 ( 0.09%) 847.48
imap 4192 ( 0.03%) 399607 ( 0.00%) 95.33
telnet 12769 ( 0.08%) 3175004 ( 0.03%) 248.65
ssh 25634 ( 0.16%) 13083078 ( 0.11%) 510.38
dns 20165 ( 0.12%) 4150625 ( 0.04%) 205.83
bgp 136 ( 0.00%) 41421 ( 0.00%) 304.57
napster 110 ( 0.00%) 12241 ( 0.00%) 111.28
realaud 15 ( 0.00%) 1092 ( 0.00%) 72.80
rtsp 9034 ( 0.06%) 602207 ( 0.01%) 66.66
icecast 457 ( 0.00%) 65812 ( 0.00%) 144.01
hotline 37 ( 0.00%) 3088 ( 0.00%) 83.46
other 1793093 ( 10.95%) 770424544 ( 6.73%) 429.66
udp 2849436 ( 17.40%) 911221331 ( 7.96%) 319.79
dns 1176428 ( 7.18%) 225047654 ( 1.97%) 191.30
realaud 2738 ( 0.02%) 165058 ( 0.00%) 60.28
halflif 194 ( 0.00%) 23492 ( 0.00%) 121.09
starcra 28 ( 0.00%) 4627 ( 0.00%) 165.25
everque 121 ( 0.00%) 19018 ( 0.00%) 157.17
unreal 12 ( 0.00%) 2208 ( 0.00%) 184.00
quake 14 ( 0.00%) 1917 ( 0.00%) 136.93
cuseeme 8 ( 0.00%) 972 ( 0.00%) 121.50
other 1669697 ( 10.20%) 685787924 ( 5.99%) 410.73
icmp 1272990 ( 7.77%) 143282032 ( 1.25%) 112.56
ipip 314 ( 0.00%) 38580 ( 0.00%) 122.87
ip6 29595 ( 0.18%) 5979174 ( 0.05%) 202.03
other 73543 ( 0.45%) 16969732 ( 0.15%) 230.75
frag 49589 ( 0.30%) 54836304 ( 0.48%) 1105.82
ip6 38016 ( 0.23%) 9675416 ( 0.08%) 254.51
tcp6 15009 ( 0.09%) 5706609 ( 0.05%) 380.21
http(s) 3471 ( 0.02%) 2767124 ( 0.02%) 797.21
http(c) 4793 ( 0.03%) 949731 ( 0.01%) 198.15
smtp 400 ( 0.00%) 172137 ( 0.00%) 430.34
ftp 2338 ( 0.01%) 241581 ( 0.00%) 103.33
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 558 ( 0.00%) 111.60
bgp 376 ( 0.00%) 32061 ( 0.00%) 85.27
other 3624 ( 0.02%) 1543245 ( 0.01%) 425.84
udp6 16730 ( 0.10%) 2811300 ( 0.02%) 168.04
dns 13567 ( 0.08%) 2019569 ( 0.02%) 148.86
starcra 1 ( 0.00%) 145 ( 0.00%) 145.00
other 3162 ( 0.02%) 791586 ( 0.01%) 250.34
icmp6 5797 ( 0.04%) 722509 ( 0.01%) 124.63
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 449 ( 0.00%) 430782 ( 0.00%) 959.43
tcpdump file: 200904012130.dump.gz (399.74 MB)