Traffic Trace Info
DumpFile: 200904012145.dump
FileSize: 1143.98MB
Id: 200904012145
StartTime: Wed Apr 1 21:45:01 2009
EndTime: Wed Apr 1 22:00:00 2009
TotalTime: 899.58 seconds
TotalCapSize: 890.78MB CapLen: 96 bytes
# of packets: 16576991 (11594.69MB)
AvgRate: 108.10Mbps stddev:12.82M
IP flow (unique src/dst pair) Information
# of flows: 862119 (avg. 19.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 2.2% 2.2% 2.1% 1.6% 1.5% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 546456
Top 10 bandwidth usage (bytes/total in %):
14.5% 14.1% 11.0% 9.6% 8.3% 4.7% 3.6% 2.4% 2.3% 2.3%
# of IPv6 addresses: 2131
Top 10 bandwidth usage (bytes/total in %):
32.6% 22.9% 13.7% 13.7% 9.7% 9.5% 8.1% 4.7% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012145.pktlen.png)
detailed numbers
[ 32- 63]: 3643393
[ 64- 127]: 3371064
[ 128- 255]: 1042778
[ 256- 511]: 437257
[ 512- 1023]: 408066
[ 1024- 2047]: 7674433
Protocol Breakdown
![[protocol breakdown chart]](200904012145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16576991 (100.00%) 12157918856 (100.00%) 733.42
ip 16539415 ( 99.77%) 12148702996 ( 99.92%) 734.53
tcp 12898395 ( 77.81%) 11096190336 ( 91.27%) 860.28
http(s) 6941795 ( 41.88%) 9501964680 ( 78.15%) 1368.81
http(c) 3118648 ( 18.81%) 257837169 ( 2.12%) 82.68
squid 399590 ( 2.41%) 269320595 ( 2.22%) 673.99
smtp 334889 ( 2.02%) 89026416 ( 0.73%) 265.84
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 66835 ( 0.40%) 51194817 ( 0.42%) 765.99
pop3 12158 ( 0.07%) 8618005 ( 0.07%) 708.83
imap 4093 ( 0.02%) 792468 ( 0.01%) 193.62
telnet 11898 ( 0.07%) 3120555 ( 0.03%) 262.28
ssh 28250 ( 0.17%) 12608423 ( 0.10%) 446.32
dns 20034 ( 0.12%) 3460180 ( 0.03%) 172.72
bgp 150 ( 0.00%) 56634 ( 0.00%) 377.56
napster 163 ( 0.00%) 15811 ( 0.00%) 97.00
realaud 42 ( 0.00%) 4828 ( 0.00%) 114.95
rtsp 2637 ( 0.02%) 192339 ( 0.00%) 72.94
icecast 367 ( 0.00%) 49002 ( 0.00%) 133.52
other 1956750 ( 11.80%) 897914134 ( 7.39%) 458.88
udp 2762139 ( 16.66%) 924389204 ( 7.60%) 334.66
dns 1256270 ( 7.58%) 249362706 ( 2.05%) 198.49
realaud 2741 ( 0.02%) 164776 ( 0.00%) 60.12
halflif 578 ( 0.00%) 37358 ( 0.00%) 64.63
starcra 24 ( 0.00%) 4300 ( 0.00%) 179.17
everque 44 ( 0.00%) 8919 ( 0.00%) 202.70
unreal 7 ( 0.00%) 574 ( 0.00%) 82.00
quake 15 ( 0.00%) 1547 ( 0.00%) 103.13
cuseeme 3 ( 0.00%) 239 ( 0.00%) 79.67
other 1502304 ( 9.06%) 674686820 ( 5.55%) 449.10
icmp 733966 ( 4.43%) 105004515 ( 0.86%) 143.06
ipip 335 ( 0.00%) 41379 ( 0.00%) 123.52
ip6 28295 ( 0.17%) 4572008 ( 0.04%) 161.58
other 116285 ( 0.70%) 18505554 ( 0.15%) 159.14
frag 50146 ( 0.30%) 56176298 ( 0.46%) 1120.25
ip6 37576 ( 0.23%) 9215860 ( 0.08%) 245.26
tcp6 16411 ( 0.10%) 5716778 ( 0.05%) 348.35
http(s) 3443 ( 0.02%) 2375229 ( 0.02%) 689.87
http(c) 5336 ( 0.03%) 1089545 ( 0.01%) 204.19
smtp 1041 ( 0.01%) 392455 ( 0.00%) 377.00
ftp 2358 ( 0.01%) 244731 ( 0.00%) 103.79
ssh 2 ( 0.00%) 236 ( 0.00%) 118.00
bgp 370 ( 0.00%) 31681 ( 0.00%) 85.62
other 3861 ( 0.02%) 1582901 ( 0.01%) 409.97
udp6 15122 ( 0.09%) 2489706 ( 0.02%) 164.64
dns 13204 ( 0.08%) 1954859 ( 0.02%) 148.05
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1916 ( 0.01%) 534180 ( 0.00%) 278.80
icmp6 5653 ( 0.03%) 661261 ( 0.01%) 116.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 360 ( 0.00%) 344035 ( 0.00%) 955.65
tcpdump file: 200904012145.dump.gz (408.06 MB)