Traffic Trace Info
DumpFile: 200904012215.dump
FileSize: 1253.17MB
Id: 200904012215
StartTime: Wed Apr 1 22:15:01 2009
EndTime: Wed Apr 1 22:30:00 2009
TotalTime: 899.75 seconds
TotalCapSize: 981.63MB CapLen: 96 bytes
# of packets: 17782236 (11241.12MB)
AvgRate: 104.81Mbps stddev:9.70M
IP flow (unique src/dst pair) Information
# of flows: 859371 (avg. 20.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 3.1% 1.9% 1.8% 1.6% 1.1% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 569752
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.4% 9.8% 9.4% 8.6% 5.9% 3.9% 3.1% 2.8% 2.3%
# of IPv6 addresses: 1891
Top 10 bandwidth usage (bytes/total in %):
30.5% 21.2% 14.4% 14.4% 9.3% 9.0% 7.9% 6.5% 6.5% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012215.pktlen.png)
detailed numbers
[ 32- 63]: 3492856
[ 64- 127]: 4917957
[ 128- 255]: 1230542
[ 256- 511]: 423916
[ 512- 1023]: 444181
[ 1024- 2047]: 7272784
Protocol Breakdown
![[protocol breakdown chart]](200904012215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17782236 (100.00%) 11787166728 (100.00%) 662.86
ip 17738910 ( 99.76%) 11778377105 ( 99.93%) 663.99
tcp 14213044 ( 79.93%) 10903386778 ( 92.50%) 767.14
http(s) 6299572 ( 35.43%) 8606943981 ( 73.02%) 1366.27
http(c) 3028758 ( 17.03%) 328218036 ( 2.78%) 108.37
squid 600978 ( 3.38%) 431523310 ( 3.66%) 718.04
smtp 373743 ( 2.10%) 90120690 ( 0.76%) 241.13
ftp 107305 ( 0.60%) 93011499 ( 0.79%) 866.80
pop3 7809 ( 0.04%) 3569742 ( 0.03%) 457.13
imap 3317 ( 0.02%) 810564 ( 0.01%) 244.37
telnet 12387 ( 0.07%) 2684464 ( 0.02%) 216.72
ssh 1854433 ( 10.43%) 290853935 ( 2.47%) 156.84
dns 19734 ( 0.11%) 1983376 ( 0.02%) 100.51
bgp 186 ( 0.00%) 87056 ( 0.00%) 468.04
napster 87 ( 0.00%) 12051 ( 0.00%) 138.52
realaud 24 ( 0.00%) 2779 ( 0.00%) 115.79
rtsp 280 ( 0.00%) 42905 ( 0.00%) 153.23
icecast 503 ( 0.00%) 70624 ( 0.00%) 140.41
hotline 115 ( 0.00%) 7248 ( 0.00%) 63.03
other 1903706 ( 10.71%) 1053438098 ( 8.94%) 553.36
udp 2540506 ( 14.29%) 741408139 ( 6.29%) 291.83
dns 1206222 ( 6.78%) 243868661 ( 2.07%) 202.18
realaud 2729 ( 0.02%) 164712 ( 0.00%) 60.36
halflif 84238 ( 0.47%) 19710566 ( 0.17%) 233.99
starcra 21 ( 0.00%) 3759 ( 0.00%) 179.00
everque 74 ( 0.00%) 13302 ( 0.00%) 179.76
unreal 8 ( 0.00%) 697 ( 0.00%) 87.12
quake 11 ( 0.00%) 992 ( 0.00%) 90.18
cuseeme 7 ( 0.00%) 619 ( 0.00%) 88.43
other 1246994 ( 7.01%) 477460502 ( 4.05%) 382.89
icmp 843377 ( 4.74%) 111264501 ( 0.94%) 131.93
ipip 347 ( 0.00%) 42852 ( 0.00%) 123.49
ip6 28611 ( 0.16%) 5960585 ( 0.05%) 208.33
other 113025 ( 0.64%) 16314250 ( 0.14%) 144.34
frag 51856 ( 0.29%) 57101715 ( 0.48%) 1101.16
ip6 43326 ( 0.24%) 8789623 ( 0.07%) 202.87
tcp6 21761 ( 0.12%) 5349523 ( 0.05%) 245.83
http(s) 2781 ( 0.02%) 1865991 ( 0.02%) 670.98
http(c) 12246 ( 0.07%) 1562716 ( 0.01%) 127.61
smtp 211 ( 0.00%) 74183 ( 0.00%) 351.58
ftp 2331 ( 0.01%) 240506 ( 0.00%) 103.18
imap 6 ( 0.00%) 755 ( 0.00%) 125.83
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 357 ( 0.00%) 29446 ( 0.00%) 82.48
other 3825 ( 0.02%) 1575468 ( 0.01%) 411.89
udp6 15862 ( 0.09%) 2450869 ( 0.02%) 154.51
dns 14231 ( 0.08%) 2119396 ( 0.02%) 148.93
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1630 ( 0.01%) 331367 ( 0.00%) 203.29
icmp6 5287 ( 0.03%) 618924 ( 0.01%) 117.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 386 ( 0.00%) 366227 ( 0.00%) 948.77
tcpdump file: 200904012215.dump.gz (462.55 MB)