Traffic Trace Info
DumpFile: 200904012230.dump
FileSize: 1321.89MB
Id: 200904012230
StartTime: Wed Apr 1 22:30:00 2009
EndTime: Wed Apr 1 22:45:00 2009
TotalTime: 900.19 seconds
TotalCapSize: 1036.28MB CapLen: 96 bytes
# of packets: 18705888 (11936.40MB)
AvgRate: 111.24Mbps stddev:11.04M
IP flow (unique src/dst pair) Information
# of flows: 893462 (avg. 20.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 3.4% 1.6% 1.5% 1.2% 1.2% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 579288
Top 10 bandwidth usage (bytes/total in %):
12.5% 9.4% 9.3% 9.3% 9.3% 7.1% 6.1% 4.6% 3.4% 2.3%
# of IPv6 addresses: 2348
Top 10 bandwidth usage (bytes/total in %):
33.5% 23.2% 14.0% 13.9% 12.7% 10.3% 8.8% 5.3% 4.5% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012230.pktlen.png)
detailed numbers
[ 32- 63]: 3378498
[ 64- 127]: 5379061
[ 128- 255]: 1279803
[ 256- 511]: 475989
[ 512- 1023]: 468857
[ 1024- 2047]: 7723680
Protocol Breakdown
![[protocol breakdown chart]](200904012230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18705888 (100.00%) 12516224912 (100.00%) 669.11
ip 18667200 ( 99.79%) 12507104166 ( 99.93%) 670.00
tcp 14508549 ( 77.56%) 11416281589 ( 91.21%) 786.87
http(s) 6735966 ( 36.01%) 9270085522 ( 74.06%) 1376.21
http(c) 2981420 ( 15.94%) 256165629 ( 2.05%) 85.92
squid 578987 ( 3.10%) 355191886 ( 2.84%) 613.47
smtp 373833 ( 2.00%) 94264703 ( 0.75%) 252.16
ftp 113519 ( 0.61%) 105931907 ( 0.85%) 933.16
pop3 25913 ( 0.14%) 22167657 ( 0.18%) 855.46
imap 5419 ( 0.03%) 2044009 ( 0.02%) 377.19
telnet 12644 ( 0.07%) 2770780 ( 0.02%) 219.14
ssh 1930862 ( 10.32%) 301001607 ( 2.40%) 155.89
dns 114678 ( 0.61%) 147942675 ( 1.18%) 1290.07
bgp 204 ( 0.00%) 98355 ( 0.00%) 482.13
napster 2497 ( 0.01%) 154157 ( 0.00%) 61.74
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 271 ( 0.00%) 40932 ( 0.00%) 151.04
icecast 376 ( 0.00%) 61680 ( 0.00%) 164.04
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 1631914 ( 8.72%) 858355963 ( 6.86%) 525.98
udp 2852668 ( 15.25%) 935848606 ( 7.48%) 328.06
dns 1285604 ( 6.87%) 257053380 ( 2.05%) 199.95
realaud 2726 ( 0.01%) 163879 ( 0.00%) 60.12
halflif 123694 ( 0.66%) 32071906 ( 0.26%) 259.28
starcra 27 ( 0.00%) 4227 ( 0.00%) 156.56
everque 94 ( 0.00%) 16439 ( 0.00%) 174.88
unreal 10 ( 0.00%) 1495 ( 0.00%) 149.50
quake 16 ( 0.00%) 1700 ( 0.00%) 106.25
cuseeme 6 ( 0.00%) 795 ( 0.00%) 132.50
other 1440320 ( 7.70%) 646387142 ( 5.16%) 448.78
icmp 1220732 ( 6.53%) 136258761 ( 1.09%) 111.62
ipip 318 ( 0.00%) 38620 ( 0.00%) 121.45
ip6 30096 ( 0.16%) 8757554 ( 0.07%) 290.99
other 54837 ( 0.29%) 9919036 ( 0.08%) 180.88
frag 49000 ( 0.26%) 54240418 ( 0.43%) 1106.95
ip6 38688 ( 0.21%) 9120746 ( 0.07%) 235.75
tcp6 15841 ( 0.08%) 5318665 ( 0.04%) 335.75
http(s) 3255 ( 0.02%) 2147157 ( 0.02%) 659.65
http(c) 5827 ( 0.03%) 1163578 ( 0.01%) 199.69
smtp 322 ( 0.00%) 112893 ( 0.00%) 350.60
ftp 2316 ( 0.01%) 238723 ( 0.00%) 103.08
dns 9 ( 0.00%) 1004 ( 0.00%) 111.56
bgp 380 ( 0.00%) 32923 ( 0.00%) 86.64
other 3732 ( 0.02%) 1622387 ( 0.01%) 434.72
udp6 17289 ( 0.09%) 2835428 ( 0.02%) 164.00
dns 14139 ( 0.08%) 2047557 ( 0.02%) 144.82
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3148 ( 0.02%) 787654 ( 0.01%) 250.21
icmp6 5173 ( 0.03%) 627946 ( 0.01%) 121.39
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 354 ( 0.00%) 334491 ( 0.00%) 944.89
tcpdump file: 200904012230.dump.gz (483.80 MB)