Traffic Trace Info
DumpFile: 200904012245.dump
FileSize: 1388.72MB
Id: 200904012245
StartTime: Wed Apr 1 22:45:00 2009
EndTime: Wed Apr 1 23:00:01 2009
TotalTime: 900.45 seconds
TotalCapSize: 1085.53MB CapLen: 96 bytes
# of packets: 19858372 (13296.65MB)
AvgRate: 123.87Mbps stddev:11.23M
IP flow (unique src/dst pair) Information
# of flows: 912800 (avg. 21.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 3.2% 2.1% 1.8% 1.7% 1.7% 1.6% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 584981
Top 10 bandwidth usage (bytes/total in %):
12.9% 10.5% 9.4% 8.6% 8.5% 6.2% 5.2% 4.1% 4.1% 3.2%
# of IPv6 addresses: 2085
Top 10 bandwidth usage (bytes/total in %):
32.9% 22.6% 14.5% 14.5% 10.3% 9.4% 9.1% 4.9% 4.8% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012245.pktlen.png)
detailed numbers
[ 32- 63]: 3799993
[ 64- 127]: 5008511
[ 128- 255]: 1332073
[ 256- 511]: 426975
[ 512- 1023]: 457230
[ 1024- 2047]: 8833590
Protocol Breakdown
![[protocol breakdown chart]](200904012245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19858372 (100.00%) 13942551269 (100.00%) 702.10
ip 19821259 ( 99.81%) 13933803679 ( 99.94%) 702.97
tcp 15368604 ( 77.39%) 12407379743 ( 88.99%) 807.32
http(s) 7310471 ( 36.81%) 10065209856 ( 72.19%) 1376.82
http(c) 3448765 ( 17.37%) 305960392 ( 2.19%) 88.72
squid 560423 ( 2.82%) 421238418 ( 3.02%) 751.64
smtp 449929 ( 2.27%) 104761202 ( 0.75%) 232.84
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 115666 ( 0.58%) 112446569 ( 0.81%) 972.17
pop3 11299 ( 0.06%) 7452533 ( 0.05%) 659.57
imap 4400 ( 0.02%) 579596 ( 0.00%) 131.73
telnet 12330 ( 0.06%) 2557066 ( 0.02%) 207.39
ssh 1606562 ( 8.09%) 253434853 ( 1.82%) 157.75
dns 122447 ( 0.62%) 160241755 ( 1.15%) 1308.66
bgp 156 ( 0.00%) 58357 ( 0.00%) 374.08
napster 398 ( 0.00%) 263294 ( 0.00%) 661.54
realaud 25 ( 0.00%) 2986 ( 0.00%) 119.44
rtsp 49253 ( 0.25%) 68858889 ( 0.49%) 1398.06
icecast 355 ( 0.00%) 57675 ( 0.00%) 162.46
other 1676023 ( 8.44%) 904250182 ( 6.49%) 539.52
udp 3331610 ( 16.78%) 1381019239 ( 9.91%) 414.52
dns 1292109 ( 6.51%) 257000162 ( 1.84%) 198.90
realaud 2728 ( 0.01%) 164787 ( 0.00%) 60.41
halflif 69974 ( 0.35%) 19466615 ( 0.14%) 278.20
starcra 23 ( 0.00%) 3458 ( 0.00%) 150.35
everque 52 ( 0.00%) 10466 ( 0.00%) 201.27
unreal 6226 ( 0.03%) 6257205 ( 0.04%) 1005.01
quake 16 ( 0.00%) 1244 ( 0.00%) 77.75
cuseeme 4 ( 0.00%) 480 ( 0.00%) 120.00
other 1960310 ( 9.87%) 1097968649 ( 7.87%) 560.10
icmp 1033976 ( 5.21%) 127025604 ( 0.91%) 122.85
ipip 342 ( 0.00%) 42956 ( 0.00%) 125.60
ip6 29752 ( 0.15%) 9002091 ( 0.06%) 302.57
other 56975 ( 0.29%) 9334046 ( 0.07%) 163.83
frag 50875 ( 0.26%) 56206426 ( 0.40%) 1104.79
ip6 37113 ( 0.19%) 8747590 ( 0.06%) 235.70
tcp6 15422 ( 0.08%) 5202316 ( 0.04%) 337.33
http(s) 3164 ( 0.02%) 2149043 ( 0.02%) 679.22
http(c) 5288 ( 0.03%) 1084681 ( 0.01%) 205.12
smtp 231 ( 0.00%) 94937 ( 0.00%) 410.98
ftp 2291 ( 0.01%) 237091 ( 0.00%) 103.49
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 383 ( 0.00%) 33170 ( 0.00%) 86.61
other 4063 ( 0.02%) 1603222 ( 0.01%) 394.59
udp6 15454 ( 0.08%) 2450956 ( 0.02%) 158.60
dns 13738 ( 0.07%) 2021263 ( 0.01%) 147.13
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1714 ( 0.01%) 429009 ( 0.00%) 250.30
icmp6 5796 ( 0.03%) 698866 ( 0.01%) 120.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 411 ( 0.00%) 391372 ( 0.00%) 952.24
tcpdump file: 200904012245.dump.gz (500.36 MB)