Traffic Trace Info
DumpFile: 200904012300.dump
FileSize: 1320.36MB
Id: 200904012300
StartTime: Wed Apr 1 23:00:01 2009
EndTime: Wed Apr 1 23:15:00 2009
TotalTime: 899.21 seconds
TotalCapSize: 1029.46MB CapLen: 96 bytes
# of packets: 19052879 (13511.68MB)
AvgRate: 126.06Mbps stddev:11.43M
IP flow (unique src/dst pair) Information
# of flows: 990657 (avg. 19.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.0% 2.2% 1.9% 1.8% 1.4% 1.2% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 675891
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.1% 8.9% 8.3% 8.2% 5.0% 4.2% 3.3% 3.3% 3.1%
# of IPv6 addresses: 2238
Top 10 bandwidth usage (bytes/total in %):
42.4% 42.3% 30.9% 19.2% 15.5% 7.8% 5.3% 4.0% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012300.pktlen.png)
detailed numbers
[ 32- 63]: 3996876
[ 64- 127]: 4093788
[ 128- 255]: 1050980
[ 256- 511]: 434647
[ 512- 1023]: 326952
[ 1024- 2047]: 9149636
Protocol Breakdown
![[protocol breakdown chart]](200904012300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19052879 (100.00%) 14168023007 (100.00%) 743.62
ip 18856370 ( 98.97%) 14138407369 ( 99.79%) 749.79
tcp 14353081 ( 75.33%) 12585422829 ( 88.83%) 876.84
http(s) 7630843 ( 40.05%) 10490485917 ( 74.04%) 1374.75
http(c) 3539524 ( 18.58%) 368055813 ( 2.60%) 103.98
squid 571874 ( 3.00%) 417127468 ( 2.94%) 729.40
smtp 343511 ( 1.80%) 76058241 ( 0.54%) 221.41
ftp 122840 ( 0.64%) 121673626 ( 0.86%) 990.50
pop3 12304 ( 0.06%) 7570330 ( 0.05%) 615.27
imap 27220 ( 0.14%) 34618049 ( 0.24%) 1271.79
telnet 18747 ( 0.10%) 4972760 ( 0.04%) 265.26
ssh 104490 ( 0.55%) 16255394 ( 0.11%) 155.57
dns 19781 ( 0.10%) 3338654 ( 0.02%) 168.78
bgp 153 ( 0.00%) 55240 ( 0.00%) 361.05
napster 110 ( 0.00%) 10819 ( 0.00%) 98.35
realaud 30 ( 0.00%) 3316 ( 0.00%) 110.53
rtsp 314 ( 0.00%) 43854 ( 0.00%) 139.66
icecast 664 ( 0.00%) 115488 ( 0.00%) 173.93
hotline 5 ( 0.00%) 663 ( 0.00%) 132.60
other 1960587 ( 10.29%) 1045032157 ( 7.38%) 533.02
udp 3400314 ( 17.85%) 1391379939 ( 9.82%) 409.19
dns 1268062 ( 6.66%) 255544584 ( 1.80%) 201.52
realaud 2726 ( 0.01%) 164777 ( 0.00%) 60.45
halflif 62107 ( 0.33%) 19149502 ( 0.14%) 308.33
starcra 24 ( 0.00%) 3720 ( 0.00%) 155.00
everque 99 ( 0.00%) 15425 ( 0.00%) 155.81
unreal 9099 ( 0.05%) 8810985 ( 0.06%) 968.35
quake 22 ( 0.00%) 2342 ( 0.00%) 106.45
cuseeme 3 ( 0.00%) 256 ( 0.00%) 85.33
other 2058004 ( 10.80%) 1107543688 ( 7.82%) 538.16
icmp 1000330 ( 5.25%) 123606573 ( 0.87%) 123.57
ipip 309 ( 0.00%) 37738 ( 0.00%) 122.13
ip6 45296 ( 0.24%) 28137565 ( 0.20%) 621.19
other 57040 ( 0.30%) 9822725 ( 0.07%) 172.21
frag 51257 ( 0.27%) 57328494 ( 0.40%) 1118.45
ip6 196507 ( 1.03%) 29615518 ( 0.21%) 150.71
tcp6 172827 ( 0.91%) 25582003 ( 0.18%) 148.02
http(s) 2420 ( 0.01%) 1578207 ( 0.01%) 652.15
http(c) 158164 ( 0.83%) 14187696 ( 0.10%) 89.70
smtp 156 ( 0.00%) 66674 ( 0.00%) 427.40
ftp 2329 ( 0.01%) 241580 ( 0.00%) 103.73
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 380 ( 0.00%) 33151 ( 0.00%) 87.24
other 9372 ( 0.05%) 9474066 ( 0.07%) 1010.89
udp6 17007 ( 0.09%) 2748797 ( 0.02%) 161.63
dns 14437 ( 0.08%) 2092976 ( 0.01%) 144.97
other 2570 ( 0.01%) 655821 ( 0.00%) 255.18
icmp6 6143 ( 0.03%) 805883 ( 0.01%) 131.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 500 ( 0.00%) 474755 ( 0.00%) 949.51
tcpdump file: 200904012300.dump.gz (458.53 MB)