Traffic Trace Info
DumpFile: 200904012315.dump
FileSize: 1361.05MB
Id: 200904012315
StartTime: Wed Apr 1 23:15:00 2009
EndTime: Wed Apr 1 23:30:01 2009
TotalTime: 900.55 seconds
TotalCapSize: 1061.31MB CapLen: 96 bytes
# of packets: 19562712 (13691.98MB)
AvgRate: 127.55Mbps stddev:14.37M
IP flow (unique src/dst pair) Information
# of flows: 1054793 (avg. 18.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.1% 2.6% 2.1% 1.7% 1.7% 1.5% 1.5% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 648408
Top 10 bandwidth usage (bytes/total in %):
11.5% 8.2% 8.2% 8.2% 7.3% 7.2% 5.5% 3.2% 3.2% 3.1%
# of IPv6 addresses: 1971
Top 10 bandwidth usage (bytes/total in %):
42.6% 42.6% 16.3% 16.3% 13.5% 9.6% 4.5% 4.4% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012315.pktlen.png)
detailed numbers
[ 32- 63]: 4126591
[ 64- 127]: 4473479
[ 128- 255]: 994708
[ 256- 511]: 396271
[ 512- 1023]: 335438
[ 1024- 2047]: 9236225
Protocol Breakdown
![[protocol breakdown chart]](200904012315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19562712 (100.00%) 14357082024 (100.00%) 733.90
ip 19412062 ( 99.23%) 14336513860 ( 99.86%) 738.54
tcp 14569355 ( 74.48%) 12829888691 ( 89.36%) 880.61
http(s) 7417250 ( 37.92%) 10239732676 ( 71.32%) 1380.53
http(c) 3681112 ( 18.82%) 505852652 ( 3.52%) 137.42
squid 557758 ( 2.85%) 390253770 ( 2.72%) 699.68
smtp 421133 ( 2.15%) 162328046 ( 1.13%) 385.46
ftp 128189 ( 0.66%) 131517449 ( 0.92%) 1025.97
pop3 16464 ( 0.08%) 9138626 ( 0.06%) 555.07
imap 3421 ( 0.02%) 361433 ( 0.00%) 105.65
telnet 14736 ( 0.08%) 4419049 ( 0.03%) 299.88
ssh 60866 ( 0.31%) 28683091 ( 0.20%) 471.25
dns 21781 ( 0.11%) 2310728 ( 0.02%) 106.09
bgp 138 ( 0.00%) 51332 ( 0.00%) 371.97
napster 14270 ( 0.07%) 21057698 ( 0.15%) 1475.66
realaud 23 ( 0.00%) 1564 ( 0.00%) 68.00
rtsp 1668 ( 0.01%) 196320 ( 0.00%) 117.70
icecast 410 ( 0.00%) 66637 ( 0.00%) 162.53
hotline 241 ( 0.00%) 14836 ( 0.00%) 61.56
other 2229684 ( 11.40%) 1333890124 ( 9.29%) 598.24
udp 3248028 ( 16.60%) 1319899733 ( 9.19%) 406.37
dns 1153226 ( 5.90%) 238507739 ( 1.66%) 206.82
realaud 2243 ( 0.01%) 138789 ( 0.00%) 61.88
halflif 77365 ( 0.40%) 20870005 ( 0.15%) 269.76
starcra 27 ( 0.00%) 4116 ( 0.00%) 152.44
everque 18147 ( 0.09%) 15054431 ( 0.10%) 829.58
unreal 25 ( 0.00%) 3240 ( 0.00%) 129.60
quake 21 ( 0.00%) 1840 ( 0.00%) 87.62
cuseeme 6 ( 0.00%) 1106 ( 0.00%) 184.33
other 1996751 ( 10.21%) 1045126814 ( 7.28%) 523.41
icmp 1448958 ( 7.41%) 151712193 ( 1.06%) 104.70
ipip 344 ( 0.00%) 43532 ( 0.00%) 126.55
ip6 24632 ( 0.13%) 6879215 ( 0.05%) 279.28
other 120745 ( 0.62%) 28090496 ( 0.20%) 232.64
frag 53585 ( 0.27%) 59190917 ( 0.41%) 1104.62
ip6 150650 ( 0.77%) 20568164 ( 0.14%) 136.53
tcp6 119300 ( 0.61%) 16249641 ( 0.11%) 136.21
http(s) 2921 ( 0.01%) 1976898 ( 0.01%) 676.79
http(c) 106750 ( 0.55%) 9769064 ( 0.07%) 91.51
smtp 1349 ( 0.01%) 528599 ( 0.00%) 391.85
ftp 2239 ( 0.01%) 233421 ( 0.00%) 104.25
bgp 393 ( 0.00%) 35175 ( 0.00%) 89.50
other 5648 ( 0.03%) 3706484 ( 0.03%) 656.25
udp6 15111 ( 0.08%) 2329611 ( 0.02%) 154.17
dns 13558 ( 0.07%) 2010264 ( 0.01%) 148.27
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1551 ( 0.01%) 319136 ( 0.00%) 205.76
icmp6 15790 ( 0.08%) 1586852 ( 0.01%) 100.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 419 ( 0.00%) 397980 ( 0.00%) 949.83
tcpdump file: 200904012315.dump.gz (460.19 MB)