Traffic Trace Info
DumpFile: 200904012330.dump
FileSize: 1357.18MB
Id: 200904012330
StartTime: Wed Apr 1 23:30:01 2009
EndTime: Wed Apr 1 23:45:00 2009
TotalTime: 899.51 seconds
TotalCapSize: 1056.06MB CapLen: 96 bytes
# of packets: 19623753 (14605.85MB)
AvgRate: 136.22Mbps stddev:13.78M
IP flow (unique src/dst pair) Information
# of flows: 890641 (avg. 22.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 5.3% 4.9% 2.0% 1.4% 1.4% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 570579
Top 10 bandwidth usage (bytes/total in %):
16.6% 15.3% 7.8% 7.7% 7.2% 6.4% 5.3% 5.3% 4.2% 2.9%
# of IPv6 addresses: 2451
Top 10 bandwidth usage (bytes/total in %):
23.3% 16.1% 11.0% 10.8% 10.8% 10.4% 10.2% 7.3% 7.1% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904012330.pktlen.png)
detailed numbers
[ 32- 63]: 3962153
[ 64- 127]: 3814630
[ 128- 255]: 1131324
[ 256- 511]: 418251
[ 512- 1023]: 386869
[ 1024- 2047]: 9910526
Protocol Breakdown
![[protocol breakdown chart]](200904012330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19623753 (100.00%) 15315341140 (100.00%) 780.45
ip 19557877 ( 99.66%) 15303198644 ( 99.92%) 782.46
tcp 15268612 ( 77.81%) 13561247719 ( 88.55%) 888.18
http(s) 7677548 ( 39.12%) 10489318985 ( 68.49%) 1366.23
http(c) 3996033 ( 20.36%) 527491736 ( 3.44%) 132.00
squid 455494 ( 2.32%) 302775733 ( 1.98%) 664.72
smtp 435576 ( 2.22%) 160479831 ( 1.05%) 368.43
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 137020 ( 0.70%) 143809366 ( 0.94%) 1049.55
pop3 9820 ( 0.05%) 5395404 ( 0.04%) 549.43
imap 4212 ( 0.02%) 476282 ( 0.00%) 113.08
telnet 12789 ( 0.07%) 4333241 ( 0.03%) 338.83
ssh 83737 ( 0.43%) 14216186 ( 0.09%) 169.77
dns 22277 ( 0.11%) 5562208 ( 0.04%) 249.68
bgp 154 ( 0.00%) 50803 ( 0.00%) 329.89
napster 53 ( 0.00%) 6328 ( 0.00%) 119.40
realaud 25 ( 0.00%) 2927 ( 0.00%) 117.08
rtsp 221 ( 0.00%) 35134 ( 0.00%) 158.98
icecast 412 ( 0.00%) 49738 ( 0.00%) 120.72
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 2433168 ( 12.40%) 1907238210 ( 12.45%) 783.85
udp 3399718 ( 17.32%) 1602533298 ( 10.46%) 471.37
dns 1223221 ( 6.23%) 250086685 ( 1.63%) 204.45
realaud 1831 ( 0.01%) 111549 ( 0.00%) 60.92
halflif 62295 ( 0.32%) 17205047 ( 0.11%) 276.19
starcra 25 ( 0.00%) 3790 ( 0.00%) 151.60
everque 39126 ( 0.20%) 30768114 ( 0.20%) 786.39
unreal 49 ( 0.00%) 3679 ( 0.00%) 75.08
quake 21 ( 0.00%) 1959 ( 0.00%) 93.29
cuseeme 8 ( 0.00%) 1386 ( 0.00%) 173.25
other 2072958 ( 10.56%) 1304181275 ( 8.52%) 629.14
icmp 757990 ( 3.86%) 104199224 ( 0.68%) 137.47
ipip 307 ( 0.00%) 37508 ( 0.00%) 122.18
ip6 17871 ( 0.09%) 10444514 ( 0.07%) 584.44
other 113379 ( 0.58%) 24736381 ( 0.16%) 218.17
frag 50428 ( 0.26%) 56462675 ( 0.37%) 1119.67
ip6 65876 ( 0.34%) 12142496 ( 0.08%) 184.32
tcp6 27803 ( 0.14%) 6813625 ( 0.04%) 245.07
http(s) 3360 ( 0.02%) 2427265 ( 0.02%) 722.40
http(c) 15392 ( 0.08%) 1843150 ( 0.01%) 119.75
smtp 1040 ( 0.01%) 511154 ( 0.00%) 491.49
ftp 2237 ( 0.01%) 232904 ( 0.00%) 104.11
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 384 ( 0.00%) 33670 ( 0.00%) 87.68
other 5388 ( 0.03%) 1765310 ( 0.01%) 327.64
udp6 17012 ( 0.09%) 2850057 ( 0.02%) 167.53
dns 14270 ( 0.07%) 2059558 ( 0.01%) 144.33
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 230 ( 0.00%) 115.00
other 2739 ( 0.01%) 790163 ( 0.01%) 288.49
icmp6 20589 ( 0.10%) 2051868 ( 0.01%) 99.66
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 441 ( 0.00%) 422730 ( 0.00%) 958.57
tcpdump file: 200904012330.dump.gz (471.31 MB)