Traffic Trace Info
DumpFile: 200904020000.dump
FileSize: 1556.12MB
Id: 200904020000
StartTime: Thu Apr 2 00:00:01 2009
EndTime: Thu Apr 2 00:15:01 2009
TotalTime: 899.93 seconds
TotalCapSize: 1204.25MB CapLen: 96 bytes
# of packets: 23036873 (17147.69MB)
AvgRate: 159.83Mbps stddev:14.77M
IP flow (unique src/dst pair) Information
# of flows: 958894 (avg. 24.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.7% 4.3% 2.0% 1.6% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 557974
Top 10 bandwidth usage (bytes/total in %):
16.6% 13.8% 11.7% 6.2% 5.8% 5.8% 4.9% 4.8% 4.8% 4.4%
# of IPv6 addresses: 2568
Top 10 bandwidth usage (bytes/total in %):
43.0% 25.7% 20.8% 16.1% 14.1% 13.1% 9.1% 5.8% 4.8% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020000.pktlen.png)
detailed numbers
[ 32- 63]: 4773847
[ 64- 127]: 4300981
[ 128- 255]: 1241913
[ 256- 511]: 422647
[ 512- 1023]: 369863
[ 1024- 2047]: 11927622
Protocol Breakdown
![[protocol breakdown chart]](200904020000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23036873 (100.00%) 17980656570 (100.00%) 780.52
ip 22942892 ( 99.59%) 17958783069 ( 99.88%) 782.76
tcp 16513694 ( 71.68%) 13951029034 ( 77.59%) 844.82
http(s) 8588908 ( 37.28%) 11837884586 ( 65.84%) 1378.28
http(c) 4525793 ( 19.65%) 340565397 ( 1.89%) 75.25
squid 573923 ( 2.49%) 357597376 ( 1.99%) 623.08
smtp 439644 ( 1.91%) 163422963 ( 0.91%) 371.72
ftp 83011 ( 0.36%) 79598929 ( 0.44%) 958.90
pop3 14697 ( 0.06%) 7634093 ( 0.04%) 519.43
imap 6451 ( 0.03%) 4093858 ( 0.02%) 634.61
telnet 20436 ( 0.09%) 5154504 ( 0.03%) 252.23
ssh 186907 ( 0.81%) 43360285 ( 0.24%) 231.99
dns 22739 ( 0.10%) 7180515 ( 0.04%) 315.78
bgp 153 ( 0.00%) 64468 ( 0.00%) 421.36
napster 205 ( 0.00%) 16565 ( 0.00%) 80.80
realaud 26 ( 0.00%) 3006 ( 0.00%) 115.62
rtsp 243 ( 0.00%) 44873 ( 0.00%) 184.66
icecast 308 ( 0.00%) 37876 ( 0.00%) 122.97
hotline 96 ( 0.00%) 6536 ( 0.00%) 68.08
other 2050053 ( 8.90%) 1104357144 ( 6.14%) 538.70
udp 5659144 ( 24.57%) 3893938795 ( 21.66%) 688.08
dns 1196424 ( 5.19%) 247691064 ( 1.38%) 207.03
realaud 2036 ( 0.01%) 311710 ( 0.00%) 153.10
halflif 660 ( 0.00%) 59759 ( 0.00%) 90.54
starcra 33 ( 0.00%) 5648 ( 0.00%) 171.15
everque 36733 ( 0.16%) 26166801 ( 0.15%) 712.35
unreal 24 ( 0.00%) 8836 ( 0.00%) 368.17
quake 15 ( 0.00%) 1282 ( 0.00%) 85.47
cuseeme 3 ( 0.00%) 534 ( 0.00%) 178.00
other 4423023 ( 19.20%) 3619528453 ( 20.13%) 818.34
icmp 716574 ( 3.11%) 104587581 ( 0.58%) 145.96
ipip 310 ( 0.00%) 38588 ( 0.00%) 124.48
ip6 11284 ( 0.05%) 3234191 ( 0.02%) 286.62
other 41886 ( 0.18%) 5954880 ( 0.03%) 142.17
frag 53802 ( 0.23%) 60169209 ( 0.33%) 1118.35
ip6 93981 ( 0.41%) 21873501 ( 0.12%) 232.74
tcp6 69836 ( 0.30%) 17865965 ( 0.10%) 255.83
http(s) 3007 ( 0.01%) 1997384 ( 0.01%) 664.24
http(c) 50910 ( 0.22%) 4626117 ( 0.03%) 90.87
smtp 600 ( 0.00%) 251237 ( 0.00%) 418.73
ftp 2381 ( 0.01%) 249054 ( 0.00%) 104.60
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 3 ( 0.00%) 446 ( 0.00%) 148.67
bgp 383 ( 0.00%) 33701 ( 0.00%) 87.99
other 12550 ( 0.05%) 10707854 ( 0.06%) 853.22
udp6 17357 ( 0.08%) 3008208 ( 0.02%) 173.31
dns 14484 ( 0.06%) 2167275 ( 0.01%) 149.63
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2871 ( 0.01%) 840718 ( 0.00%) 292.83
icmp6 6542 ( 0.03%) 791386 ( 0.00%) 120.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 216 ( 0.00%) 203862 ( 0.00%) 943.81
tcpdump file: 200904020000.dump.gz (535.70 MB)