Traffic Trace Info
DumpFile: 200904020015.dump
FileSize: 1509.33MB
Id: 200904020015
StartTime: Thu Apr 2 00:15:01 2009
EndTime: Thu Apr 2 00:30:01 2009
TotalTime: 900.10 seconds
TotalCapSize: 1170.98MB CapLen: 96 bytes
# of packets: 22169460 (16285.95MB)
AvgRate: 151.77Mbps stddev:11.14M
IP flow (unique src/dst pair) Information
# of flows: 921315 (avg. 24.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 5.8% 4.5% 4.0% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 617192
Top 10 bandwidth usage (bytes/total in %):
23.0% 14.5% 7.7% 6.7% 6.0% 6.0% 5.1% 4.5% 4.5% 4.4%
# of IPv6 addresses: 2113
Top 10 bandwidth usage (bytes/total in %):
37.8% 22.2% 18.8% 14.6% 13.0% 9.7% 9.5% 7.2% 5.9% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020015.pktlen.png)
detailed numbers
[ 32- 63]: 4710617
[ 64- 127]: 4525719
[ 128- 255]: 1074806
[ 256- 511]: 402472
[ 512- 1023]: 318005
[ 1024- 2047]: 11137841
Protocol Breakdown
![[protocol breakdown chart]](200904020015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22169460 (100.00%) 17077060413 (100.00%) 770.30
ip 22065680 ( 99.53%) 17063481398 ( 99.92%) 773.30
tcp 16448499 ( 74.19%) 14140160848 ( 82.80%) 859.66
http(s) 8552087 ( 38.58%) 11830662357 ( 69.28%) 1383.37
http(c) 4084780 ( 18.43%) 305394509 ( 1.79%) 74.76
squid 583494 ( 2.63%) 355862392 ( 2.08%) 609.88
smtp 447917 ( 2.02%) 106628362 ( 0.62%) 238.05
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 79274 ( 0.36%) 74832138 ( 0.44%) 943.97
pop3 11872 ( 0.05%) 7314924 ( 0.04%) 616.15
imap 10426 ( 0.05%) 10234091 ( 0.06%) 981.59
telnet 32720 ( 0.15%) 12870175 ( 0.08%) 393.34
ssh 81023 ( 0.37%) 22010930 ( 0.13%) 271.66
dns 19599 ( 0.09%) 2158770 ( 0.01%) 110.15
bgp 129 ( 0.00%) 39539 ( 0.00%) 306.50
napster 213 ( 0.00%) 16568 ( 0.00%) 77.78
realaud 16 ( 0.00%) 1400 ( 0.00%) 87.50
rtsp 258 ( 0.00%) 66175 ( 0.00%) 256.49
icecast 298 ( 0.00%) 37034 ( 0.00%) 124.28
hotline 85 ( 0.00%) 5254 ( 0.00%) 61.81
other 2544181 ( 11.48%) 1412018610 ( 8.27%) 555.00
udp 4537948 ( 20.47%) 2788017462 ( 16.33%) 614.38
dns 1206826 ( 5.44%) 239415786 ( 1.40%) 198.38
realaud 1867 ( 0.01%) 113318 ( 0.00%) 60.70
halflif 541 ( 0.00%) 64547 ( 0.00%) 119.31
starcra 35 ( 0.00%) 4812 ( 0.00%) 137.49
everque 38513 ( 0.17%) 31212658 ( 0.18%) 810.44
unreal 7274 ( 0.03%) 6897059 ( 0.04%) 948.18
quake 20 ( 0.00%) 1649 ( 0.00%) 82.45
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 3282660 ( 14.81%) 2510123135 ( 14.70%) 764.66
icmp 1051976 ( 4.75%) 126981416 ( 0.74%) 120.71
ipip 338 ( 0.00%) 41832 ( 0.00%) 123.76
ip6 14944 ( 0.07%) 6342550 ( 0.04%) 424.42
other 11975 ( 0.05%) 1937290 ( 0.01%) 161.78
frag 51033 ( 0.23%) 57258554 ( 0.34%) 1121.99
ip6 103780 ( 0.47%) 13579015 ( 0.08%) 130.84
tcp6 82307 ( 0.37%) 10040676 ( 0.06%) 121.99
http(s) 2673 ( 0.01%) 1761722 ( 0.01%) 659.08
http(c) 72369 ( 0.33%) 6203528 ( 0.04%) 85.72
smtp 637 ( 0.00%) 261296 ( 0.00%) 410.20
ftp 2351 ( 0.01%) 244196 ( 0.00%) 103.87
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 362 ( 0.00%) 30214 ( 0.00%) 83.46
other 3913 ( 0.02%) 1539495 ( 0.01%) 393.43
udp6 15137 ( 0.07%) 2491056 ( 0.01%) 164.57
dns 12301 ( 0.06%) 1805521 ( 0.01%) 146.78
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2835 ( 0.01%) 685432 ( 0.00%) 241.77
icmp6 6057 ( 0.03%) 804589 ( 0.00%) 132.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 249 ( 0.00%) 238614 ( 0.00%) 958.29
tcpdump file: 200904020015.dump.gz (513.12 MB)