Traffic Trace Info
DumpFile: 200904020045.dump
FileSize: 1431.69MB
Id: 200904020045
StartTime: Thu Apr 2 00:45:01 2009
EndTime: Thu Apr 2 01:00:01 2009
TotalTime: 899.83 seconds
TotalCapSize: 1111.28MB CapLen: 96 bytes
# of packets: 20996893 (15679.36MB)
AvgRate: 146.17Mbps stddev:13.70M
IP flow (unique src/dst pair) Information
# of flows: 783364 (avg. 26.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.4% 2.5% 2.3% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 503565
Top 10 bandwidth usage (bytes/total in %):
19.3% 15.5% 7.8% 6.5% 6.4% 5.9% 5.0% 3.5% 3.5% 3.4%
# of IPv6 addresses: 2207
Top 10 bandwidth usage (bytes/total in %):
63.5% 60.1% 17.1% 9.1% 8.0% 5.5% 3.9% 3.5% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020045.pktlen.png)
detailed numbers
[ 32- 63]: 4316357
[ 64- 127]: 4282721
[ 128- 255]: 1036025
[ 256- 511]: 376116
[ 512- 1023]: 369258
[ 1024- 2047]: 10616416
Protocol Breakdown
![[protocol breakdown chart]](200904020045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20996893 (100.00%) 16441005833 (100.00%) 783.02
ip 20857187 ( 99.33%) 16403983690 ( 99.77%) 786.49
tcp 15783536 ( 75.17%) 13799132582 ( 83.93%) 874.27
http(s) 8108976 ( 38.62%) 11214788264 ( 68.21%) 1383.01
http(c) 4092397 ( 19.49%) 303172706 ( 1.84%) 74.08
squid 702529 ( 3.35%) 532751969 ( 3.24%) 758.33
smtp 413055 ( 1.97%) 95991768 ( 0.58%) 232.39
ftp 99653 ( 0.47%) 90526588 ( 0.55%) 908.42
pop3 8223 ( 0.04%) 5321098 ( 0.03%) 647.10
imap 3149 ( 0.01%) 411026 ( 0.00%) 130.53
telnet 14653 ( 0.07%) 3872562 ( 0.02%) 264.28
ssh 78232 ( 0.37%) 8964353 ( 0.05%) 114.59
dns 19019 ( 0.09%) 3333209 ( 0.02%) 175.26
bgp 132 ( 0.00%) 45207 ( 0.00%) 342.48
napster 31 ( 0.00%) 5207 ( 0.00%) 167.97
realaud 39 ( 0.00%) 4243 ( 0.00%) 108.79
rtsp 8064 ( 0.04%) 11660216 ( 0.07%) 1445.96
icecast 3929 ( 0.02%) 4148013 ( 0.03%) 1055.74
hotline 7 ( 0.00%) 420 ( 0.00%) 60.00
other 2231327 ( 10.63%) 1524128473 ( 9.27%) 683.06
udp 4298652 ( 20.47%) 2477373151 ( 15.07%) 576.31
dns 1292805 ( 6.16%) 252702870 ( 1.54%) 195.47
realaud 14769 ( 0.07%) 6054054 ( 0.04%) 409.92
halflif 1222 ( 0.01%) 425125 ( 0.00%) 347.89
starcra 32 ( 0.00%) 5085 ( 0.00%) 158.91
everque 64 ( 0.00%) 12747 ( 0.00%) 199.17
unreal 8 ( 0.00%) 1109 ( 0.00%) 138.62
quake 16 ( 0.00%) 1927 ( 0.00%) 120.44
cuseeme 7 ( 0.00%) 669 ( 0.00%) 95.57
other 2989517 ( 14.24%) 2217972735 ( 13.49%) 741.92
icmp 731315 ( 3.48%) 102852399 ( 0.63%) 140.64
ipip 349 ( 0.00%) 42850 ( 0.00%) 122.78
ip6 33471 ( 0.16%) 23229887 ( 0.14%) 694.03
other 9864 ( 0.05%) 1352821 ( 0.01%) 137.15
frag 51591 ( 0.25%) 57339527 ( 0.35%) 1111.42
ip6 139706 ( 0.67%) 37022143 ( 0.23%) 265.00
tcp6 118771 ( 0.57%) 33564421 ( 0.20%) 282.60
http(s) 2209 ( 0.01%) 1464154 ( 0.01%) 662.81
http(c) 94429 ( 0.45%) 7804712 ( 0.05%) 82.65
smtp 571 ( 0.00%) 244710 ( 0.00%) 428.56
ftp 2364 ( 0.01%) 244717 ( 0.00%) 103.52
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 377 ( 0.00%) 32564 ( 0.00%) 86.38
other 18815 ( 0.09%) 23772933 ( 0.14%) 1263.51
udp6 14615 ( 0.07%) 2420445 ( 0.01%) 165.61
dns 11788 ( 0.06%) 1702387 ( 0.01%) 144.42
starcra 2 ( 0.00%) 684 ( 0.00%) 342.00
other 2825 ( 0.01%) 717374 ( 0.00%) 253.94
icmp6 6049 ( 0.03%) 802933 ( 0.00%) 132.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 241 ( 0.00%) 230264 ( 0.00%) 955.45
tcpdump file: 200904020045.dump.gz (498.79 MB)