Traffic Trace Info
DumpFile: 200904020100.dump
FileSize: 1479.44MB
Id: 200904020100
StartTime: Thu Apr 2 01:00:01 2009
EndTime: Thu Apr 2 01:15:01 2009
TotalTime: 900.00 seconds
TotalCapSize: 1151.00MB CapLen: 96 bytes
# of packets: 21523362 (15883.16MB)
AvgRate: 148.05Mbps stddev:13.87M
IP flow (unique src/dst pair) Information
# of flows: 1005407 (avg. 21.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 4.4% 3.9% 1.9% 1.6% 1.4% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 670850
Top 10 bandwidth usage (bytes/total in %):
16.3% 14.9% 9.7% 8.0% 6.4% 5.8% 5.7% 4.4% 4.0% 4.0%
# of IPv6 addresses: 2060
Top 10 bandwidth usage (bytes/total in %):
41.6% 22.4% 19.2% 16.0% 15.6% 10.8% 10.7% 8.2% 5.5% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020100.pktlen.png)
detailed numbers
[ 32- 63]: 4321334
[ 64- 127]: 4746518
[ 128- 255]: 951262
[ 256- 511]: 381486
[ 512- 1023]: 386883
[ 1024- 2047]: 10735879
Protocol Breakdown
![[protocol breakdown chart]](200904020100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21523362 (100.00%) 16654701565 (100.00%) 773.80
ip 21401492 ( 99.43%) 16638789336 ( 99.90%) 777.46
tcp 16410100 ( 76.24%) 14388316927 ( 86.39%) 876.80
http(s) 8582460 ( 39.88%) 11928068286 ( 71.62%) 1389.82
http(c) 4089934 ( 19.00%) 300985608 ( 1.81%) 73.59
squid 740730 ( 3.44%) 376962693 ( 2.26%) 508.91
smtp 401850 ( 1.87%) 65497925 ( 0.39%) 162.99
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 110795 ( 0.51%) 99615863 ( 0.60%) 899.10
pop3 9068 ( 0.04%) 5493048 ( 0.03%) 605.76
imap 3220 ( 0.01%) 348432 ( 0.00%) 108.21
telnet 20872 ( 0.10%) 5444704 ( 0.03%) 260.86
ssh 88715 ( 0.41%) 10822996 ( 0.06%) 122.00
dns 19674 ( 0.09%) 3468174 ( 0.02%) 176.28
bgp 142 ( 0.00%) 46321 ( 0.00%) 326.20
napster 34 ( 0.00%) 5202 ( 0.00%) 153.00
realaud 28 ( 0.00%) 1856 ( 0.00%) 66.29
rtsp 226 ( 0.00%) 40336 ( 0.00%) 178.48
icecast 189 ( 0.00%) 12998 ( 0.00%) 68.77
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2342064 ( 10.88%) 1591496545 ( 9.56%) 679.53
udp 4025572 ( 18.70%) 2106789322 ( 12.65%) 523.35
dns 1238758 ( 5.76%) 247582016 ( 1.49%) 199.86
realaud 19828 ( 0.09%) 8373746 ( 0.05%) 422.32
halflif 180 ( 0.00%) 32420 ( 0.00%) 180.11
starcra 29 ( 0.00%) 3691 ( 0.00%) 127.28
everque 65 ( 0.00%) 11890 ( 0.00%) 182.92
unreal 16 ( 0.00%) 2472 ( 0.00%) 154.50
quake 22 ( 0.00%) 2794 ( 0.00%) 127.00
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 2766478 ( 12.85%) 1850613404 ( 11.11%) 668.94
icmp 912390 ( 4.24%) 116047970 ( 0.70%) 127.19
ipip 318 ( 0.00%) 40140 ( 0.00%) 126.23
ip6 42911 ( 0.20%) 26203098 ( 0.16%) 610.64
other 10201 ( 0.05%) 1391879 ( 0.01%) 136.45
frag 52173 ( 0.24%) 58553626 ( 0.35%) 1122.30
ip6 121870 ( 0.57%) 15912229 ( 0.10%) 130.57
tcp6 100828 ( 0.47%) 12498252 ( 0.08%) 123.96
http(s) 2582 ( 0.01%) 1699990 ( 0.01%) 658.40
http(c) 90451 ( 0.42%) 7587679 ( 0.05%) 83.89
smtp 320 ( 0.00%) 124942 ( 0.00%) 390.44
ftp 2372 ( 0.01%) 246618 ( 0.00%) 103.97
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 554 ( 0.00%) 110.80
bgp 384 ( 0.00%) 33829 ( 0.00%) 88.10
other 4712 ( 0.02%) 2804468 ( 0.02%) 595.18
udp6 14566 ( 0.07%) 2304623 ( 0.01%) 158.22
dns 12756 ( 0.06%) 1837230 ( 0.01%) 144.03
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
other 1809 ( 0.01%) 467293 ( 0.00%) 258.32
icmp6 6093 ( 0.03%) 770209 ( 0.00%) 126.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 353 ( 0.00%) 335065 ( 0.00%) 949.19
tcpdump file: 200904020100.dump.gz (506.49 MB)