Traffic Trace Info
DumpFile: 200904020115.dump
FileSize: 1443.35MB
Id: 200904020115
StartTime: Thu Apr 2 01:15:01 2009
EndTime: Thu Apr 2 01:30:00 2009
TotalTime: 899.58 seconds
TotalCapSize: 1129.02MB CapLen: 96 bytes
# of packets: 20599611 (15238.15MB)
AvgRate: 142.09Mbps stddev:10.55M
IP flow (unique src/dst pair) Information
# of flows: 933583 (avg. 22.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.4% 6.5% 2.9% 1.8% 1.6% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 632121
Top 10 bandwidth usage (bytes/total in %):
15.8% 15.4% 14.4% 13.7% 8.1% 6.5% 6.5% 6.1% 3.0% 2.8%
# of IPv6 addresses: 1960
Top 10 bandwidth usage (bytes/total in %):
43.1% 22.4% 20.7% 14.3% 9.6% 8.9% 8.7% 4.8% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020115.pktlen.png)
detailed numbers
[ 32- 63]: 4168827
[ 64- 127]: 4676693
[ 128- 255]: 798125
[ 256- 511]: 373368
[ 512- 1023]: 348637
[ 1024- 2047]: 10233961
Protocol Breakdown
![[protocol breakdown chart]](200904020115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20599611 (100.00%) 15978362747 (100.00%) 775.66
ip 20481985 ( 99.43%) 15963711514 ( 99.91%) 779.40
tcp 17178081 ( 83.39%) 14867326514 ( 93.05%) 865.48
http(s) 8792305 ( 42.68%) 12303520553 ( 77.00%) 1399.35
http(c) 4700494 ( 22.82%) 339201810 ( 2.12%) 72.16
squid 703026 ( 3.41%) 420368756 ( 2.63%) 597.94
smtp 401998 ( 1.95%) 80519782 ( 0.50%) 200.30
ftp 114749 ( 0.56%) 103790391 ( 0.65%) 904.50
pop3 8869 ( 0.04%) 5105397 ( 0.03%) 575.65
imap 3305 ( 0.02%) 352334 ( 0.00%) 106.61
telnet 19865 ( 0.10%) 5266681 ( 0.03%) 265.12
ssh 29903 ( 0.15%) 4922933 ( 0.03%) 164.63
dns 16708 ( 0.08%) 1802276 ( 0.01%) 107.87
bgp 136 ( 0.00%) 39180 ( 0.00%) 288.09
napster 36 ( 0.00%) 5846 ( 0.00%) 162.39
realaud 45 ( 0.00%) 4539 ( 0.00%) 100.87
rtsp 236 ( 0.00%) 41564 ( 0.00%) 176.12
icecast 966 ( 0.00%) 59392 ( 0.00%) 61.48
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2385394 ( 11.58%) 1602322320 ( 10.03%) 671.72
udp 2465624 ( 11.97%) 979107414 ( 6.13%) 397.10
dns 1103375 ( 5.36%) 221703996 ( 1.39%) 200.93
realaud 19796 ( 0.10%) 8366380 ( 0.05%) 422.63
halflif 211 ( 0.00%) 34631 ( 0.00%) 164.13
starcra 27 ( 0.00%) 4500 ( 0.00%) 166.67
everque 62 ( 0.00%) 11324 ( 0.00%) 182.65
unreal 21 ( 0.00%) 3176 ( 0.00%) 151.24
quake 28 ( 0.00%) 3079 ( 0.00%) 109.96
cuseeme 7 ( 0.00%) 684 ( 0.00%) 97.71
other 1341888 ( 6.51%) 748821419 ( 4.69%) 558.04
icmp 796618 ( 3.87%) 109477257 ( 0.69%) 137.43
ipip 345 ( 0.00%) 41875 ( 0.00%) 121.38
ip6 31300 ( 0.15%) 6405190 ( 0.04%) 204.64
other 10017 ( 0.05%) 1353264 ( 0.01%) 135.10
frag 50620 ( 0.25%) 56218899 ( 0.35%) 1110.61
ip6 117626 ( 0.57%) 14651233 ( 0.09%) 124.56
tcp6 97918 ( 0.48%) 11556412 ( 0.07%) 118.02
http(s) 2273 ( 0.01%) 1470119 ( 0.01%) 646.77
http(c) 86479 ( 0.42%) 7193005 ( 0.05%) 83.18
smtp 555 ( 0.00%) 284330 ( 0.00%) 512.31
ftp 2493 ( 0.01%) 261441 ( 0.00%) 104.87
dns 9 ( 0.00%) 1005 ( 0.00%) 111.67
bgp 387 ( 0.00%) 34360 ( 0.00%) 88.79
other 5722 ( 0.03%) 2312152 ( 0.01%) 404.08
udp6 13778 ( 0.07%) 2206706 ( 0.01%) 160.16
dns 11484 ( 0.06%) 1698575 ( 0.01%) 147.91
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 2291 ( 0.01%) 507798 ( 0.00%) 221.65
icmp6 5747 ( 0.03%) 741019 ( 0.00%) 128.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 153 ( 0.00%) 143016 ( 0.00%) 934.75
tcpdump file: 200904020115.dump.gz (489.67 MB)