Traffic Trace Info
DumpFile: 200904020145.dump
FileSize: 1263.48MB
Id: 200904020145
StartTime: Thu Apr 2 01:45:00 2009
EndTime: Thu Apr 2 02:00:00 2009
TotalTime: 900.21 seconds
TotalCapSize: 985.21MB CapLen: 96 bytes
# of packets: 18235925 (13618.13MB)
AvgRate: 126.90Mbps stddev:12.01M
IP flow (unique src/dst pair) Information
# of flows: 769465 (avg. 23.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 3.3% 2.6% 1.9% 1.2% 1.2% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 486931
Top 10 bandwidth usage (bytes/total in %):
19.4% 16.9% 9.2% 9.2% 7.1% 5.4% 3.4% 3.4% 3.3% 2.9%
# of IPv6 addresses: 2178
Top 10 bandwidth usage (bytes/total in %):
38.3% 20.4% 18.2% 17.9% 15.5% 12.8% 9.1% 7.7% 7.7% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020145.pktlen.png)
detailed numbers
[ 32- 63]: 3952038
[ 64- 127]: 3676481
[ 128- 255]: 770190
[ 256- 511]: 350617
[ 512- 1023]: 283041
[ 1024- 2047]: 9203558
Protocol Breakdown
![[protocol breakdown chart]](200904020145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18235925 (100.00%) 14279643421 (100.00%) 783.05
ip 18093558 ( 99.22%) 14263115524 ( 99.88%) 788.30
tcp 15009581 ( 82.31%) 13394650195 ( 93.80%) 892.41
http(s) 8112009 ( 44.48%) 11260342757 ( 78.86%) 1388.11
http(c) 3749278 ( 20.56%) 273576735 ( 1.92%) 72.97
squid 604595 ( 3.32%) 391967714 ( 2.74%) 648.31
smtp 368997 ( 2.02%) 68601320 ( 0.48%) 185.91
ftp 123431 ( 0.68%) 90027980 ( 0.63%) 729.38
pop3 7118 ( 0.04%) 4553036 ( 0.03%) 639.65
imap 3247 ( 0.02%) 359696 ( 0.00%) 110.78
telnet 4805 ( 0.03%) 737659 ( 0.01%) 153.52
ssh 57949 ( 0.32%) 4758687 ( 0.03%) 82.12
dns 17418 ( 0.10%) 1953831 ( 0.01%) 112.17
bgp 130 ( 0.00%) 39246 ( 0.00%) 301.89
napster 57 ( 0.00%) 8080 ( 0.00%) 141.75
realaud 100 ( 0.00%) 7775 ( 0.00%) 77.75
rtsp 229 ( 0.00%) 40634 ( 0.00%) 177.44
icecast 172 ( 0.00%) 11360 ( 0.00%) 66.05
hotline 5 ( 0.00%) 316 ( 0.00%) 63.20
other 1959171 ( 10.74%) 1297611169 ( 9.09%) 662.33
udp 2089240 ( 11.46%) 740704042 ( 5.19%) 354.53
dns 1165713 ( 6.39%) 239450562 ( 1.68%) 205.41
realaud 19805 ( 0.11%) 8366890 ( 0.06%) 422.46
halflif 190 ( 0.00%) 29109 ( 0.00%) 153.21
starcra 21 ( 0.00%) 2387 ( 0.00%) 113.67
everque 58 ( 0.00%) 11527 ( 0.00%) 198.74
unreal 5 ( 0.00%) 444 ( 0.00%) 88.80
quake 21 ( 0.00%) 2361 ( 0.00%) 112.43
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 903271 ( 4.95%) 492708910 ( 3.45%) 545.47
icmp 953819 ( 5.23%) 119725587 ( 0.84%) 125.52
ipip 335 ( 0.00%) 40848 ( 0.00%) 121.93
ip6 30200 ( 0.17%) 6376659 ( 0.04%) 211.15
other 10383 ( 0.06%) 1618193 ( 0.01%) 155.85
frag 51263 ( 0.28%) 56627665 ( 0.40%) 1104.65
ip6 142367 ( 0.78%) 16527897 ( 0.12%) 116.09
tcp6 124194 ( 0.68%) 13507931 ( 0.09%) 108.76
http(s) 2253 ( 0.01%) 1512331 ( 0.01%) 671.25
http(c) 115000 ( 0.63%) 9662621 ( 0.07%) 84.02
smtp 393 ( 0.00%) 190916 ( 0.00%) 485.79
ftp 2391 ( 0.01%) 250184 ( 0.00%) 104.64
imap 343 ( 0.00%) 330521 ( 0.00%) 963.62
bgp 392 ( 0.00%) 44316 ( 0.00%) 113.05
other 3422 ( 0.02%) 1517042 ( 0.01%) 443.32
udp6 12777 ( 0.07%) 2240604 ( 0.02%) 175.36
dns 10102 ( 0.06%) 1514980 ( 0.01%) 149.97
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
other 2673 ( 0.01%) 724954 ( 0.01%) 271.21
icmp6 5222 ( 0.03%) 649128 ( 0.00%) 124.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 143 ( 0.00%) 126018 ( 0.00%) 881.24
tcpdump file: 200904020145.dump.gz (438.26 MB)