Traffic Trace Info
DumpFile: 200904020200.dump
FileSize: 1307.85MB
Id: 200904020200
StartTime: Thu Apr 2 02:00:00 2009
EndTime: Thu Apr 2 02:15:00 2009
TotalTime: 899.96 seconds
TotalCapSize: 1021.15MB CapLen: 96 bytes
# of packets: 18788847 (14575.48MB)
AvgRate: 135.87Mbps stddev:10.48M
IP flow (unique src/dst pair) Information
# of flows: 805873 (avg. 23.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.0% 3.0% 2.6% 2.2% 1.7% 1.6% 1.4% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 502532
Top 10 bandwidth usage (bytes/total in %):
19.3% 14.9% 10.1% 10.0% 7.4% 6.4% 3.6% 3.3% 3.0% 2.8%
# of IPv6 addresses: 2704
Top 10 bandwidth usage (bytes/total in %):
31.5% 23.2% 16.3% 15.3% 13.8% 13.8% 9.5% 7.6% 7.1% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020200.pktlen.png)
detailed numbers
[ 32- 63]: 3755287
[ 64- 127]: 3774619
[ 128- 255]: 777724
[ 256- 511]: 347735
[ 512- 1023]: 292828
[ 1024- 2047]: 9840654
Protocol Breakdown
![[protocol breakdown chart]](200904020200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18788847 (100.00%) 15283500740 (100.00%) 813.43
ip 18650543 ( 99.26%) 15265136678 ( 99.88%) 818.48
tcp 15720857 ( 83.67%) 14511871028 ( 94.95%) 923.10
http(s) 8594230 ( 45.74%) 11970377256 ( 78.32%) 1392.84
http(c) 3744269 ( 19.93%) 269236536 ( 1.76%) 71.91
squid 560381 ( 2.98%) 365380478 ( 2.39%) 652.02
smtp 346241 ( 1.84%) 69222577 ( 0.45%) 199.93
ftp 115722 ( 0.62%) 99531325 ( 0.65%) 860.09
pop3 9290 ( 0.05%) 9451839 ( 0.06%) 1017.42
imap 3648 ( 0.02%) 698396 ( 0.00%) 191.45
telnet 3282 ( 0.02%) 250722 ( 0.00%) 76.39
ssh 14939 ( 0.08%) 2300568 ( 0.02%) 154.00
dns 19817 ( 0.11%) 5664025 ( 0.04%) 285.82
bgp 139 ( 0.00%) 41096 ( 0.00%) 295.65
napster 54 ( 0.00%) 7433 ( 0.00%) 137.65
realaud 31 ( 0.00%) 2134 ( 0.00%) 68.84
rtsp 183 ( 0.00%) 27427 ( 0.00%) 149.87
icecast 264 ( 0.00%) 18056 ( 0.00%) 68.39
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 2308290 ( 12.29%) 1719656536 ( 11.25%) 744.99
udp 1942522 ( 10.34%) 627837334 ( 4.11%) 323.21
dns 1242907 ( 6.62%) 245867736 ( 1.61%) 197.82
realaud 6369 ( 0.03%) 2197863 ( 0.01%) 345.09
halflif 241 ( 0.00%) 51980 ( 0.00%) 215.68
starcra 33 ( 0.00%) 5220 ( 0.00%) 158.18
everque 61 ( 0.00%) 11508 ( 0.00%) 188.66
unreal 15 ( 0.00%) 2495 ( 0.00%) 166.33
quake 20 ( 0.00%) 2771 ( 0.00%) 138.55
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 692693 ( 3.69%) 379537734 ( 2.48%) 547.92
icmp 946114 ( 5.04%) 118764694 ( 0.78%) 125.53
ipip 308 ( 0.00%) 37848 ( 0.00%) 122.88
ip6 31019 ( 0.17%) 5278390 ( 0.03%) 170.17
other 9723 ( 0.05%) 1347384 ( 0.01%) 138.58
frag 53026 ( 0.28%) 60025935 ( 0.39%) 1132.01
ip6 138304 ( 0.74%) 18364062 ( 0.12%) 132.78
tcp6 118960 ( 0.63%) 14740514 ( 0.10%) 123.91
http(s) 2668 ( 0.01%) 2394573 ( 0.02%) 897.52
http(c) 108727 ( 0.58%) 9185795 ( 0.06%) 84.48
smtp 213 ( 0.00%) 93113 ( 0.00%) 437.15
ftp 2373 ( 0.01%) 245309 ( 0.00%) 103.38
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 395 ( 0.00%) 35225 ( 0.00%) 89.18
other 4582 ( 0.02%) 2786327 ( 0.02%) 608.10
udp6 13687 ( 0.07%) 2753914 ( 0.02%) 201.21
dns 10030 ( 0.05%) 1583329 ( 0.01%) 157.86
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3656 ( 0.02%) 1170471 ( 0.01%) 320.15
icmp6 5380 ( 0.03%) 644986 ( 0.00%) 119.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 247 ( 0.00%) 220568 ( 0.00%) 892.99
tcpdump file: 200904020200.dump.gz (451.74 MB)