Traffic Trace Info
DumpFile: 200904020215.dump
FileSize: 1128.62MB
Id: 200904020215
StartTime: Thu Apr 2 02:15:00 2009
EndTime: Thu Apr 2 02:30:01 2009
TotalTime: 900.66 seconds
TotalCapSize: 881.89MB CapLen: 96 bytes
# of packets: 16168599 (11658.77MB)
AvgRate: 108.59Mbps stddev:12.03M
IP flow (unique src/dst pair) Information
# of flows: 1114402 (avg. 14.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.8% 1.8% 1.6% 1.5% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 706989
Top 10 bandwidth usage (bytes/total in %):
20.7% 17.5% 8.9% 7.7% 4.1% 4.0% 3.8% 3.1% 2.4% 1.8%
# of IPv6 addresses: 2006
Top 10 bandwidth usage (bytes/total in %):
67.2% 67.2% 12.1% 6.5% 6.4% 5.7% 5.4% 3.3% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020215.pktlen.png)
detailed numbers
[ 32- 63]: 3661768
[ 64- 127]: 3425938
[ 128- 255]: 691216
[ 256- 511]: 345065
[ 512- 1023]: 286781
[ 1024- 2047]: 7757831
Protocol Breakdown
![[protocol breakdown chart]](200904020215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16168599 (100.00%) 12225108809 (100.00%) 756.10
ip 16016487 ( 99.06%) 12179339164 ( 99.63%) 760.43
tcp 13368914 ( 82.68%) 11510568795 ( 94.16%) 861.00
http(s) 6668417 ( 41.24%) 9214107906 ( 75.37%) 1381.75
http(c) 3239203 ( 20.03%) 238897470 ( 1.95%) 73.75
squid 702732 ( 4.35%) 502738547 ( 4.11%) 715.41
smtp 332963 ( 2.06%) 59253539 ( 0.48%) 177.96
ftp 110242 ( 0.68%) 100144757 ( 0.82%) 908.41
pop3 4902 ( 0.03%) 3529514 ( 0.03%) 720.02
imap 3162 ( 0.02%) 406383 ( 0.00%) 128.52
telnet 4105 ( 0.03%) 295519 ( 0.00%) 71.99
ssh 210511 ( 1.30%) 14629559 ( 0.12%) 69.50
dns 17493 ( 0.11%) 1953974 ( 0.02%) 111.70
bgp 136 ( 0.00%) 40258 ( 0.00%) 296.01
napster 50 ( 0.00%) 6958 ( 0.00%) 139.16
realaud 40 ( 0.00%) 3906 ( 0.00%) 97.65
rtsp 234 ( 0.00%) 53484 ( 0.00%) 228.56
icecast 216 ( 0.00%) 14412 ( 0.00%) 66.72
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2074484 ( 12.83%) 1374491169 ( 11.24%) 662.57
udp 1870893 ( 11.57%) 558065420 ( 4.56%) 298.29
dns 1198987 ( 7.42%) 228975003 ( 1.87%) 190.97
realaud 2411 ( 0.01%) 148446 ( 0.00%) 61.57
halflif 173 ( 0.00%) 29820 ( 0.00%) 172.37
starcra 29 ( 0.00%) 4225 ( 0.00%) 145.69
everque 63 ( 0.00%) 12761 ( 0.00%) 202.56
unreal 6 ( 0.00%) 542 ( 0.00%) 90.33
quake 28 ( 0.00%) 3147 ( 0.00%) 112.39
cuseeme 5 ( 0.00%) 420 ( 0.00%) 84.00
other 668909 ( 4.14%) 328640163 ( 2.69%) 491.31
icmp 735136 ( 4.55%) 102650297 ( 0.84%) 139.63
ipip 341 ( 0.00%) 42387 ( 0.00%) 124.30
ip6 32012 ( 0.20%) 6785035 ( 0.06%) 211.95
other 9191 ( 0.06%) 1227230 ( 0.01%) 133.53
frag 70967 ( 0.44%) 73626920 ( 0.60%) 1037.48
ip6 152112 ( 0.94%) 45769645 ( 0.37%) 300.89
tcp6 133165 ( 0.82%) 42633349 ( 0.35%) 320.15
http(s) 1603 ( 0.01%) 1100826 ( 0.01%) 686.73
http(c) 103909 ( 0.64%) 8681830 ( 0.07%) 83.55
smtp 896 ( 0.01%) 342076 ( 0.00%) 381.78
ftp 2447 ( 0.02%) 260415 ( 0.00%) 106.42
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
dns 15 ( 0.00%) 1719 ( 0.00%) 114.60
bgp 376 ( 0.00%) 32404 ( 0.00%) 86.18
other 23917 ( 0.15%) 32213854 ( 0.26%) 1346.90
udp6 12872 ( 0.08%) 2158107 ( 0.02%) 167.66
dns 10394 ( 0.06%) 1600631 ( 0.01%) 154.00
other 2478 ( 0.02%) 557476 ( 0.00%) 224.97
icmp6 5795 ( 0.04%) 745466 ( 0.01%) 128.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 250 ( 0.00%) 228643 ( 0.00%) 914.57
tcpdump file: 200904020215.dump.gz (401.68 MB)