Traffic Trace Info
DumpFile: 200904020230.dump
FileSize: 1094.38MB
Id: 200904020230
StartTime: Thu Apr 2 02:30:01 2009
EndTime: Thu Apr 2 02:45:01 2009
TotalTime: 899.63 seconds
TotalCapSize: 854.56MB CapLen: 96 bytes
# of packets: 15715250 (10759.26MB)
AvgRate: 100.34Mbps stddev:9.96M
IP flow (unique src/dst pair) Information
# of flows: 821445 (avg. 19.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.1% 1.9% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 528306
Top 10 bandwidth usage (bytes/total in %):
23.6% 21.9% 8.8% 7.7% 3.9% 3.4% 3.2% 1.9% 1.9% 1.6%
# of IPv6 addresses: 2155
Top 10 bandwidth usage (bytes/total in %):
60.0% 60.0% 11.0% 8.7% 7.5% 7.4% 4.2% 3.6% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020230.pktlen.png)
detailed numbers
[ 32- 63]: 3623126
[ 64- 127]: 3561527
[ 128- 255]: 751990
[ 256- 511]: 330322
[ 512- 1023]: 304325
[ 1024- 2047]: 7143960
Protocol Breakdown
![[protocol breakdown chart]](200904020230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15715250 (100.00%) 11281901675 (100.00%) 717.90
ip 15580853 ( 99.14%) 11245916710 ( 99.68%) 721.78
tcp 12263964 ( 78.04%) 10475656250 ( 92.85%) 854.18
http(s) 6066309 ( 38.60%) 8313998736 ( 73.69%) 1370.52
http(c) 3159765 ( 20.11%) 234894949 ( 2.08%) 74.34
squid 589116 ( 3.75%) 432228263 ( 3.83%) 733.69
smtp 403385 ( 2.57%) 67691100 ( 0.60%) 167.81
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 98912 ( 0.63%) 86514283 ( 0.77%) 874.66
pop3 5430 ( 0.03%) 3542461 ( 0.03%) 652.39
imap 3500 ( 0.02%) 586919 ( 0.01%) 167.69
telnet 3948 ( 0.03%) 283078 ( 0.00%) 71.70
ssh 21003 ( 0.13%) 4751119 ( 0.04%) 226.21
dns 18138 ( 0.12%) 4022156 ( 0.04%) 221.75
bgp 145 ( 0.00%) 44560 ( 0.00%) 307.31
napster 32 ( 0.00%) 5265 ( 0.00%) 164.53
realaud 27 ( 0.00%) 1806 ( 0.00%) 66.89
rtsp 241 ( 0.00%) 53635 ( 0.00%) 222.55
icecast 169 ( 0.00%) 11230 ( 0.00%) 66.45
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1893798 ( 12.05%) 1327023490 ( 11.76%) 700.72
udp 1965685 ( 12.51%) 622515374 ( 5.52%) 316.69
dns 1198676 ( 7.63%) 236042467 ( 2.09%) 196.92
realaud 2748 ( 0.02%) 165479 ( 0.00%) 60.22
halflif 86 ( 0.00%) 8132 ( 0.00%) 94.56
starcra 36 ( 0.00%) 5293 ( 0.00%) 147.03
everque 59 ( 0.00%) 12736 ( 0.00%) 215.86
unreal 11 ( 0.00%) 1409 ( 0.00%) 128.09
quake 14 ( 0.00%) 1362 ( 0.00%) 97.29
cuseeme 3 ( 0.00%) 226 ( 0.00%) 75.33
other 763874 ( 4.86%) 386115929 ( 3.42%) 505.47
icmp 1312827 ( 8.35%) 141382040 ( 1.25%) 107.69
ipip 322 ( 0.00%) 40312 ( 0.00%) 125.19
ip6 28720 ( 0.18%) 5052718 ( 0.04%) 175.93
other 9335 ( 0.06%) 1270016 ( 0.01%) 136.05
frag 61155 ( 0.39%) 64261549 ( 0.57%) 1050.80
ip6 134397 ( 0.86%) 35984965 ( 0.32%) 267.75
tcp6 116162 ( 0.74%) 32729756 ( 0.29%) 281.76
http(s) 1623 ( 0.01%) 1063817 ( 0.01%) 655.46
http(c) 93423 ( 0.59%) 8058973 ( 0.07%) 86.26
smtp 476 ( 0.00%) 241441 ( 0.00%) 507.23
ftp 2419 ( 0.02%) 252209 ( 0.00%) 104.26
bgp 395 ( 0.00%) 35153 ( 0.00%) 88.99
other 17826 ( 0.11%) 23078163 ( 0.20%) 1294.63
udp6 12452 ( 0.08%) 2254534 ( 0.02%) 181.06
dns 10111 ( 0.06%) 1622552 ( 0.01%) 160.47
other 2341 ( 0.01%) 631982 ( 0.01%) 269.96
icmp6 5368 ( 0.03%) 635105 ( 0.01%) 118.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 384 ( 0.00%) 361354 ( 0.00%) 941.03
tcpdump file: 200904020230.dump.gz (383.14 MB)