Traffic Trace Info
DumpFile: 200904020300.dump
FileSize: 909.31MB
Id: 200904020300
StartTime: Thu Apr 2 03:00:01 2009
EndTime: Thu Apr 2 03:15:01 2009
TotalTime: 900.23 seconds
TotalCapSize: 708.36MB CapLen: 96 bytes
# of packets: 13169124 (9166.88MB)
AvgRate: 91.81Mbps stddev:13.33M
IP flow (unique src/dst pair) Information
# of flows: 781432 (avg. 16.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.6% 1.4% 1.3% 1.2% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 495464
Top 10 bandwidth usage (bytes/total in %):
23.8% 15.9% 9.0% 6.6% 5.0% 4.6% 2.1% 2.1% 1.9% 1.8%
# of IPv6 addresses: 1974
Top 10 bandwidth usage (bytes/total in %):
28.1% 18.9% 17.4% 17.4% 14.9% 14.4% 14.3% 9.2% 7.4% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020300.pktlen.png)
detailed numbers
[ 32- 63]: 3156636
[ 64- 127]: 2663500
[ 128- 255]: 686258
[ 256- 511]: 323734
[ 512- 1023]: 305734
[ 1024- 2047]: 6033262
Protocol Breakdown
![[protocol breakdown chart]](200904020300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13169124 (100.00%) 9612170096 (100.00%) 729.90
ip 13080172 ( 99.32%) 9597825191 ( 99.85%) 733.77
tcp 10593811 ( 80.44%) 9026897489 ( 93.91%) 852.09
http(s) 5201831 ( 39.50%) 7110516705 ( 73.97%) 1366.93
http(c) 2613144 ( 19.84%) 229054936 ( 2.38%) 87.65
squid 604662 ( 4.59%) 429980257 ( 4.47%) 711.11
smtp 395770 ( 3.01%) 74432660 ( 0.77%) 188.07
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 98411 ( 0.75%) 88540908 ( 0.92%) 899.71
pop3 3709 ( 0.03%) 2370913 ( 0.02%) 639.23
imap 3274 ( 0.02%) 351187 ( 0.00%) 107.27
telnet 3285 ( 0.02%) 229970 ( 0.00%) 70.01
ssh 90479 ( 0.69%) 13602171 ( 0.14%) 150.34
dns 17603 ( 0.13%) 3112380 ( 0.03%) 176.81
bgp 126 ( 0.00%) 49737 ( 0.00%) 394.74
napster 30 ( 0.00%) 5145 ( 0.00%) 171.50
realaud 56 ( 0.00%) 4294 ( 0.00%) 76.68
rtsp 161 ( 0.00%) 21762 ( 0.00%) 135.17
icecast 145 ( 0.00%) 9480 ( 0.00%) 65.38
other 1561086 ( 11.85%) 1074612644 ( 11.18%) 688.38
udp 1678097 ( 12.74%) 462496810 ( 4.81%) 275.61
dns 1167985 ( 8.87%) 226495702 ( 2.36%) 193.92
realaud 1674 ( 0.01%) 101412 ( 0.00%) 60.58
halflif 30 ( 0.00%) 2204 ( 0.00%) 73.47
starcra 22 ( 0.00%) 3254 ( 0.00%) 147.91
everque 66 ( 0.00%) 12398 ( 0.00%) 187.85
unreal 8 ( 0.00%) 1356 ( 0.00%) 169.50
quake 13 ( 0.00%) 1385 ( 0.00%) 106.54
cuseeme 2 ( 0.00%) 221 ( 0.00%) 110.50
other 508116 ( 3.86%) 235719994 ( 2.45%) 463.91
icmp 773254 ( 5.87%) 101415192 ( 1.06%) 131.15
ipip 290 ( 0.00%) 35846 ( 0.00%) 123.61
ip6 25484 ( 0.19%) 5701961 ( 0.06%) 223.75
other 9236 ( 0.07%) 1277893 ( 0.01%) 138.36
frag 49225 ( 0.37%) 54832692 ( 0.57%) 1113.92
ip6 88950 ( 0.68%) 14344785 ( 0.15%) 161.27
tcp6 71707 ( 0.54%) 11499929 ( 0.12%) 160.37
http(s) 1238 ( 0.01%) 846644 ( 0.01%) 683.88
http(c) 61655 ( 0.47%) 5341184 ( 0.06%) 86.63
smtp 165 ( 0.00%) 69351 ( 0.00%) 420.31
ftp 2155 ( 0.02%) 221929 ( 0.00%) 102.98
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 369 ( 0.00%) 33429 ( 0.00%) 90.59
other 6118 ( 0.05%) 4986676 ( 0.05%) 815.08
udp6 11420 ( 0.09%) 1924821 ( 0.02%) 168.55
dns 9865 ( 0.07%) 1536523 ( 0.02%) 155.75
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 145 ( 0.00%) 145.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 1552 ( 0.01%) 387951 ( 0.00%) 249.97
icmp6 5518 ( 0.04%) 661381 ( 0.01%) 119.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 275 ( 0.00%) 254574 ( 0.00%) 925.72
tcpdump file: 200904020300.dump.gz (329.99 MB)