Traffic Trace Info
DumpFile: 200904020315.dump
FileSize: 1119.29MB
Id: 200904020315
StartTime: Thu Apr 2 03:15:01 2009
EndTime: Thu Apr 2 03:30:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 871.37MB CapLen: 96 bytes
# of packets: 16247443 (11252.86MB)
AvgRate: 104.92Mbps stddev:12.13M
IP flow (unique src/dst pair) Information
# of flows: 825811 (avg. 19.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.5% 1.9% 1.5% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 512060
Top 10 bandwidth usage (bytes/total in %):
21.3% 16.6% 9.3% 7.1% 5.5% 5.5% 4.2% 3.2% 2.8% 2.6%
# of IPv6 addresses: 1826
Top 10 bandwidth usage (bytes/total in %):
26.4% 22.3% 21.1% 21.1% 11.0% 10.6% 9.0% 6.0% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020315.pktlen.png)
detailed numbers
[ 32- 63]: 4000447
[ 64- 127]: 3159295
[ 128- 255]: 848752
[ 256- 511]: 391445
[ 512- 1023]: 364397
[ 1024- 2047]: 7483107
Protocol Breakdown
![[protocol breakdown chart]](200904020315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16247443 (100.00%) 11799480809 (100.00%) 726.24
ip 16153360 ( 99.42%) 11787493888 ( 99.90%) 729.72
tcp 13397638 ( 82.46%) 10960534047 ( 92.89%) 818.09
http(s) 6270245 ( 38.59%) 8609781353 ( 72.97%) 1373.12
http(c) 3160055 ( 19.45%) 228052346 ( 1.93%) 72.17
squid 710184 ( 4.37%) 524048098 ( 4.44%) 737.90
smtp 417203 ( 2.57%) 60710039 ( 0.51%) 145.52
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 104982 ( 0.65%) 98713793 ( 0.84%) 940.29
pop3 7094 ( 0.04%) 4027260 ( 0.03%) 567.70
imap 3158 ( 0.02%) 335452 ( 0.00%) 106.22
telnet 4111 ( 0.03%) 296593 ( 0.00%) 72.15
ssh 828521 ( 5.10%) 120859176 ( 1.02%) 145.87
dns 17839 ( 0.11%) 3137616 ( 0.03%) 175.89
bgp 152 ( 0.00%) 53013 ( 0.00%) 348.77
napster 30 ( 0.00%) 5145 ( 0.00%) 171.50
realaud 35 ( 0.00%) 3534 ( 0.00%) 100.97
rtsp 494 ( 0.00%) 113242 ( 0.00%) 229.23
icecast 154 ( 0.00%) 9992 ( 0.00%) 64.88
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 1873249 ( 11.53%) 1310379463 ( 11.11%) 699.52
udp 1996681 ( 12.29%) 717697202 ( 6.08%) 359.45
dns 1210623 ( 7.45%) 231358715 ( 1.96%) 191.11
realaud 1825 ( 0.01%) 110763 ( 0.00%) 60.69
halflif 32 ( 0.00%) 2999 ( 0.00%) 93.72
starcra 34 ( 0.00%) 4781 ( 0.00%) 140.62
everque 51 ( 0.00%) 11027 ( 0.00%) 216.22
unreal 9 ( 0.00%) 1989 ( 0.00%) 221.00
quake 14 ( 0.00%) 1189 ( 0.00%) 84.93
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 783908 ( 4.82%) 486039420 ( 4.12%) 620.02
icmp 719362 ( 4.43%) 102516521 ( 0.87%) 142.51
ipip 362 ( 0.00%) 45128 ( 0.00%) 124.66
ip6 29672 ( 0.18%) 5420443 ( 0.05%) 182.68
other 9645 ( 0.06%) 1280547 ( 0.01%) 132.77
frag 47738 ( 0.29%) 53567850 ( 0.45%) 1122.12
ip6 94083 ( 0.58%) 11986921 ( 0.10%) 127.41
tcp6 76785 ( 0.47%) 9192640 ( 0.08%) 119.72
http(s) 1649 ( 0.01%) 1204820 ( 0.01%) 730.64
http(c) 68219 ( 0.42%) 5928634 ( 0.05%) 86.91
smtp 391 ( 0.00%) 194661 ( 0.00%) 497.85
ftp 2383 ( 0.01%) 246736 ( 0.00%) 103.54
ssh 26 ( 0.00%) 4624 ( 0.00%) 177.85
dns 10 ( 0.00%) 1151 ( 0.00%) 115.10
bgp 408 ( 0.00%) 46256 ( 0.00%) 113.37
other 3699 ( 0.02%) 1565758 ( 0.01%) 423.29
udp6 11339 ( 0.07%) 1859645 ( 0.02%) 164.00
dns 9860 ( 0.06%) 1584111 ( 0.01%) 160.66
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1478 ( 0.01%) 275423 ( 0.00%) 186.35
icmp6 5659 ( 0.03%) 680138 ( 0.01%) 120.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 270 ( 0.00%) 250418 ( 0.00%) 927.47
tcpdump file: 200904020315.dump.gz (405.77 MB)