Traffic Trace Info
DumpFile: 200904020330.dump
FileSize: 1099.86MB
Id: 200904020330
StartTime: Thu Apr 2 03:30:01 2009
EndTime: Thu Apr 2 03:45:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 858.56MB CapLen: 96 bytes
# of packets: 15813100 (10642.31MB)
AvgRate: 99.24Mbps stddev:9.11M
IP flow (unique src/dst pair) Information
# of flows: 749759 (avg. 21.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.8% 2.1% 1.8% 1.7% 1.6% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 477758
Top 10 bandwidth usage (bytes/total in %):
19.8% 13.7% 8.4% 6.1% 5.9% 5.9% 4.6% 3.9% 2.9% 2.9%
# of IPv6 addresses: 2031
Top 10 bandwidth usage (bytes/total in %):
34.9% 19.0% 17.6% 17.6% 12.5% 9.8% 9.3% 6.4% 5.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020330.pktlen.png)
detailed numbers
[ 32- 63]: 3686009
[ 64- 127]: 3582538
[ 128- 255]: 794863
[ 256- 511]: 373144
[ 512- 1023]: 310706
[ 1024- 2047]: 7065840
Protocol Breakdown
![[protocol breakdown chart]](200904020330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15813100 (100.00%) 11159268930 (100.00%) 705.70
ip 15698954 ( 99.28%) 11145439166 ( 99.88%) 709.95
tcp 12156004 ( 76.87%) 10209100293 ( 91.49%) 839.84
http(s) 5795921 ( 36.65%) 7933977712 ( 71.10%) 1368.89
http(c) 2813858 ( 17.79%) 204294633 ( 1.83%) 72.60
squid 746557 ( 4.72%) 587064092 ( 5.26%) 786.36
smtp 411103 ( 2.60%) 67869572 ( 0.61%) 165.09
ftp 91797 ( 0.58%) 85003164 ( 0.76%) 925.99
pop3 4930 ( 0.03%) 3298750 ( 0.03%) 669.12
imap 3574 ( 0.02%) 399357 ( 0.00%) 111.74
telnet 3516 ( 0.02%) 246326 ( 0.00%) 70.06
ssh 482248 ( 3.05%) 70436491 ( 0.63%) 146.06
dns 18459 ( 0.12%) 4492731 ( 0.04%) 243.39
bgp 199 ( 0.00%) 95480 ( 0.00%) 479.80
napster 51 ( 0.00%) 7081 ( 0.00%) 138.84
realaud 19 ( 0.00%) 1290 ( 0.00%) 67.89
rtsp 210 ( 0.00%) 37919 ( 0.00%) 180.57
icecast 166 ( 0.00%) 11194 ( 0.00%) 67.43
other 1783224 ( 11.28%) 1251852383 ( 11.22%) 702.02
udp 2014453 ( 12.74%) 724576230 ( 6.49%) 359.69
dns 1218215 ( 7.70%) 236188584 ( 2.12%) 193.88
realaud 1956 ( 0.01%) 119175 ( 0.00%) 60.93
halflif 56 ( 0.00%) 4297 ( 0.00%) 76.73
starcra 26 ( 0.00%) 3880 ( 0.00%) 149.23
everque 71 ( 0.00%) 13071 ( 0.00%) 184.10
unreal 7 ( 0.00%) 822 ( 0.00%) 117.43
quake 12 ( 0.00%) 1290 ( 0.00%) 107.50
cuseeme 6 ( 0.00%) 822 ( 0.00%) 137.00
other 793888 ( 5.02%) 488060762 ( 4.37%) 614.77
icmp 1455658 ( 9.21%) 155004818 ( 1.39%) 106.48
ipip 291 ( 0.00%) 34670 ( 0.00%) 119.14
ip6 63552 ( 0.40%) 55490188 ( 0.50%) 873.15
other 8996 ( 0.06%) 1232967 ( 0.01%) 137.06
frag 46517 ( 0.29%) 52151873 ( 0.47%) 1121.14
ip6 114146 ( 0.72%) 13829764 ( 0.12%) 121.16
tcp6 96067 ( 0.61%) 10748360 ( 0.10%) 111.88
http(s) 1406 ( 0.01%) 1046741 ( 0.01%) 744.48
http(c) 86734 ( 0.55%) 7429665 ( 0.07%) 85.66
smtp 486 ( 0.00%) 223686 ( 0.00%) 460.26
ftp 2357 ( 0.01%) 243318 ( 0.00%) 103.23
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 10 ( 0.00%) 1092 ( 0.00%) 109.20
bgp 408 ( 0.00%) 56075 ( 0.00%) 137.44
other 4664 ( 0.03%) 1747611 ( 0.02%) 374.70
udp6 12200 ( 0.08%) 2078309 ( 0.02%) 170.35
dns 9647 ( 0.06%) 1529987 ( 0.01%) 158.60
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2552 ( 0.02%) 548214 ( 0.00%) 214.82
icmp6 5559 ( 0.04%) 730787 ( 0.01%) 131.46
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 289 ( 0.00%) 268092 ( 0.00%) 927.65
tcpdump file: 200904020330.dump.gz (382.39 MB)