Traffic Trace Info
DumpFile: 200904020345.dump
FileSize: 1031.27MB
Id: 200904020345
StartTime: Thu Apr 2 03:45:00 2009
EndTime: Thu Apr 2 04:00:00 2009
TotalTime: 900.15 seconds
TotalCapSize: 804.33MB CapLen: 96 bytes
# of packets: 14872093 (10299.46MB)
AvgRate: 95.99Mbps stddev:10.58M
IP flow (unique src/dst pair) Information
# of flows: 726071 (avg. 20.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.4% 2.1% 1.8% 1.8% 1.5% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 464431
Top 10 bandwidth usage (bytes/total in %):
20.1% 13.8% 9.5% 5.5% 4.5% 4.5% 4.2% 3.6% 2.8% 2.5%
# of IPv6 addresses: 2364
Top 10 bandwidth usage (bytes/total in %):
30.8% 27.3% 20.8% 20.8% 10.2% 9.8% 7.5% 6.9% 5.3% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020345.pktlen.png)
detailed numbers
[ 32- 63]: 3416585
[ 64- 127]: 3227344
[ 128- 255]: 737216
[ 256- 511]: 327772
[ 512- 1023]: 286237
[ 1024- 2047]: 6876939
Protocol Breakdown
![[protocol breakdown chart]](200904020345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14872093 (100.00%) 10799765101 (100.00%) 726.18
ip 14767238 ( 99.29%) 10786884933 ( 99.88%) 730.46
tcp 11293933 ( 75.94%) 9863176587 ( 91.33%) 873.32
http(s) 5428475 ( 36.50%) 7458854131 ( 69.06%) 1374.02
http(c) 2698801 ( 18.15%) 199548758 ( 1.85%) 73.94
squid 797523 ( 5.36%) 662661603 ( 6.14%) 830.90
smtp 335757 ( 2.26%) 54108482 ( 0.50%) 161.15
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 118839 ( 0.80%) 109698839 ( 1.02%) 923.09
pop3 4811 ( 0.03%) 3044256 ( 0.03%) 632.77
imap 3803 ( 0.03%) 442275 ( 0.00%) 116.30
telnet 3477 ( 0.02%) 275681 ( 0.00%) 79.29
ssh 84905 ( 0.57%) 15296489 ( 0.14%) 180.16
dns 98429 ( 0.66%) 125132701 ( 1.16%) 1271.30
bgp 177 ( 0.00%) 77847 ( 0.00%) 439.81
napster 42 ( 0.00%) 6242 ( 0.00%) 148.62
realaud 35 ( 0.00%) 3622 ( 0.00%) 103.49
rtsp 204 ( 0.00%) 29680 ( 0.00%) 145.49
icecast 161 ( 0.00%) 10460 ( 0.00%) 64.97
other 1718381 ( 11.55%) 1233978741 ( 11.43%) 718.11
udp 2053358 ( 13.81%) 769472949 ( 7.12%) 374.74
dns 1241142 ( 8.35%) 241514593 ( 2.24%) 194.59
realaud 2071 ( 0.01%) 125016 ( 0.00%) 60.37
halflif 46 ( 0.00%) 3408 ( 0.00%) 74.09
starcra 30 ( 0.00%) 4819 ( 0.00%) 160.63
everque 72 ( 0.00%) 15621 ( 0.00%) 216.96
unreal 8 ( 0.00%) 1134 ( 0.00%) 141.75
quake 19 ( 0.00%) 2450 ( 0.00%) 128.95
cuseeme 9 ( 0.00%) 810 ( 0.00%) 90.00
other 809778 ( 5.44%) 527645177 ( 4.89%) 651.59
icmp 1380873 ( 9.28%) 147613151 ( 1.37%) 106.90
ipip 354 ( 0.00%) 44916 ( 0.00%) 126.88
ip6 29123 ( 0.20%) 5302707 ( 0.05%) 182.08
other 9597 ( 0.06%) 1274623 ( 0.01%) 132.81
frag 48262 ( 0.32%) 54092199 ( 0.50%) 1120.80
ip6 104855 ( 0.71%) 12880168 ( 0.12%) 122.84
tcp6 87191 ( 0.59%) 9828780 ( 0.09%) 112.73
http(s) 1320 ( 0.01%) 923673 ( 0.01%) 699.75
http(c) 78582 ( 0.53%) 6723869 ( 0.06%) 85.57
smtp 923 ( 0.01%) 344979 ( 0.00%) 373.76
ftp 2333 ( 0.02%) 242107 ( 0.00%) 103.77
bgp 395 ( 0.00%) 35475 ( 0.00%) 89.81
other 3638 ( 0.02%) 1558677 ( 0.01%) 428.44
udp6 12195 ( 0.08%) 2260337 ( 0.02%) 185.35
dns 9572 ( 0.06%) 1524139 ( 0.01%) 159.23
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
other 2622 ( 0.02%) 735632 ( 0.01%) 280.56
icmp6 5280 ( 0.04%) 635478 ( 0.01%) 120.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 159 ( 0.00%) 151493 ( 0.00%) 952.79
tcpdump file: 200904020345.dump.gz (356.11 MB)