Traffic Trace Info
DumpFile: 200904020400.dump
FileSize: 986.75MB
Id: 200904020400
StartTime: Thu Apr 2 04:00:00 2009
EndTime: Thu Apr 2 04:15:01 2009
TotalTime: 900.25 seconds
TotalCapSize: 768.52MB CapLen: 96 bytes
# of packets: 14301807 (9967.19MB)
AvgRate: 92.87Mbps stddev:11.85M
IP flow (unique src/dst pair) Information
# of flows: 732738 (avg. 19.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 2.1% 2.1% 2.0% 1.5% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 455040
Top 10 bandwidth usage (bytes/total in %):
20.5% 16.3% 9.2% 6.5% 4.6% 4.4% 3.4% 2.7% 2.5% 2.1%
# of IPv6 addresses: 2734
Top 10 bandwidth usage (bytes/total in %):
33.9% 22.5% 17.5% 17.5% 16.9% 9.4% 8.8% 6.6% 4.6% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020400.pktlen.png)
detailed numbers
[ 32- 63]: 3526485
[ 64- 127]: 2803935
[ 128- 255]: 730625
[ 256- 511]: 323489
[ 512- 1023]: 284243
[ 1024- 2047]: 6633030
Protocol Breakdown
![[protocol breakdown chart]](200904020400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14301807 (100.00%) 10451352874 (100.00%) 730.77
ip 14194620 ( 99.25%) 10436370550 ( 99.86%) 735.23
tcp 11276630 ( 78.85%) 9664292762 ( 92.47%) 857.02
http(s) 5569967 ( 38.95%) 7630107044 ( 73.01%) 1369.87
http(c) 2873543 ( 20.09%) 209189358 ( 2.00%) 72.80
squid 585877 ( 4.10%) 427909726 ( 4.09%) 730.37
smtp 394167 ( 2.76%) 55988970 ( 0.54%) 142.04
nntp 27 ( 0.00%) 16485 ( 0.00%) 610.56
ftp 126318 ( 0.88%) 110805919 ( 1.06%) 877.20
pop3 6782 ( 0.05%) 4606668 ( 0.04%) 679.25
imap 3608 ( 0.03%) 756097 ( 0.01%) 209.56
telnet 3602 ( 0.03%) 290487 ( 0.00%) 80.65
ssh 38188 ( 0.27%) 15194804 ( 0.15%) 397.89
dns 19275 ( 0.13%) 5510461 ( 0.05%) 285.89
bgp 135 ( 0.00%) 43952 ( 0.00%) 325.57
napster 30 ( 0.00%) 5145 ( 0.00%) 171.50
realaud 38 ( 0.00%) 2570 ( 0.00%) 67.63
rtsp 163 ( 0.00%) 22740 ( 0.00%) 139.51
icecast 173 ( 0.00%) 11280 ( 0.00%) 65.20
hotline 21 ( 0.00%) 1602 ( 0.00%) 76.29
other 1654615 ( 11.57%) 1203823394 ( 11.52%) 727.55
udp 2001108 ( 13.99%) 647914985 ( 6.20%) 323.78
dns 1247915 ( 8.73%) 241454856 ( 2.31%) 193.49
realaud 1827 ( 0.01%) 110945 ( 0.00%) 60.73
halflif 33 ( 0.00%) 3217 ( 0.00%) 97.48
starcra 37 ( 0.00%) 6401 ( 0.00%) 173.00
everque 65 ( 0.00%) 12671 ( 0.00%) 194.94
unreal 14 ( 0.00%) 2239 ( 0.00%) 159.93
quake 27 ( 0.00%) 2322 ( 0.00%) 86.00
cuseeme 11 ( 0.00%) 1909 ( 0.00%) 173.55
other 750947 ( 5.25%) 406113698 ( 3.89%) 540.80
icmp 873947 ( 6.11%) 115673065 ( 1.11%) 132.36
ipip 327 ( 0.00%) 39152 ( 0.00%) 119.73
ip6 32806 ( 0.23%) 7114096 ( 0.07%) 216.85
other 9802 ( 0.07%) 1336490 ( 0.01%) 136.35
frag 47729 ( 0.33%) 53465395 ( 0.51%) 1120.19
ip6 107187 ( 0.75%) 14982324 ( 0.14%) 139.78
tcp6 85020 ( 0.59%) 10741507 ( 0.10%) 126.34
http(s) 1598 ( 0.01%) 942357 ( 0.01%) 589.71
http(c) 75778 ( 0.53%) 6519340 ( 0.06%) 86.03
smtp 388 ( 0.00%) 185762 ( 0.00%) 478.77
ftp 2383 ( 0.02%) 246851 ( 0.00%) 103.59
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 462 ( 0.00%) 115.50
bgp 378 ( 0.00%) 32654 ( 0.00%) 86.39
other 4489 ( 0.03%) 2813909 ( 0.03%) 626.85
udp6 16330 ( 0.11%) 3299149 ( 0.03%) 202.03
dns 12486 ( 0.09%) 2149192 ( 0.02%) 172.13
realaud 2 ( 0.00%) 199 ( 0.00%) 99.50
starcra 1 ( 0.00%) 98 ( 0.00%) 98.00
everque 1 ( 0.00%) 566 ( 0.00%) 566.00
other 3840 ( 0.03%) 1149094 ( 0.01%) 299.24
icmp6 5573 ( 0.04%) 714836 ( 0.01%) 128.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 234 ( 0.00%) 222752 ( 0.00%) 951.93
tcpdump file: 200904020400.dump.gz (348.95 MB)