Traffic Trace Info
DumpFile: 200904020500.dump
FileSize: 928.71MB
Id: 200904020500
StartTime: Thu Apr 2 05:00:01 2009
EndTime: Thu Apr 2 05:15:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 724.58MB CapLen: 96 bytes
# of packets: 13377288 (8927.81MB)
AvgRate: 83.24Mbps stddev:10.11M
IP flow (unique src/dst pair) Information
# of flows: 991764 (avg. 13.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.2% 1.7% 1.2% 1.2% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 569069
Top 10 bandwidth usage (bytes/total in %):
20.2% 14.3% 9.5% 8.6% 4.8% 4.0% 3.8% 3.2% 3.0% 2.3%
# of IPv6 addresses: 2246
Top 10 bandwidth usage (bytes/total in %):
25.6% 24.2% 24.2% 17.4% 13.1% 8.3% 7.5% 7.1% 4.9% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020500.pktlen.png)
detailed numbers
[ 32- 63]: 3129963
[ 64- 127]: 3077767
[ 128- 255]: 690932
[ 256- 511]: 309264
[ 512- 1023]: 255757
[ 1024- 2047]: 5913605
Protocol Breakdown
![[protocol breakdown chart]](200904020500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13377288 (100.00%) 9361483183 (100.00%) 699.80
ip 13312090 ( 99.51%) 9351457465 ( 99.89%) 702.48
tcp 10572749 ( 79.04%) 8471252504 ( 90.49%) 801.23
http(s) 4820943 ( 36.04%) 6601640656 ( 70.52%) 1369.37
http(c) 2454207 ( 18.35%) 181928674 ( 1.94%) 74.13
squid 465516 ( 3.48%) 302655338 ( 3.23%) 650.15
smtp 325965 ( 2.44%) 45163544 ( 0.48%) 138.55
ftp 122155 ( 0.91%) 113201895 ( 1.21%) 926.71
pop3 4571 ( 0.03%) 2814353 ( 0.03%) 615.70
imap 3393 ( 0.03%) 426809 ( 0.00%) 125.79
telnet 3443 ( 0.03%) 240431 ( 0.00%) 69.83
ssh 10858 ( 0.08%) 1770477 ( 0.02%) 163.06
dns 17586 ( 0.13%) 3113984 ( 0.03%) 177.07
bgp 135 ( 0.00%) 40427 ( 0.00%) 299.46
napster 30 ( 0.00%) 4926 ( 0.00%) 164.20
realaud 32 ( 0.00%) 2150 ( 0.00%) 67.19
rtsp 160 ( 0.00%) 22560 ( 0.00%) 141.00
icecast 163 ( 0.00%) 10478 ( 0.00%) 64.28
hotline 19 ( 0.00%) 1896 ( 0.00%) 99.79
other 2343462 ( 17.52%) 1218207246 ( 13.01%) 519.83
udp 2001122 ( 14.96%) 757453809 ( 8.09%) 378.51
dns 1128928 ( 8.44%) 224335662 ( 2.40%) 198.72
realaud 1822 ( 0.01%) 109983 ( 0.00%) 60.36
halflif 34 ( 0.00%) 3233 ( 0.00%) 95.09
starcra 33 ( 0.00%) 5208 ( 0.00%) 157.82
everque 58 ( 0.00%) 11133 ( 0.00%) 191.95
unreal 21 ( 0.00%) 2496 ( 0.00%) 118.86
quake 9 ( 0.00%) 819 ( 0.00%) 91.00
cuseeme 7 ( 0.00%) 937 ( 0.00%) 133.86
other 870028 ( 6.50%) 532819078 ( 5.69%) 612.42
icmp 686631 ( 5.13%) 99794246 ( 1.07%) 145.34
ipip 306 ( 0.00%) 36344 ( 0.00%) 118.77
ip6 41941 ( 0.31%) 21646778 ( 0.23%) 516.12
other 9341 ( 0.07%) 1273784 ( 0.01%) 136.36
frag 46027 ( 0.34%) 51385090 ( 0.55%) 1116.41
ip6 65198 ( 0.49%) 10025718 ( 0.11%) 153.77
tcp6 47348 ( 0.35%) 6978840 ( 0.07%) 147.39
http(s) 756 ( 0.01%) 491092 ( 0.01%) 649.59
http(c) 35392 ( 0.26%) 2855685 ( 0.03%) 80.69
smtp 510 ( 0.00%) 172189 ( 0.00%) 337.63
ftp 4183 ( 0.03%) 436117 ( 0.00%) 104.26
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 419 ( 0.00%) 39175 ( 0.00%) 93.50
other 6086 ( 0.05%) 2984410 ( 0.03%) 490.37
udp6 12185 ( 0.09%) 2232892 ( 0.02%) 183.25
dns 9535 ( 0.07%) 1560077 ( 0.02%) 163.62
starcra 3 ( 0.00%) 442 ( 0.00%) 147.33
other 2647 ( 0.02%) 672373 ( 0.01%) 254.01
icmp6 5502 ( 0.04%) 686180 ( 0.01%) 124.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 133 ( 0.00%) 123726 ( 0.00%) 930.27
tcpdump file: 200904020500.dump.gz (327.92 MB)