Traffic Trace Info
DumpFile: 200904020600.dump
FileSize: 919.91MB
Id: 200904020600
StartTime: Thu Apr 2 06:00:00 2009
EndTime: Thu Apr 2 06:15:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 719.81MB CapLen: 96 bytes
# of packets: 13113134 (9032.90MB)
AvgRate: 84.23Mbps stddev:12.08M
IP flow (unique src/dst pair) Information
# of flows: 619040 (avg. 21.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.2% 1.8% 1.7% 1.6% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 393557
Top 10 bandwidth usage (bytes/total in %):
23.5% 16.2% 9.1% 6.5% 6.1% 4.4% 3.9% 3.2% 1.9% 1.8%
# of IPv6 addresses: 2648
Top 10 bandwidth usage (bytes/total in %):
30.9% 20.8% 17.9% 16.0% 10.2% 9.3% 6.7% 5.3% 4.4% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020600.pktlen.png)
detailed numbers
[ 32- 63]: 2664458
[ 64- 127]: 3212160
[ 128- 255]: 648789
[ 256- 511]: 306249
[ 512- 1023]: 377162
[ 1024- 2047]: 5904316
Protocol Breakdown
![[protocol breakdown chart]](200904020600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13113134 (100.00%) 9471686493 (100.00%) 722.31
ip 13079052 ( 99.74%) 9463481466 ( 99.91%) 723.56
tcp 10638826 ( 81.13%) 8876166198 ( 93.71%) 834.32
http(s) 5102864 ( 38.91%) 6938064845 ( 73.25%) 1359.64
http(c) 2279590 ( 17.38%) 167565422 ( 1.77%) 73.51
squid 553772 ( 4.22%) 388486285 ( 4.10%) 701.53
smtp 309037 ( 2.36%) 40550106 ( 0.43%) 131.21
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 68223 ( 0.52%) 46103241 ( 0.49%) 675.77
pop3 5190 ( 0.04%) 3364868 ( 0.04%) 648.34
imap 2988 ( 0.02%) 317035 ( 0.00%) 106.10
telnet 3544 ( 0.03%) 248792 ( 0.00%) 70.20
ssh 733714 ( 5.60%) 119377296 ( 1.26%) 162.70
dns 19276 ( 0.15%) 6828497 ( 0.07%) 354.25
bgp 140 ( 0.00%) 44551 ( 0.00%) 318.22
napster 36 ( 0.00%) 5677 ( 0.00%) 157.69
realaud 43 ( 0.00%) 2818 ( 0.00%) 65.53
rtsp 341 ( 0.00%) 48752 ( 0.00%) 142.97
icecast 150 ( 0.00%) 9784 ( 0.00%) 65.23
hotline 5 ( 0.00%) 628 ( 0.00%) 125.60
other 1559891 ( 11.90%) 1165146281 ( 12.30%) 746.94
udp 1680393 ( 12.81%) 471189543 ( 4.97%) 280.40
dns 1085847 ( 8.28%) 203709835 ( 2.15%) 187.60
realaud 3663 ( 0.03%) 221098 ( 0.00%) 60.36
halflif 29 ( 0.00%) 2355 ( 0.00%) 81.21
starcra 37 ( 0.00%) 6687 ( 0.00%) 180.73
everque 82 ( 0.00%) 14981 ( 0.00%) 182.70
unreal 14 ( 0.00%) 2069 ( 0.00%) 147.79
quake 24 ( 0.00%) 1895 ( 0.00%) 78.96
cuseeme 4 ( 0.00%) 347 ( 0.00%) 86.75
other 590498 ( 4.50%) 267058457 ( 2.82%) 452.26
icmp 709057 ( 5.41%) 93011790 ( 0.98%) 131.18
ipip 324 ( 0.00%) 39456 ( 0.00%) 121.78
ip6 41080 ( 0.31%) 21800596 ( 0.23%) 530.69
other 9372 ( 0.07%) 1273883 ( 0.01%) 135.92
frag 47783 ( 0.36%) 52069161 ( 0.55%) 1089.70
ip6 34082 ( 0.26%) 8205027 ( 0.09%) 240.74
tcp6 15699 ( 0.12%) 4706913 ( 0.05%) 299.82
http(s) 851 ( 0.01%) 549938 ( 0.01%) 646.23
http(c) 3787 ( 0.03%) 570843 ( 0.01%) 150.74
smtp 340 ( 0.00%) 150823 ( 0.00%) 443.60
ftp 4286 ( 0.03%) 447480 ( 0.00%) 104.41
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 383 ( 0.00%) 34490 ( 0.00%) 90.05
other 6050 ( 0.05%) 2953167 ( 0.03%) 488.13
udp6 12539 ( 0.10%) 2509873 ( 0.03%) 200.17
dns 8797 ( 0.07%) 1393192 ( 0.01%) 158.37
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
starcra 3 ( 0.00%) 394 ( 0.00%) 131.33
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3736 ( 0.03%) 1115968 ( 0.01%) 298.71
icmp6 5460 ( 0.04%) 650966 ( 0.01%) 119.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 354 ( 0.00%) 333195 ( 0.00%) 941.23
tcpdump file: 200904020600.dump.gz (326.49 MB)