Traffic Trace Info
DumpFile: 200904020645.dump
FileSize: 820.61MB
Id: 200904020645
StartTime: Thu Apr 2 06:45:00 2009
EndTime: Thu Apr 2 07:00:01 2009
TotalTime: 900.44 seconds
TotalCapSize: 641.24MB CapLen: 96 bytes
# of packets: 11754451 (7685.45MB)
AvgRate: 71.60Mbps stddev:10.06M
IP flow (unique src/dst pair) Information
# of flows: 772364 (avg. 15.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 2.1% 1.9% 1.7% 1.6% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 448492
Top 10 bandwidth usage (bytes/total in %):
19.6% 14.3% 8.3% 5.1% 3.8% 3.4% 2.9% 2.9% 2.6% 2.6%
# of IPv6 addresses: 2128
Top 10 bandwidth usage (bytes/total in %):
31.5% 31.2% 12.7% 10.0% 9.2% 6.7% 5.9% 5.8% 5.8% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020645.pktlen.png)
detailed numbers
[ 32- 63]: 2560103
[ 64- 127]: 2949545
[ 128- 255]: 602245
[ 256- 511]: 312006
[ 512- 1023]: 347562
[ 1024- 2047]: 4982990
Protocol Breakdown
![[protocol breakdown chart]](200904020645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11754451 (100.00%) 8058777370 (100.00%) 685.59
ip 11722409 ( 99.73%) 8051149140 ( 99.91%) 686.82
tcp 9476669 ( 80.62%) 7368389141 ( 91.43%) 777.53
http(s) 4248601 ( 36.14%) 5740955747 ( 71.24%) 1351.26
http(c) 2072115 ( 17.63%) 156238728 ( 1.94%) 75.40
squid 478208 ( 4.07%) 320846961 ( 3.98%) 670.94
smtp 259350 ( 2.21%) 47291685 ( 0.59%) 182.35
ftp 58904 ( 0.50%) 29936242 ( 0.37%) 508.22
pop3 5243 ( 0.04%) 3358048 ( 0.04%) 640.48
imap 3312 ( 0.03%) 344612 ( 0.00%) 104.05
telnet 4273 ( 0.04%) 322359 ( 0.00%) 75.44
ssh 635059 ( 5.40%) 86753617 ( 1.08%) 136.61
dns 15210 ( 0.13%) 2856951 ( 0.04%) 187.83
bgp 133 ( 0.00%) 44349 ( 0.00%) 333.45
napster 38 ( 0.00%) 5646 ( 0.00%) 148.58
realaud 49 ( 0.00%) 3274 ( 0.00%) 66.82
rtsp 4271 ( 0.04%) 4907474 ( 0.06%) 1149.02
icecast 187 ( 0.00%) 12134 ( 0.00%) 64.89
other 1691705 ( 14.39%) 974510654 ( 12.09%) 576.05
udp 1760420 ( 14.98%) 587949577 ( 7.30%) 333.98
dns 921103 ( 7.84%) 195383415 ( 2.42%) 212.12
realaud 3045 ( 0.03%) 184421 ( 0.00%) 60.57
halflif 20 ( 0.00%) 1643 ( 0.00%) 82.15
starcra 14 ( 0.00%) 2366 ( 0.00%) 169.00
everque 45 ( 0.00%) 9420 ( 0.00%) 209.33
unreal 6 ( 0.00%) 796 ( 0.00%) 132.67
quake 16 ( 0.00%) 1245 ( 0.00%) 77.81
cuseeme 2 ( 0.00%) 200 ( 0.00%) 100.00
other 826636 ( 7.03%) 391620172 ( 4.86%) 473.75
icmp 434854 ( 3.70%) 69691603 ( 0.86%) 160.26
ipip 335 ( 0.00%) 41834 ( 0.00%) 124.88
ip6 41133 ( 0.35%) 23871157 ( 0.30%) 580.34
other 8998 ( 0.08%) 1205828 ( 0.01%) 134.01
frag 86348 ( 0.73%) 81446626 ( 1.01%) 943.24
ip6 32042 ( 0.27%) 7628230 ( 0.09%) 238.07
tcp6 15402 ( 0.13%) 4805839 ( 0.06%) 312.03
http(s) 731 ( 0.01%) 509707 ( 0.01%) 697.27
http(c) 3207 ( 0.03%) 433180 ( 0.01%) 135.07
smtp 436 ( 0.00%) 159032 ( 0.00%) 364.75
ftp 4204 ( 0.04%) 440947 ( 0.01%) 104.89
imap 515 ( 0.00%) 438946 ( 0.01%) 852.32
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 382 ( 0.00%) 33573 ( 0.00%) 87.89
other 5925 ( 0.05%) 2790282 ( 0.03%) 470.93
udp6 10802 ( 0.09%) 1874609 ( 0.02%) 173.54
dns 8020 ( 0.07%) 1213987 ( 0.02%) 151.37
starcra 4 ( 0.00%) 995 ( 0.00%) 248.75
other 2778 ( 0.02%) 659627 ( 0.01%) 237.45
icmp6 5512 ( 0.05%) 663634 ( 0.01%) 120.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 296 ( 0.00%) 280068 ( 0.00%) 946.18
tcpdump file: 200904020645.dump.gz (294.17 MB)