Traffic Trace Info
DumpFile: 200904020700.dump
FileSize: 834.93MB
Id: 200904020700
StartTime: Thu Apr 2 07:00:01 2009
EndTime: Thu Apr 2 07:15:00 2009
TotalTime: 899.52 seconds
TotalCapSize: 651.10MB CapLen: 96 bytes
# of packets: 12046946 (8102.26MB)
AvgRate: 75.55Mbps stddev:13.50M
IP flow (unique src/dst pair) Information
# of flows: 563530 (avg. 21.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.3% 2.1% 2.0% 1.9% 1.5% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 360765
Top 10 bandwidth usage (bytes/total in %):
18.7% 17.0% 7.0% 7.0% 3.3% 3.3% 3.0% 2.9% 2.9% 2.7%
# of IPv6 addresses: 2084
Top 10 bandwidth usage (bytes/total in %):
50.1% 42.3% 12.3% 11.1% 8.0% 7.2% 6.2% 5.7% 3.7% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020700.pktlen.png)
detailed numbers
[ 32- 63]: 2416204
[ 64- 127]: 3071924
[ 128- 255]: 622592
[ 256- 511]: 300983
[ 512- 1023]: 298774
[ 1024- 2047]: 5336469
Protocol Breakdown
![[protocol breakdown chart]](200904020700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12046946 (100.00%) 8495831249 (100.00%) 705.23
ip 12011372 ( 99.70%) 8485322619 ( 99.88%) 706.44
tcp 9429287 ( 78.27%) 7641152478 ( 89.94%) 810.36
http(s) 4461373 ( 37.03%) 6057340896 ( 71.30%) 1357.73
http(c) 2012764 ( 16.71%) 155427847 ( 1.83%) 77.22
squid 548925 ( 4.56%) 382916161 ( 4.51%) 697.57
smtp 290425 ( 2.41%) 47849678 ( 0.56%) 164.76
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 52232 ( 0.43%) 31872509 ( 0.38%) 610.21
pop3 5092 ( 0.04%) 3523279 ( 0.04%) 691.92
imap 2945 ( 0.02%) 316360 ( 0.00%) 107.42
telnet 3060 ( 0.03%) 215390 ( 0.00%) 70.39
ssh 618816 ( 5.14%) 75809850 ( 0.89%) 122.51
dns 13864 ( 0.12%) 1502938 ( 0.02%) 108.41
bgp 145 ( 0.00%) 50194 ( 0.00%) 346.17
napster 78 ( 0.00%) 15916 ( 0.00%) 204.05
realaud 63 ( 0.00%) 4680 ( 0.00%) 74.29
rtsp 4393 ( 0.04%) 5960060 ( 0.07%) 1356.72
icecast 181 ( 0.00%) 12362 ( 0.00%) 68.30
hotline 19 ( 0.00%) 1947 ( 0.00%) 102.47
other 1414910 ( 11.74%) 878332291 ( 10.34%) 620.77
udp 2089495 ( 17.34%) 763509636 ( 8.99%) 365.40
dns 896241 ( 7.44%) 189649732 ( 2.23%) 211.61
realaud 1819 ( 0.02%) 109708 ( 0.00%) 60.31
halflif 20 ( 0.00%) 1580 ( 0.00%) 79.00
starcra 16 ( 0.00%) 2912 ( 0.00%) 182.00
everque 64 ( 0.00%) 12374 ( 0.00%) 193.34
unreal 17 ( 0.00%) 2212 ( 0.00%) 130.12
quake 12 ( 0.00%) 1030 ( 0.00%) 85.83
cuseeme 5 ( 0.00%) 836 ( 0.00%) 167.20
other 1183479 ( 9.82%) 573087890 ( 6.75%) 484.24
icmp 455783 ( 3.78%) 74587366 ( 0.88%) 163.65
ipip 342 ( 0.00%) 41608 ( 0.00%) 121.66
ip6 26430 ( 0.22%) 4639097 ( 0.05%) 175.52
other 10035 ( 0.08%) 1392434 ( 0.02%) 138.76
frag 79534 ( 0.66%) 76066704 ( 0.90%) 956.40
ip6 35572 ( 0.30%) 10508510 ( 0.12%) 295.42
tcp6 17839 ( 0.15%) 7752305 ( 0.09%) 434.57
http(s) 1113 ( 0.01%) 841086 ( 0.01%) 755.69
http(c) 3735 ( 0.03%) 573870 ( 0.01%) 153.65
smtp 424 ( 0.00%) 190934 ( 0.00%) 450.32
ftp 4116 ( 0.03%) 424957 ( 0.01%) 103.25
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 630 ( 0.00%) 157.50
bgp 387 ( 0.00%) 34194 ( 0.00%) 88.36
realaud 4 ( 0.00%) 356 ( 0.00%) 89.00
other 8054 ( 0.07%) 5686106 ( 0.07%) 706.00
udp6 12487 ( 0.10%) 2032934 ( 0.02%) 162.80
dns 10336 ( 0.09%) 1495732 ( 0.02%) 144.71
starcra 3 ( 0.00%) 394 ( 0.00%) 131.33
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2147 ( 0.02%) 536702 ( 0.01%) 249.98
icmp6 5079 ( 0.04%) 591802 ( 0.01%) 116.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 136 ( 0.00%) 127253 ( 0.00%) 935.68
tcpdump file: 200904020700.dump.gz (298.72 MB)