Traffic Trace Info
DumpFile: 200904020800.dump
FileSize: 798.56MB
Id: 200904020800
StartTime: Thu Apr 2 08:00:00 2009
EndTime: Thu Apr 2 08:15:00 2009
TotalTime: 900.05 seconds
TotalCapSize: 623.89MB CapLen: 96 bytes
# of packets: 11444728 (8116.85MB)
AvgRate: 75.66Mbps stddev:10.64M
IP flow (unique src/dst pair) Information
# of flows: 943285 (avg. 12.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 2.7% 2.4% 2.1% 1.9% 1.7% 1.7% 1.5% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 468754
Top 10 bandwidth usage (bytes/total in %):
23.8% 20.2% 9.8% 6.9% 5.7% 3.4% 2.9% 2.7% 2.5% 2.4%
# of IPv6 addresses: 2488
Top 10 bandwidth usage (bytes/total in %):
30.1% 21.7% 19.3% 14.2% 13.7% 13.2% 7.7% 5.7% 5.1% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020800.pktlen.png)
detailed numbers
[ 32- 63]: 2459603
[ 64- 127]: 2517720
[ 128- 255]: 487751
[ 256- 511]: 313110
[ 512- 1023]: 278937
[ 1024- 2047]: 5387607
Protocol Breakdown
![[protocol breakdown chart]](200904020800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11444728 (100.00%) 8511138904 (100.00%) 743.67
ip 11407019 ( 99.67%) 8501444271 ( 99.89%) 745.28
tcp 9217733 ( 80.54%) 7881608322 ( 92.60%) 855.05
http(s) 4256782 ( 37.19%) 5767844846 ( 67.77%) 1354.98
http(c) 1948519 ( 17.03%) 151398978 ( 1.78%) 77.70
squid 422136 ( 3.69%) 260476458 ( 3.06%) 617.04
smtp 277643 ( 2.43%) 63995958 ( 0.75%) 230.50
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 53391 ( 0.47%) 30811910 ( 0.36%) 577.10
pop3 5406 ( 0.05%) 3602671 ( 0.04%) 666.42
imap 3053 ( 0.03%) 325442 ( 0.00%) 106.60
telnet 2183 ( 0.02%) 159300 ( 0.00%) 72.97
ssh 56083 ( 0.49%) 63492283 ( 0.75%) 1132.11
dns 15523 ( 0.14%) 5149579 ( 0.06%) 331.74
bgp 155 ( 0.00%) 57108 ( 0.00%) 368.44
napster 52 ( 0.00%) 7006 ( 0.00%) 134.73
realaud 29 ( 0.00%) 1980 ( 0.00%) 68.28
rtsp 178 ( 0.00%) 25590 ( 0.00%) 143.76
icecast 177 ( 0.00%) 11660 ( 0.00%) 65.88
hotline 10 ( 0.00%) 1322 ( 0.00%) 132.20
other 2176314 ( 19.02%) 1534240291 ( 18.03%) 704.97
udp 1521716 ( 13.30%) 528455248 ( 6.21%) 347.28
dns 955627 ( 8.35%) 198547463 ( 2.33%) 207.77
realaud 1819 ( 0.02%) 110006 ( 0.00%) 60.48
halflif 19 ( 0.00%) 1355 ( 0.00%) 71.32
starcra 26 ( 0.00%) 4811 ( 0.00%) 185.04
everque 60 ( 0.00%) 12409 ( 0.00%) 206.82
unreal 15 ( 0.00%) 1875 ( 0.00%) 125.00
quake 6 ( 0.00%) 527 ( 0.00%) 87.83
cuseeme 4 ( 0.00%) 361 ( 0.00%) 90.25
other 560725 ( 4.90%) 329423459 ( 3.87%) 587.50
icmp 630305 ( 5.51%) 85441513 ( 1.00%) 135.56
ipip 325 ( 0.00%) 41346 ( 0.00%) 127.22
ip6 27771 ( 0.24%) 4616047 ( 0.05%) 166.22
other 9169 ( 0.08%) 1281795 ( 0.02%) 139.80
frag 46523 ( 0.41%) 49753531 ( 0.58%) 1069.44
ip6 37709 ( 0.33%) 9694633 ( 0.11%) 257.09
tcp6 17218 ( 0.15%) 6053669 ( 0.07%) 351.59
http(s) 1912 ( 0.02%) 1379189 ( 0.02%) 721.33
http(c) 3807 ( 0.03%) 681188 ( 0.01%) 178.93
smtp 307 ( 0.00%) 126937 ( 0.00%) 413.48
ftp 4155 ( 0.04%) 416327 ( 0.00%) 100.20
imap 163 ( 0.00%) 73358 ( 0.00%) 450.05
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 384 ( 0.00%) 34080 ( 0.00%) 88.75
other 6488 ( 0.06%) 3342418 ( 0.04%) 515.17
udp6 13162 ( 0.12%) 2409927 ( 0.03%) 183.10
dns 10145 ( 0.09%) 1526662 ( 0.02%) 150.48
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
other 3016 ( 0.03%) 883153 ( 0.01%) 292.82
icmp6 6830 ( 0.06%) 783294 ( 0.01%) 114.68
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 468 ( 0.00%) 443527 ( 0.01%) 947.71
tcpdump file: 200904020800.dump.gz (285.01 MB)