Traffic Trace Info
DumpFile: 200904020815.dump
FileSize: 833.72MB
Id: 200904020815
StartTime: Thu Apr 2 08:15:00 2009
EndTime: Thu Apr 2 08:30:01 2009
TotalTime: 900.68 seconds
TotalCapSize: 653.33MB CapLen: 96 bytes
# of packets: 11820037 (8272.37MB)
AvgRate: 77.04Mbps stddev:13.14M
IP flow (unique src/dst pair) Information
# of flows: 976085 (avg. 12.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.2% 2.6% 2.1% 2.1% 1.8% 1.8% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 392250
Top 10 bandwidth usage (bytes/total in %):
21.1% 13.7% 13.5% 5.9% 5.6% 4.3% 4.3% 2.8% 2.7% 2.6%
# of IPv6 addresses: 2233
Top 10 bandwidth usage (bytes/total in %):
23.4% 16.7% 16.4% 16.4% 13.7% 9.8% 7.1% 6.9% 5.9% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020815.pktlen.png)
detailed numbers
[ 32- 63]: 2507150
[ 64- 127]: 2781510
[ 128- 255]: 425514
[ 256- 511]: 338876
[ 512- 1023]: 316610
[ 1024- 2047]: 5450377
Protocol Breakdown
![[protocol breakdown chart]](200904020815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11820037 (100.00%) 8674205694 (100.00%) 733.86
ip 11783061 ( 99.69%) 8666434623 ( 99.91%) 735.50
tcp 9564042 ( 80.91%) 8044439526 ( 92.74%) 841.11
http(s) 4509758 ( 38.15%) 5944737668 ( 68.53%) 1318.19
http(c) 1880490 ( 15.91%) 152745353 ( 1.76%) 81.23
squid 754753 ( 6.39%) 520179793 ( 6.00%) 689.21
smtp 299254 ( 2.53%) 53626122 ( 0.62%) 179.20
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 52770 ( 0.45%) 31630024 ( 0.36%) 599.39
pop3 6497 ( 0.05%) 4276574 ( 0.05%) 658.24
imap 3770 ( 0.03%) 394111 ( 0.00%) 104.54
telnet 2293 ( 0.02%) 168286 ( 0.00%) 73.39
ssh 12205 ( 0.10%) 7444271 ( 0.09%) 609.94
dns 13644 ( 0.12%) 1436204 ( 0.02%) 105.26
bgp 141 ( 0.00%) 47395 ( 0.00%) 336.13
napster 38 ( 0.00%) 5892 ( 0.00%) 155.05
realaud 25 ( 0.00%) 1698 ( 0.00%) 67.92
rtsp 177 ( 0.00%) 25662 ( 0.00%) 144.98
icecast 188 ( 0.00%) 12818 ( 0.00%) 68.18
hotline 4 ( 0.00%) 276 ( 0.00%) 69.00
other 2028029 ( 17.16%) 1327707019 ( 15.31%) 654.68
udp 1387807 ( 11.74%) 517310892 ( 5.96%) 372.75
dns 825247 ( 6.98%) 173208193 ( 2.00%) 209.89
realaud 1825 ( 0.02%) 110331 ( 0.00%) 60.46
halflif 13 ( 0.00%) 1059 ( 0.00%) 81.46
starcra 21 ( 0.00%) 4036 ( 0.00%) 192.19
everque 53 ( 0.00%) 10630 ( 0.00%) 200.57
unreal 11 ( 0.00%) 4498 ( 0.00%) 408.91
quake 19 ( 0.00%) 5146 ( 0.00%) 270.84
cuseeme 4 ( 0.00%) 406 ( 0.00%) 101.50
other 560143 ( 4.74%) 343760097 ( 3.96%) 613.70
icmp 791990 ( 6.70%) 96984616 ( 1.12%) 122.46
ipip 322 ( 0.00%) 39476 ( 0.00%) 122.60
ip6 29537 ( 0.25%) 6411374 ( 0.07%) 217.06
other 9363 ( 0.08%) 1248739 ( 0.01%) 133.37
frag 37266 ( 0.32%) 41586146 ( 0.48%) 1115.93
ip6 36976 ( 0.31%) 7771071 ( 0.09%) 210.17
tcp6 17105 ( 0.14%) 4470336 ( 0.05%) 261.35
http(s) 1971 ( 0.02%) 1276459 ( 0.01%) 647.62
http(c) 4238 ( 0.04%) 745415 ( 0.01%) 175.89
smtp 410 ( 0.00%) 158938 ( 0.00%) 387.65
ftp 4212 ( 0.04%) 421629 ( 0.00%) 100.10
imap 113 ( 0.00%) 79245 ( 0.00%) 701.28
bgp 372 ( 0.00%) 32758 ( 0.00%) 88.06
other 5789 ( 0.05%) 1755892 ( 0.02%) 303.32
udp6 12837 ( 0.11%) 2265551 ( 0.03%) 176.49
dns 9639 ( 0.08%) 1464290 ( 0.02%) 151.91
cuseeme 1 ( 0.00%) 116 ( 0.00%) 116.00
other 3197 ( 0.03%) 801145 ( 0.01%) 250.59
icmp6 6753 ( 0.06%) 795643 ( 0.01%) 117.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 251 ( 0.00%) 235461 ( 0.00%) 938.09
tcpdump file: 200904020815.dump.gz (289.73 MB)