Traffic Trace Info
DumpFile: 200904020830.dump
FileSize: 913.31MB
Id: 200904020830
StartTime: Thu Apr 2 08:30:01 2009
EndTime: Thu Apr 2 08:45:00 2009
TotalTime: 899.62 seconds
TotalCapSize: 719.86MB CapLen: 96 bytes
# of packets: 12676667 (7221.65MB)
AvgRate: 67.33Mbps stddev:11.08M
IP flow (unique src/dst pair) Information
# of flows: 895731 (avg. 14.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.4% 3.0% 1.9% 1.6% 1.6% 1.6% 1.5% 1.4% 1.0%
IP address Information
# of IPv4 addresses: 465457
Top 10 bandwidth usage (bytes/total in %):
15.7% 12.2% 12.0% 7.2% 4.8% 3.6% 3.5% 3.5% 3.3% 3.1%
# of IPv6 addresses: 1820
Top 10 bandwidth usage (bytes/total in %):
19.8% 16.0% 15.8% 14.4% 10.0% 9.5% 7.3% 6.0% 5.6% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020830.pktlen.png)
detailed numbers
[ 32- 63]: 2379213
[ 64- 127]: 4379476
[ 128- 255]: 599630
[ 256- 511]: 393827
[ 512- 1023]: 384677
[ 1024- 2047]: 4539844
Protocol Breakdown
![[protocol breakdown chart]](200904020830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12676667 (100.00%) 7572445902 (100.00%) 597.35
ip 12640216 ( 99.71%) 7564448517 ( 99.89%) 598.44
tcp 10010599 ( 78.97%) 7058928018 ( 93.22%) 705.15
http(s) 4066288 ( 32.08%) 5306196771 ( 70.07%) 1304.92
http(c) 1660776 ( 13.10%) 145329332 ( 1.92%) 87.51
squid 671718 ( 5.30%) 417783763 ( 5.52%) 621.96
smtp 315500 ( 2.49%) 63546950 ( 0.84%) 201.42
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 54140 ( 0.43%) 29610871 ( 0.39%) 546.93
pop3 11010 ( 0.09%) 11015630 ( 0.15%) 1000.51
imap 3633 ( 0.03%) 421346 ( 0.01%) 115.98
telnet 8612 ( 0.07%) 574579 ( 0.01%) 66.72
ssh 1405468 ( 11.09%) 114159886 ( 1.51%) 81.23
dns 15675 ( 0.12%) 3636823 ( 0.05%) 232.01
bgp 162 ( 0.00%) 66749 ( 0.00%) 412.03
napster 34 ( 0.00%) 5419 ( 0.00%) 159.38
realaud 48 ( 0.00%) 3935 ( 0.00%) 81.98
rtsp 184 ( 0.00%) 26253 ( 0.00%) 142.68
icecast 173 ( 0.00%) 11356 ( 0.00%) 65.64
other 1797157 ( 14.18%) 966537095 ( 12.76%) 537.81
udp 1363387 ( 10.76%) 370560119 ( 4.89%) 271.79
dns 947763 ( 7.48%) 193597641 ( 2.56%) 204.27
realaud 1818 ( 0.01%) 109642 ( 0.00%) 60.31
halflif 25 ( 0.00%) 3184 ( 0.00%) 127.36
starcra 28 ( 0.00%) 4266 ( 0.00%) 152.36
everque 47 ( 0.00%) 9260 ( 0.00%) 197.02
unreal 19 ( 0.00%) 3302 ( 0.00%) 173.79
quake 13 ( 0.00%) 1454 ( 0.00%) 111.85
cuseeme 6 ( 0.00%) 490 ( 0.00%) 81.67
other 412770 ( 3.26%) 176636090 ( 2.33%) 427.93
icmp 1226979 ( 9.68%) 126078393 ( 1.66%) 102.76
ipip 340 ( 0.00%) 42490 ( 0.00%) 124.97
ip6 29642 ( 0.23%) 7604002 ( 0.10%) 256.53
other 9269 ( 0.07%) 1235495 ( 0.02%) 133.29
frag 38645 ( 0.30%) 42598371 ( 0.56%) 1102.30
ip6 36451 ( 0.29%) 7997385 ( 0.11%) 219.40
tcp6 16490 ( 0.13%) 4716989 ( 0.06%) 286.05
http(s) 1701 ( 0.01%) 1192298 ( 0.02%) 700.94
http(c) 3751 ( 0.03%) 636976 ( 0.01%) 169.81
smtp 539 ( 0.00%) 236941 ( 0.00%) 439.59
ftp 4166 ( 0.03%) 417088 ( 0.01%) 100.12
imap 99 ( 0.00%) 60668 ( 0.00%) 612.81
dns 4 ( 0.00%) 450 ( 0.00%) 112.50
bgp 375 ( 0.00%) 32210 ( 0.00%) 85.89
other 5855 ( 0.05%) 2140358 ( 0.03%) 365.56
udp6 12364 ( 0.10%) 1958815 ( 0.03%) 158.43
dns 10813 ( 0.09%) 1663273 ( 0.02%) 153.82
everque 2 ( 0.00%) 226 ( 0.00%) 113.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1547 ( 0.01%) 295114 ( 0.00%) 190.77
icmp6 7026 ( 0.06%) 798145 ( 0.01%) 113.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 541 ( 0.00%) 519356 ( 0.01%) 959.99
tcpdump file: 200904020830.dump.gz (303.88 MB)