Traffic Trace Info
DumpFile: 200904020845.dump
FileSize: 786.33MB
Id: 200904020845
StartTime: Thu Apr 2 08:45:00 2009
EndTime: Thu Apr 2 09:00:00 2009
TotalTime: 899.74 seconds
TotalCapSize: 613.67MB CapLen: 96 bytes
# of packets: 11314503 (7228.52MB)
AvgRate: 67.38Mbps stddev:9.45M
IP flow (unique src/dst pair) Information
# of flows: 990990 (avg. 11.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.1% 2.4% 2.0% 2.0% 1.4% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 517027
Top 10 bandwidth usage (bytes/total in %):
23.0% 15.1% 6.9% 5.9% 3.6% 3.5% 3.4% 3.2% 3.1% 2.6%
# of IPv6 addresses: 2149
Top 10 bandwidth usage (bytes/total in %):
43.4% 33.7% 15.3% 10.5% 9.9% 7.7% 5.9% 4.8% 4.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020845.pktlen.png)
detailed numbers
[ 32- 63]: 2906116
[ 64- 127]: 2417123
[ 128- 255]: 538396
[ 256- 511]: 369549
[ 512- 1023]: 429785
[ 1024- 2047]: 4653534
Protocol Breakdown
![[protocol breakdown chart]](200904020845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11314503 (100.00%) 7579649828 (100.00%) 669.91
ip 11271973 ( 99.62%) 7566656256 ( 99.83%) 671.28
tcp 8976942 ( 79.34%) 6892993477 ( 90.94%) 767.86
http(s) 4136623 ( 36.56%) 5406027606 ( 71.32%) 1306.87
http(c) 2072103 ( 18.31%) 182843447 ( 2.41%) 88.24
squid 532165 ( 4.70%) 225921707 ( 2.98%) 424.53
smtp 352129 ( 3.11%) 78258228 ( 1.03%) 222.24
ftp 57741 ( 0.51%) 29924222 ( 0.39%) 518.25
pop3 5809 ( 0.05%) 2620424 ( 0.03%) 451.10
imap 3621 ( 0.03%) 487303 ( 0.01%) 134.58
telnet 7821 ( 0.07%) 579473 ( 0.01%) 74.09
ssh 16320 ( 0.14%) 2435503 ( 0.03%) 149.23
dns 13976 ( 0.12%) 2740791 ( 0.04%) 196.11
bgp 143 ( 0.00%) 50041 ( 0.00%) 349.94
napster 118 ( 0.00%) 15161 ( 0.00%) 128.48
realaud 244 ( 0.00%) 15238 ( 0.00%) 62.45
rtsp 160 ( 0.00%) 22560 ( 0.00%) 141.00
icecast 167 ( 0.00%) 10990 ( 0.00%) 65.81
hotline 14 ( 0.00%) 1182 ( 0.00%) 84.43
other 1777091 ( 15.71%) 960997781 ( 12.68%) 540.77
udp 1597939 ( 14.12%) 581263395 ( 7.67%) 363.76
dns 944620 ( 8.35%) 204236681 ( 2.69%) 216.21
realaud 1824 ( 0.02%) 110363 ( 0.00%) 60.51
halflif 22 ( 0.00%) 1694 ( 0.00%) 77.00
starcra 26 ( 0.00%) 4598 ( 0.00%) 176.85
everque 51 ( 0.00%) 10376 ( 0.00%) 203.45
unreal 25 ( 0.00%) 3582 ( 0.00%) 143.28
quake 19 ( 0.00%) 1724 ( 0.00%) 90.74
cuseeme 5 ( 0.00%) 434 ( 0.00%) 86.80
other 651198 ( 5.76%) 376761670 ( 4.97%) 578.57
icmp 658095 ( 5.82%) 84894995 ( 1.12%) 129.00
ipip 326 ( 0.00%) 42620 ( 0.00%) 130.74
ip6 30038 ( 0.27%) 6286152 ( 0.08%) 209.27
other 8633 ( 0.08%) 1175617 ( 0.02%) 136.18
frag 40610 ( 0.36%) 44438210 ( 0.59%) 1094.27
ip6 42530 ( 0.38%) 12993572 ( 0.17%) 305.52
tcp6 20587 ( 0.18%) 9347844 ( 0.12%) 454.07
http(s) 2033 ( 0.02%) 1364167 ( 0.02%) 671.01
http(c) 4364 ( 0.04%) 816732 ( 0.01%) 187.15
smtp 930 ( 0.01%) 379023 ( 0.01%) 407.55
ftp 4236 ( 0.04%) 424779 ( 0.01%) 100.28
imap 240 ( 0.00%) 247938 ( 0.00%) 1033.08
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 390 ( 0.00%) 34406 ( 0.00%) 88.22
other 8392 ( 0.07%) 6080627 ( 0.08%) 724.57
udp6 15082 ( 0.13%) 2603852 ( 0.03%) 172.65
dns 12214 ( 0.11%) 1902437 ( 0.03%) 155.76
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 2866 ( 0.03%) 700730 ( 0.01%) 244.50
icmp6 6551 ( 0.06%) 772500 ( 0.01%) 117.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 280 ( 0.00%) 265296 ( 0.00%) 947.49
tcpdump file: 200904020845.dump.gz (281.55 MB)