Traffic Trace Info
DumpFile: 200904020900.dump
FileSize: 883.90MB
Id: 200904020900
StartTime: Thu Apr 2 09:00:00 2009
EndTime: Thu Apr 2 09:15:00 2009
TotalTime: 899.81 seconds
TotalCapSize: 689.34MB CapLen: 96 bytes
# of packets: 12750365 (8730.38MB)
AvgRate: 81.39Mbps stddev:11.61M
IP flow (unique src/dst pair) Information
# of flows: 823196 (avg. 15.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.1% 2.0% 1.8% 1.5% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 455067
Top 10 bandwidth usage (bytes/total in %):
20.4% 20.0% 6.7% 6.0% 4.7% 4.4% 3.2% 3.1% 3.1% 2.9%
# of IPv6 addresses: 2059
Top 10 bandwidth usage (bytes/total in %):
28.5% 22.4% 19.0% 15.1% 14.4% 10.4% 7.3% 7.2% 5.7% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904020900.pktlen.png)
detailed numbers
[ 32- 63]: 3082505
[ 64- 127]: 2627732
[ 128- 255]: 501883
[ 256- 511]: 350212
[ 512- 1023]: 449089
[ 1024- 2047]: 5738944
Protocol Breakdown
![[protocol breakdown chart]](200904020900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12750365 (100.00%) 9154464465 (100.00%) 717.98
ip 12714356 ( 99.72%) 9145540657 ( 99.90%) 719.31
tcp 10140484 ( 79.53%) 8258692882 ( 90.21%) 814.43
http(s) 4903866 ( 38.46%) 6547709441 ( 71.52%) 1335.21
http(c) 2612011 ( 20.49%) 282676811 ( 3.09%) 108.22
squid 472446 ( 3.71%) 280248526 ( 3.06%) 593.19
smtp 308917 ( 2.42%) 96645265 ( 1.06%) 312.85
ftp 61041 ( 0.48%) 32263399 ( 0.35%) 528.55
pop3 12354 ( 0.10%) 10574940 ( 0.12%) 855.99
imap 3146 ( 0.02%) 314915 ( 0.00%) 100.10
telnet 7009 ( 0.05%) 457023 ( 0.00%) 65.21
ssh 10219 ( 0.08%) 3484721 ( 0.04%) 341.00
dns 14376 ( 0.11%) 1523363 ( 0.02%) 105.97
bgp 141 ( 0.00%) 44662 ( 0.00%) 316.75
napster 44 ( 0.00%) 6450 ( 0.00%) 146.59
realaud 23 ( 0.00%) 2087 ( 0.00%) 90.74
rtsp 36021 ( 0.28%) 2210782 ( 0.02%) 61.37
icecast 205 ( 0.00%) 13606 ( 0.00%) 66.37
hotline 7 ( 0.00%) 760 ( 0.00%) 108.57
other 1698642 ( 13.32%) 1000515171 ( 10.93%) 589.01
udp 1840736 ( 14.44%) 788718625 ( 8.62%) 428.48
dns 956854 ( 7.50%) 220583067 ( 2.41%) 230.53
realaud 1822 ( 0.01%) 109992 ( 0.00%) 60.37
halflif 40 ( 0.00%) 3795 ( 0.00%) 94.88
starcra 19 ( 0.00%) 3939 ( 0.00%) 207.32
everque 47 ( 0.00%) 9531 ( 0.00%) 202.79
unreal 21 ( 0.00%) 3071 ( 0.00%) 146.24
quake 15 ( 0.00%) 1325 ( 0.00%) 88.33
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 881689 ( 6.92%) 567809012 ( 6.20%) 644.00
icmp 695183 ( 5.45%) 92309833 ( 1.01%) 132.78
ipip 319 ( 0.00%) 40488 ( 0.00%) 126.92
ip6 28317 ( 0.22%) 4466675 ( 0.05%) 157.74
other 9317 ( 0.07%) 1312154 ( 0.01%) 140.83
frag 39259 ( 0.31%) 43916656 ( 0.48%) 1118.64
ip6 36009 ( 0.28%) 8923808 ( 0.10%) 247.82
tcp6 15166 ( 0.12%) 5530589 ( 0.06%) 364.67
http(s) 2076 ( 0.02%) 1353498 ( 0.01%) 651.97
http(c) 4293 ( 0.03%) 841147 ( 0.01%) 195.93
smtp 277 ( 0.00%) 122227 ( 0.00%) 441.25
ftp 2785 ( 0.02%) 284766 ( 0.00%) 102.25
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 386 ( 0.00%) 33910 ( 0.00%) 87.85
other 5347 ( 0.04%) 2894869 ( 0.03%) 541.40
udp6 13459 ( 0.11%) 2126920 ( 0.02%) 158.03
dns 11588 ( 0.09%) 1684034 ( 0.02%) 145.33
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1869 ( 0.01%) 442678 ( 0.00%) 236.85
icmp6 6849 ( 0.05%) 778454 ( 0.01%) 113.66
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 504 ( 0.00%) 483629 ( 0.01%) 959.58
tcpdump file: 200904020900.dump.gz (309.93 MB)