Traffic Trace Info
DumpFile: 200904021000.dump
FileSize: 1073.75MB
Id: 200904021000
StartTime: Thu Apr 2 10:00:00 2009
EndTime: Thu Apr 2 10:15:00 2009
TotalTime: 899.82 seconds
TotalCapSize: 839.79MB CapLen: 96 bytes
# of packets: 15329694 (10328.69MB)
AvgRate: 96.27Mbps stddev:12.78M
IP flow (unique src/dst pair) Information
# of flows: 815384 (avg. 18.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.6% 2.4% 2.0% 1.8% 1.7% 1.5% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 456163
Top 10 bandwidth usage (bytes/total in %):
18.1% 15.7% 12.6% 7.0% 5.3% 4.1% 2.9% 2.7% 2.5% 2.3%
# of IPv6 addresses: 2858
Top 10 bandwidth usage (bytes/total in %):
26.5% 22.4% 17.8% 13.5% 13.3% 11.6% 7.5% 6.2% 4.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021000.pktlen.png)
detailed numbers
[ 32- 63]: 3906706
[ 64- 127]: 3373845
[ 128- 255]: 523805
[ 256- 511]: 374522
[ 512- 1023]: 479903
[ 1024- 2047]: 6670913
Protocol Breakdown
![[protocol breakdown chart]](200904021000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15329694 (100.00%) 10830413509 (100.00%) 706.50
ip 15296214 ( 99.78%) 10820872012 ( 99.91%) 707.42
tcp 13172452 ( 85.93%) 10370733689 ( 95.76%) 787.30
http(s) 6114639 ( 39.89%) 8238187213 ( 76.07%) 1347.29
http(c) 3959076 ( 25.83%) 359414386 ( 3.32%) 90.78
squid 484052 ( 3.16%) 328787673 ( 3.04%) 679.24
smtp 370659 ( 2.42%) 87223131 ( 0.81%) 235.32
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 115634 ( 0.75%) 86029737 ( 0.79%) 743.98
pop3 15618 ( 0.10%) 13591562 ( 0.13%) 870.25
imap 3332 ( 0.02%) 377672 ( 0.00%) 113.35
telnet 4186 ( 0.03%) 385305 ( 0.00%) 92.05
ssh 82767 ( 0.54%) 6749007 ( 0.06%) 81.54
dns 17241 ( 0.11%) 5286055 ( 0.05%) 306.60
bgp 157 ( 0.00%) 49376 ( 0.00%) 314.50
napster 27 ( 0.00%) 4525 ( 0.00%) 167.59
realaud 1702 ( 0.01%) 992385 ( 0.01%) 583.07
rtsp 12127 ( 0.08%) 926069 ( 0.01%) 76.36
icecast 327 ( 0.00%) 22803 ( 0.00%) 69.73
hotline 14 ( 0.00%) 1217 ( 0.00%) 86.93
other 1990887 ( 12.99%) 1242705153 ( 11.47%) 624.20
udp 1499394 ( 9.78%) 391057794 ( 3.61%) 260.81
dns 1005809 ( 6.56%) 244366312 ( 2.26%) 242.95
realaud 1955 ( 0.01%) 164408 ( 0.00%) 84.10
halflif 20 ( 0.00%) 2713 ( 0.00%) 135.65
starcra 25 ( 0.00%) 4597 ( 0.00%) 183.88
everque 49 ( 0.00%) 9595 ( 0.00%) 195.82
unreal 13 ( 0.00%) 1622 ( 0.00%) 124.77
quake 18 ( 0.00%) 1544 ( 0.00%) 85.78
cuseeme 5 ( 0.00%) 372 ( 0.00%) 74.40
other 491380 ( 3.21%) 146409194 ( 1.35%) 297.96
icmp 578852 ( 3.78%) 49351218 ( 0.46%) 85.26
ipip 319 ( 0.00%) 40382 ( 0.00%) 126.59
ip6 35718 ( 0.23%) 8423683 ( 0.08%) 235.84
other 9479 ( 0.06%) 1265246 ( 0.01%) 133.48
frag 39582 ( 0.26%) 44080336 ( 0.41%) 1113.65
ip6 33480 ( 0.22%) 9541497 ( 0.09%) 284.99
tcp6 9343 ( 0.06%) 4780660 ( 0.04%) 511.68
http(s) 1744 ( 0.01%) 1144498 ( 0.01%) 656.25
http(c) 3992 ( 0.03%) 768775 ( 0.01%) 192.58
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 330 ( 0.00%) 157271 ( 0.00%) 476.58
ftp 56 ( 0.00%) 5673 ( 0.00%) 101.30
ssh 3 ( 0.00%) 354 ( 0.00%) 118.00
bgp 364 ( 0.00%) 30775 ( 0.00%) 84.55
other 2845 ( 0.02%) 2672552 ( 0.02%) 939.39
udp6 18500 ( 0.12%) 3536537 ( 0.03%) 191.16
dns 13284 ( 0.09%) 1996524 ( 0.02%) 150.30
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 5214 ( 0.03%) 1539796 ( 0.01%) 295.32
icmp6 5015 ( 0.03%) 659540 ( 0.01%) 131.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 592 ( 0.00%) 560680 ( 0.01%) 947.09
tcpdump file: 200904021000.dump.gz (368.22 MB)