Traffic Trace Info
DumpFile: 200904021015.dump
FileSize: 969.92MB
Id: 200904021015
StartTime: Thu Apr 2 10:15:00 2009
EndTime: Thu Apr 2 10:30:00 2009
TotalTime: 900.13 seconds
TotalCapSize: 758.45MB CapLen: 96 bytes
# of packets: 13857576 (9042.41MB)
AvgRate: 84.24Mbps stddev:10.75M
IP flow (unique src/dst pair) Information
# of flows: 696014 (avg. 19.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 1.9% 1.7% 1.6% 1.6% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 395384
Top 10 bandwidth usage (bytes/total in %):
19.1% 17.0% 11.6% 6.3% 2.7% 2.5% 2.5% 2.4% 2.4% 2.4%
# of IPv6 addresses: 1965
Top 10 bandwidth usage (bytes/total in %):
19.6% 18.9% 18.9% 12.7% 10.4% 10.4% 6.9% 6.3% 4.4% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021015.pktlen.png)
detailed numbers
[ 32- 63]: 3525806
[ 64- 127]: 3188268
[ 128- 255]: 542516
[ 256- 511]: 361339
[ 512- 1023]: 398608
[ 1024- 2047]: 5841039
Protocol Breakdown
![[protocol breakdown chart]](200904021015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13857576 (100.00%) 9481656646 (100.00%) 684.22
ip 13829470 ( 99.80%) 9474957454 ( 99.93%) 685.13
tcp 11515605 ( 83.10%) 8945093208 ( 94.34%) 776.78
http(s) 5267129 ( 38.01%) 7086731047 ( 74.74%) 1345.46
http(c) 3399971 ( 24.54%) 309762891 ( 3.27%) 91.11
squid 384864 ( 2.78%) 224454599 ( 2.37%) 583.20
smtp 299450 ( 2.16%) 91403049 ( 0.96%) 305.24
ftp 144635 ( 1.04%) 117571791 ( 1.24%) 812.89
pop3 8129 ( 0.06%) 4890899 ( 0.05%) 601.66
imap 4421 ( 0.03%) 823357 ( 0.01%) 186.24
telnet 4800 ( 0.03%) 498510 ( 0.01%) 103.86
ssh 66176 ( 0.48%) 5205383 ( 0.05%) 78.66
dns 14740 ( 0.11%) 1549427 ( 0.02%) 105.12
bgp 180 ( 0.00%) 67860 ( 0.00%) 377.00
napster 66 ( 0.00%) 7481 ( 0.00%) 113.35
realaud 10394 ( 0.08%) 6208217 ( 0.07%) 597.29
rtsp 149239 ( 1.08%) 9240859 ( 0.10%) 61.92
icecast 224 ( 0.00%) 17879 ( 0.00%) 79.82
hotline 12 ( 0.00%) 1423 ( 0.00%) 118.58
other 1761036 ( 12.71%) 1086650196 ( 11.46%) 617.05
udp 1684779 ( 12.16%) 473661265 ( 5.00%) 281.14
dns 977640 ( 7.05%) 242630893 ( 2.56%) 248.18
realaud 1817 ( 0.01%) 109225 ( 0.00%) 60.11
halflif 20 ( 0.00%) 1586 ( 0.00%) 79.30
starcra 19 ( 0.00%) 4110 ( 0.00%) 216.32
everque 54 ( 0.00%) 10835 ( 0.00%) 200.65
unreal 13 ( 0.00%) 2444 ( 0.00%) 188.00
quake 19 ( 0.00%) 1835 ( 0.00%) 96.58
cuseeme 9 ( 0.00%) 647 ( 0.00%) 71.89
other 704268 ( 5.08%) 230468828 ( 2.43%) 327.25
icmp 592331 ( 4.27%) 50175133 ( 0.53%) 84.71
ipip 328 ( 0.00%) 40664 ( 0.00%) 123.98
ip6 27834 ( 0.20%) 4823274 ( 0.05%) 173.29
other 8593 ( 0.06%) 1163910 ( 0.01%) 135.45
frag 54962 ( 0.40%) 55868654 ( 0.59%) 1016.50
ip6 28106 ( 0.20%) 6699192 ( 0.07%) 238.35
tcp6 8378 ( 0.06%) 3417084 ( 0.04%) 407.86
http(s) 1317 ( 0.01%) 879078 ( 0.01%) 667.49
http(c) 3725 ( 0.03%) 652319 ( 0.01%) 175.12
smtp 981 ( 0.01%) 441464 ( 0.00%) 450.01
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 31 ( 0.00%) 5854 ( 0.00%) 188.84
bgp 357 ( 0.00%) 29924 ( 0.00%) 83.82
other 1965 ( 0.01%) 1408220 ( 0.01%) 716.65
udp6 14471 ( 0.10%) 2343045 ( 0.02%) 161.91
dns 12688 ( 0.09%) 1947341 ( 0.02%) 153.48
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
starcra 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1781 ( 0.01%) 395485 ( 0.00%) 222.06
icmp6 4893 ( 0.04%) 628449 ( 0.01%) 128.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 334 ( 0.00%) 306534 ( 0.00%) 917.77
tcpdump file: 200904021015.dump.gz (340.81 MB)