Traffic Trace Info
DumpFile: 200904021030.dump
FileSize: 1112.19MB
Id: 200904021030
StartTime: Thu Apr 2 10:30:00 2009
EndTime: Thu Apr 2 10:45:01 2009
TotalTime: 900.54 seconds
TotalCapSize: 869.91MB CapLen: 96 bytes
# of packets: 15875263 (11133.91MB)
AvgRate: 103.72Mbps stddev:13.49M
IP flow (unique src/dst pair) Information
# of flows: 757475 (avg. 20.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.7% 2.2% 2.0% 1.8% 1.7% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 439247
Top 10 bandwidth usage (bytes/total in %):
24.0% 14.4% 8.7% 7.8% 6.3% 5.0% 2.7% 2.3% 2.3% 2.1%
# of IPv6 addresses: 1914
Top 10 bandwidth usage (bytes/total in %):
84.5% 84.5% 3.5% 2.7% 2.7% 2.3% 2.2% 1.5% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021030.pktlen.png)
detailed numbers
[ 32- 63]: 3725483
[ 64- 127]: 3472763
[ 128- 255]: 561467
[ 256- 511]: 394389
[ 512- 1023]: 459703
[ 1024- 2047]: 7261458
Protocol Breakdown
![[protocol breakdown chart]](200904021030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15875263 (100.00%) 11674754145 (100.00%) 735.41
ip 15818864 ( 99.64%) 11627808820 ( 99.60%) 735.06
tcp 13395939 ( 84.38%) 11119641147 ( 95.25%) 830.08
http(s) 6410003 ( 40.38%) 8770327479 ( 75.12%) 1368.23
http(c) 3559172 ( 22.42%) 379676061 ( 3.25%) 106.68
squid 539153 ( 3.40%) 339051926 ( 2.90%) 628.86
smtp 367907 ( 2.32%) 151594210 ( 1.30%) 412.04
ftp 144750 ( 0.91%) 111482961 ( 0.95%) 770.18
pop3 8815 ( 0.06%) 5497246 ( 0.05%) 623.62
imap 6153 ( 0.04%) 544789 ( 0.00%) 88.54
telnet 4808 ( 0.03%) 512140 ( 0.00%) 106.52
ssh 14690 ( 0.09%) 3684984 ( 0.03%) 250.85
dns 15222 ( 0.10%) 3658254 ( 0.03%) 240.33
bgp 172 ( 0.00%) 69840 ( 0.00%) 406.05
napster 34 ( 0.00%) 5397 ( 0.00%) 158.74
realaud 10400 ( 0.07%) 6216471 ( 0.05%) 597.74
rtsp 185652 ( 1.17%) 11453183 ( 0.10%) 61.69
icecast 153 ( 0.00%) 11104 ( 0.00%) 72.58
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 2128810 ( 13.41%) 1335851488 ( 11.44%) 627.51
udp 1655670 ( 10.43%) 439371053 ( 3.76%) 265.37
dns 1055988 ( 6.65%) 267829413 ( 2.29%) 253.63
realaud 1820 ( 0.01%) 109791 ( 0.00%) 60.32
halflif 29 ( 0.00%) 3401 ( 0.00%) 117.28
starcra 29 ( 0.00%) 5631 ( 0.00%) 194.17
everque 47 ( 0.00%) 9348 ( 0.00%) 198.89
unreal 10 ( 0.00%) 1512 ( 0.00%) 151.20
quake 16 ( 0.00%) 1401 ( 0.00%) 87.56
cuseeme 8 ( 0.00%) 666 ( 0.00%) 83.25
other 596700 ( 3.76%) 170804179 ( 1.46%) 286.25
icmp 726710 ( 4.58%) 59308111 ( 0.51%) 81.61
ipip 343 ( 0.00%) 43236 ( 0.00%) 126.05
ip6 30728 ( 0.19%) 8177023 ( 0.07%) 266.11
other 9474 ( 0.06%) 1268250 ( 0.01%) 133.87
frag 44913 ( 0.28%) 48470639 ( 0.42%) 1079.21
ip6 56399 ( 0.36%) 46945325 ( 0.40%) 832.38
tcp6 35510 ( 0.22%) 43349472 ( 0.37%) 1220.77
http(s) 28580 ( 0.18%) 41092753 ( 0.35%) 1437.82
http(c) 4320 ( 0.03%) 769074 ( 0.01%) 178.03
smtp 167 ( 0.00%) 45949 ( 0.00%) 275.14
dns 10 ( 0.00%) 1120 ( 0.00%) 112.00
bgp 364 ( 0.00%) 30632 ( 0.00%) 84.15
other 2069 ( 0.01%) 1409944 ( 0.01%) 681.46
udp6 14944 ( 0.09%) 2345637 ( 0.02%) 156.96
dns 12529 ( 0.08%) 1863146 ( 0.02%) 148.71
other 2415 ( 0.02%) 482491 ( 0.00%) 199.79
icmp6 5354 ( 0.03%) 711578 ( 0.01%) 132.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 561 ( 0.00%) 534558 ( 0.00%) 952.87
tcpdump file: 200904021030.dump.gz (385.38 MB)