Traffic Trace Info
DumpFile: 200904021100.dump
FileSize: 1222.86MB
Id: 200904021100
StartTime: Thu Apr 2 11:00:01 2009
EndTime: Thu Apr 2 11:15:00 2009
TotalTime: 899.54 seconds
TotalCapSize: 959.05MB CapLen: 96 bytes
# of packets: 17288492 (11746.60MB)
AvgRate: 109.55Mbps stddev:17.07M
IP flow (unique src/dst pair) Information
# of flows: 766601 (avg. 22.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.0% 2.4% 2.2% 2.1% 2.0% 1.7% 1.7% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 446808
Top 10 bandwidth usage (bytes/total in %):
16.1% 14.6% 9.8% 4.5% 4.2% 3.4% 3.4% 3.4% 3.1% 2.6%
# of IPv6 addresses: 2212
Top 10 bandwidth usage (bytes/total in %):
85.2% 85.2% 4.1% 2.5% 2.0% 2.0% 1.7% 1.7% 1.2% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021100.pktlen.png)
detailed numbers
[ 32- 63]: 3963078
[ 64- 127]: 4175330
[ 128- 255]: 593095
[ 256- 511]: 445881
[ 512- 1023]: 456370
[ 1024- 2047]: 7654738
Protocol Breakdown
![[protocol breakdown chart]](200904021100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17288492 (100.00%) 12317201755 (100.00%) 712.45
ip 17221473 ( 99.61%) 12255125896 ( 99.50%) 711.62
tcp 14656214 ( 84.77%) 11619957940 ( 94.34%) 792.83
http(s) 6621282 ( 38.30%) 9025050797 ( 73.27%) 1363.04
http(c) 4211604 ( 24.36%) 351188253 ( 2.85%) 83.39
squid 457193 ( 2.64%) 280627699 ( 2.28%) 613.81
smtp 316919 ( 1.83%) 80379052 ( 0.65%) 253.63
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 99724 ( 0.58%) 51034485 ( 0.41%) 511.76
pop3 9027 ( 0.05%) 5743216 ( 0.05%) 636.23
imap 58568 ( 0.34%) 4246103 ( 0.03%) 72.50
telnet 5302 ( 0.03%) 554606 ( 0.00%) 104.60
ssh 35451 ( 0.21%) 3630148 ( 0.03%) 102.40
dns 13930 ( 0.08%) 1510566 ( 0.01%) 108.44
bgp 136 ( 0.00%) 45310 ( 0.00%) 333.16
napster 38 ( 0.00%) 5965 ( 0.00%) 156.97
realaud 79 ( 0.00%) 23823 ( 0.00%) 301.56
rtsp 96991 ( 0.56%) 6141159 ( 0.05%) 63.32
icecast 2056 ( 0.01%) 129576 ( 0.00%) 63.02
hotline 3 ( 0.00%) 190 ( 0.00%) 63.33
other 2727896 ( 15.78%) 1809646092 ( 14.69%) 663.39
udp 1824527 ( 10.55%) 567595835 ( 4.61%) 311.09
dns 1073362 ( 6.21%) 254180763 ( 2.06%) 236.81
realaud 1878 ( 0.01%) 114011 ( 0.00%) 60.71
halflif 21 ( 0.00%) 1958 ( 0.00%) 93.24
starcra 31 ( 0.00%) 5976 ( 0.00%) 192.77
everque 4913 ( 0.03%) 2375598 ( 0.02%) 483.53
unreal 14 ( 0.00%) 2349 ( 0.00%) 167.79
quake 22 ( 0.00%) 2248 ( 0.00%) 102.18
cuseeme 3 ( 0.00%) 256 ( 0.00%) 85.33
other 744145 ( 4.30%) 310780419 ( 2.52%) 417.63
icmp 698859 ( 4.04%) 58158815 ( 0.47%) 83.22
ipip 334 ( 0.00%) 40740 ( 0.00%) 121.98
ip6 32676 ( 0.19%) 8157349 ( 0.07%) 249.64
other 8863 ( 0.05%) 1215217 ( 0.01%) 137.11
frag 44946 ( 0.26%) 49132014 ( 0.40%) 1093.13
ip6 67017 ( 0.39%) 62075739 ( 0.50%) 926.27
tcp6 44971 ( 0.26%) 58260354 ( 0.47%) 1295.51
http(s) 37656 ( 0.22%) 54635770 ( 0.44%) 1450.92
http(c) 3597 ( 0.02%) 678340 ( 0.01%) 188.58
smtp 592 ( 0.00%) 248974 ( 0.00%) 420.56
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 371 ( 0.00%) 31766 ( 0.00%) 85.62
other 2753 ( 0.02%) 2665332 ( 0.02%) 968.16
udp6 16815 ( 0.10%) 2833309 ( 0.02%) 168.50
dns 14105 ( 0.08%) 2165395 ( 0.02%) 153.52
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 2 ( 0.00%) 326 ( 0.00%) 163.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 115 ( 0.00%) 115.00
other 2705 ( 0.02%) 667259 ( 0.01%) 246.68
icmp6 4853 ( 0.03%) 654347 ( 0.01%) 134.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 348 ( 0.00%) 323649 ( 0.00%) 930.03
tcpdump file: 200904021100.dump.gz (416.89 MB)