Traffic Trace Info
DumpFile: 200904021115.dump
FileSize: 1336.25MB
Id: 200904021115
StartTime: Thu Apr 2 11:15:00 2009
EndTime: Thu Apr 2 11:30:01 2009
TotalTime: 900.46 seconds
TotalCapSize: 1043.44MB CapLen: 96 bytes
# of packets: 19189006 (13605.14MB)
AvgRate: 126.75Mbps stddev:13.49M
IP flow (unique src/dst pair) Information
# of flows: 750561 (avg. 25.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.4% 2.8% 2.5% 2.2% 1.8% 1.6% 1.5% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 451833
Top 10 bandwidth usage (bytes/total in %):
26.6% 16.2% 8.3% 6.7% 3.5% 3.5% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 2204
Top 10 bandwidth usage (bytes/total in %):
74.8% 74.8% 5.6% 4.1% 4.1% 4.1% 3.8% 2.1% 1.8% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021115.pktlen.png)
detailed numbers
[ 32- 63]: 4622809
[ 64- 127]: 4075207
[ 128- 255]: 568861
[ 256- 511]: 416996
[ 512- 1023]: 465316
[ 1024- 2047]: 9039817
Protocol Breakdown
![[protocol breakdown chart]](200904021115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19189006 (100.00%) 14266027344 (100.00%) 743.45
ip 19144150 ( 99.77%) 14235076748 ( 99.78%) 743.57
tcp 16360942 ( 85.26%) 13339331022 ( 93.50%) 815.32
http(s) 6986409 ( 36.41%) 9470840984 ( 66.39%) 1355.61
http(c) 4454408 ( 23.21%) 452025773 ( 3.17%) 101.48
squid 427926 ( 2.23%) 265100830 ( 1.86%) 619.50
smtp 326722 ( 1.70%) 98030456 ( 0.69%) 300.04
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 96396 ( 0.50%) 43125356 ( 0.30%) 447.38
pop3 9294 ( 0.05%) 4661545 ( 0.03%) 501.56
imap 21627 ( 0.11%) 1973860 ( 0.01%) 91.27
telnet 5181 ( 0.03%) 550942 ( 0.00%) 106.34
ssh 388881 ( 2.03%) 49314633 ( 0.35%) 126.81
dns 14156 ( 0.07%) 1480220 ( 0.01%) 104.56
bgp 131 ( 0.00%) 39366 ( 0.00%) 300.50
napster 41 ( 0.00%) 5270 ( 0.00%) 128.54
realaud 22 ( 0.00%) 2015 ( 0.00%) 91.59
rtsp 130859 ( 0.68%) 10737980 ( 0.08%) 82.06
icecast 1753 ( 0.01%) 107381 ( 0.00%) 61.26
other 3497047 ( 18.22%) 2941328985 ( 20.62%) 841.09
udp 2226155 ( 11.60%) 840188380 ( 5.89%) 377.42
dns 975084 ( 5.08%) 230425451 ( 1.62%) 236.31
realaud 1825 ( 0.01%) 110737 ( 0.00%) 60.68
halflif 18 ( 0.00%) 1734 ( 0.00%) 96.33
starcra 47 ( 0.00%) 8334 ( 0.00%) 177.32
everque 6464 ( 0.03%) 3110235 ( 0.02%) 481.16
unreal 14 ( 0.00%) 2876 ( 0.00%) 205.43
quake 12 ( 0.00%) 1008 ( 0.00%) 84.00
cuseeme 6 ( 0.00%) 708 ( 0.00%) 118.00
other 1242563 ( 6.48%) 606422834 ( 4.25%) 488.04
icmp 513159 ( 2.67%) 45224512 ( 0.32%) 88.13
ipip 338 ( 0.00%) 42380 ( 0.00%) 125.38
ip6 34277 ( 0.18%) 9057603 ( 0.06%) 264.25
other 9279 ( 0.05%) 1232851 ( 0.01%) 132.86
frag 36732 ( 0.19%) 40921058 ( 0.29%) 1114.04
ip6 44856 ( 0.23%) 30950596 ( 0.22%) 690.00
tcp6 24179 ( 0.13%) 27150022 ( 0.19%) 1122.88
http(s) 17650 ( 0.09%) 24850957 ( 0.17%) 1407.99
http(c) 3878 ( 0.02%) 727175 ( 0.01%) 187.51
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 394 ( 0.00%) 147615 ( 0.00%) 374.66
bgp 370 ( 0.00%) 31569 ( 0.00%) 85.32
other 1881 ( 0.01%) 1392198 ( 0.01%) 740.14
udp6 15078 ( 0.08%) 2543817 ( 0.02%) 168.71
dns 12616 ( 0.07%) 1916293 ( 0.01%) 151.89
everque 2 ( 0.00%) 670 ( 0.00%) 335.00
other 2460 ( 0.01%) 626854 ( 0.00%) 254.82
icmp6 4897 ( 0.03%) 620362 ( 0.00%) 126.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 672 ( 0.00%) 632315 ( 0.00%) 940.94
tcpdump file: 200904021115.dump.gz (461.39 MB)