Traffic Trace Info
DumpFile: 200904021145.dump
FileSize: 1493.97MB
Id: 200904021145
StartTime: Thu Apr 2 11:45:00 2009
EndTime: Thu Apr 2 12:00:00 2009
TotalTime: 899.92 seconds
TotalCapSize: 1162.47MB CapLen: 96 bytes
# of packets: 21724743 (15556.69MB)
AvgRate: 145.01Mbps stddev:16.61M
IP flow (unique src/dst pair) Information
# of flows: 887711 (avg. 24.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 4.7% 3.1% 1.7% 1.6% 1.6% 1.4% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 494762
Top 10 bandwidth usage (bytes/total in %):
28.0% 12.7% 11.9% 6.5% 5.2% 4.9% 3.4% 3.4% 3.0% 2.1%
# of IPv6 addresses: 2229
Top 10 bandwidth usage (bytes/total in %):
20.5% 18.9% 17.7% 17.7% 13.9% 9.3% 6.6% 5.9% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021145.pktlen.png)
detailed numbers
[ 32- 63]: 4399773
[ 64- 127]: 5135854
[ 128- 255]: 746043
[ 256- 511]: 524850
[ 512- 1023]: 660466
[ 1024- 2047]: 10257757
Protocol Breakdown
![[protocol breakdown chart]](200904021145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21724743 (100.00%) 16312372812 (100.00%) 750.87
ip 21696769 ( 99.87%) 16305214696 ( 99.96%) 751.50
tcp 17239708 ( 79.36%) 14258094888 ( 87.41%) 827.05
http(s) 6821918 ( 31.40%) 9103389535 ( 55.81%) 1334.43
http(c) 4329117 ( 19.93%) 694138380 ( 4.26%) 160.34
squid 422539 ( 1.94%) 226806452 ( 1.39%) 536.77
smtp 253845 ( 1.17%) 68882324 ( 0.42%) 271.36
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 99542 ( 0.46%) 43917766 ( 0.27%) 441.20
pop3 11261 ( 0.05%) 8306112 ( 0.05%) 737.60
imap 5250 ( 0.02%) 502955 ( 0.00%) 95.80
telnet 4351 ( 0.02%) 461589 ( 0.00%) 106.09
ssh 658035 ( 3.03%) 97481078 ( 0.60%) 148.14
dns 14156 ( 0.07%) 1488737 ( 0.01%) 105.17
bgp 141 ( 0.00%) 45799 ( 0.00%) 324.82
napster 22 ( 0.00%) 3200 ( 0.00%) 145.45
realaud 20 ( 0.00%) 2178 ( 0.00%) 108.90
rtsp 138203 ( 0.64%) 8670618 ( 0.05%) 62.74
icecast 11050 ( 0.05%) 7501926 ( 0.05%) 678.91
hotline 18 ( 0.00%) 1453 ( 0.00%) 80.72
other 4470229 ( 20.58%) 3996494126 ( 24.50%) 894.02
udp 3780453 ( 17.40%) 1980180888 ( 12.14%) 523.79
dns 1036542 ( 4.77%) 241435641 ( 1.48%) 232.92
realaud 1928 ( 0.01%) 116881 ( 0.00%) 60.62
halflif 25 ( 0.00%) 2911 ( 0.00%) 116.44
starcra 24 ( 0.00%) 4834 ( 0.00%) 201.42
everque 50 ( 0.00%) 9832 ( 0.00%) 196.64
unreal 20 ( 0.00%) 2553 ( 0.00%) 127.65
quake 23 ( 0.00%) 2177 ( 0.00%) 94.65
cuseeme 3 ( 0.00%) 461 ( 0.00%) 153.67
other 2741712 ( 12.62%) 1738491564 ( 10.66%) 634.09
icmp 597248 ( 2.75%) 50784164 ( 0.31%) 85.03
ipip 324 ( 0.00%) 39923 ( 0.00%) 123.22
ip6 33704 ( 0.16%) 6489619 ( 0.04%) 192.55
other 45332 ( 0.21%) 9625214 ( 0.06%) 212.33
frag 36556 ( 0.17%) 40939152 ( 0.25%) 1119.90
ip6 27974 ( 0.13%) 7158116 ( 0.04%) 255.88
tcp6 7181 ( 0.03%) 3274252 ( 0.02%) 455.96
http(s) 1705 ( 0.01%) 1156630 ( 0.01%) 678.38
http(c) 3167 ( 0.01%) 605841 ( 0.00%) 191.30
smtp 189 ( 0.00%) 103082 ( 0.00%) 545.41
bgp 353 ( 0.00%) 29099 ( 0.00%) 82.43
other 1767 ( 0.01%) 1379600 ( 0.01%) 780.76
udp6 15145 ( 0.07%) 2713228 ( 0.02%) 179.15
dns 12474 ( 0.06%) 1910393 ( 0.01%) 153.15
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2670 ( 0.01%) 802728 ( 0.00%) 300.65
icmp6 5022 ( 0.02%) 615703 ( 0.00%) 122.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 596 ( 0.00%) 550853 ( 0.00%) 924.25
tcpdump file: 200904021145.dump.gz (513.80 MB)