Traffic Trace Info
DumpFile: 200904021200.dump
FileSize: 1418.35MB
Id: 200904021200
StartTime: Thu Apr 2 12:00:00 2009
EndTime: Thu Apr 2 12:15:00 2009
TotalTime: 900.20 seconds
TotalCapSize: 1100.11MB CapLen: 96 bytes
# of packets: 20855717 (15120.59MB)
AvgRate: 140.92Mbps stddev:17.63M
IP flow (unique src/dst pair) Information
# of flows: 771036 (avg. 27.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 4.8% 4.3% 3.2% 2.1% 1.6% 1.5% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 451444
Top 10 bandwidth usage (bytes/total in %):
26.1% 13.3% 12.8% 9.1% 5.1% 5.0% 4.4% 4.1% 3.6% 3.5%
# of IPv6 addresses: 1987
Top 10 bandwidth usage (bytes/total in %):
47.7% 38.7% 17.5% 11.4% 8.7% 7.5% 5.3% 4.7% 3.8% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021200.pktlen.png)
detailed numbers
[ 32- 63]: 4089952
[ 64- 127]: 4865286
[ 128- 255]: 728382
[ 256- 511]: 503242
[ 512- 1023]: 573245
[ 1024- 2047]: 10095610
Protocol Breakdown
![[protocol breakdown chart]](200904021200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20855717 (100.00%) 15855088489 (100.00%) 760.23
ip 20819561 ( 99.83%) 15840619284 ( 99.91%) 760.85
tcp 15945060 ( 76.45%) 13536693792 ( 85.38%) 848.96
http(s) 6323460 ( 30.32%) 8380517072 ( 52.86%) 1325.31
http(c) 3927946 ( 18.83%) 632030427 ( 3.99%) 160.91
squid 370602 ( 1.78%) 231613488 ( 1.46%) 624.97
smtp 263814 ( 1.26%) 82886264 ( 0.52%) 314.18
ftp 97388 ( 0.47%) 37849268 ( 0.24%) 388.64
pop3 12274 ( 0.06%) 5726987 ( 0.04%) 466.59
imap 5405 ( 0.03%) 1423914 ( 0.01%) 263.44
telnet 15165 ( 0.07%) 3764255 ( 0.02%) 248.22
ssh 443922 ( 2.13%) 79751175 ( 0.50%) 179.65
dns 17434 ( 0.08%) 5315612 ( 0.03%) 304.90
bgp 139 ( 0.00%) 45156 ( 0.00%) 324.86
napster 51 ( 0.00%) 8861 ( 0.00%) 173.75
realaud 15 ( 0.00%) 1110 ( 0.00%) 74.00
rtsp 88316 ( 0.42%) 5594963 ( 0.04%) 63.35
icecast 11916 ( 0.06%) 7980412 ( 0.05%) 669.72
other 4367210 ( 20.94%) 4062184648 ( 25.62%) 930.16
udp 4220021 ( 20.23%) 2214217474 ( 13.97%) 524.69
dns 1038804 ( 4.98%) 239552952 ( 1.51%) 230.60
realaud 2967 ( 0.01%) 180095 ( 0.00%) 60.70
halflif 23 ( 0.00%) 1880 ( 0.00%) 81.74
starcra 23 ( 0.00%) 4625 ( 0.00%) 201.09
everque 778 ( 0.00%) 353965 ( 0.00%) 454.97
unreal 13 ( 0.00%) 2374 ( 0.00%) 182.62
quake 15 ( 0.00%) 2033 ( 0.00%) 135.53
cuseeme 3 ( 0.00%) 254 ( 0.00%) 84.67
other 3177249 ( 15.23%) 1973991909 ( 12.45%) 621.29
icmp 506326 ( 2.43%) 45230819 ( 0.29%) 89.33
ipip 351 ( 0.00%) 42000 ( 0.00%) 119.66
ip6 31631 ( 0.15%) 6607863 ( 0.04%) 208.90
other 116172 ( 0.56%) 37827336 ( 0.24%) 325.61
frag 38685 ( 0.19%) 43134323 ( 0.27%) 1115.01
ip6 36156 ( 0.17%) 14469205 ( 0.09%) 400.19
tcp6 14992 ( 0.07%) 10871349 ( 0.07%) 725.14
http(s) 1911 ( 0.01%) 1312222 ( 0.01%) 686.67
http(c) 3414 ( 0.02%) 699879 ( 0.00%) 205.00
smtp 328 ( 0.00%) 153811 ( 0.00%) 468.94
imap 441 ( 0.00%) 433392 ( 0.00%) 982.75
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 373 ( 0.00%) 32119 ( 0.00%) 86.11
other 8521 ( 0.04%) 8239582 ( 0.05%) 966.97
udp6 15947 ( 0.08%) 2716412 ( 0.02%) 170.34
dns 13851 ( 0.07%) 2197989 ( 0.01%) 158.69
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2094 ( 0.01%) 518212 ( 0.00%) 247.47
icmp6 4916 ( 0.02%) 623243 ( 0.00%) 126.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 270 ( 0.00%) 253985 ( 0.00%) 940.69
tcpdump file: 200904021200.dump.gz (488.75 MB)