Traffic Trace Info
DumpFile: 200904021215.dump
FileSize: 1314.93MB
Id: 200904021215
StartTime: Thu Apr 2 12:15:00 2009
EndTime: Thu Apr 2 12:30:01 2009
TotalTime: 900.31 seconds
TotalCapSize: 1022.61MB CapLen: 96 bytes
# of packets: 19154276 (13545.07MB)
AvgRate: 126.21Mbps stddev:16.65M
IP flow (unique src/dst pair) Information
# of flows: 846437 (avg. 22.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.1% 3.3% 1.8% 1.5% 1.1% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 436781
Top 10 bandwidth usage (bytes/total in %):
27.1% 14.1% 13.8% 3.9% 3.9% 3.5% 3.5% 2.3% 2.2% 1.9%
# of IPv6 addresses: 1671
Top 10 bandwidth usage (bytes/total in %):
33.1% 22.4% 16.4% 16.4% 10.7% 8.9% 6.8% 5.1% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021215.pktlen.png)
detailed numbers
[ 32- 63]: 4449423
[ 64- 127]: 3909833
[ 128- 255]: 632594
[ 256- 511]: 518496
[ 512- 1023]: 739018
[ 1024- 2047]: 8904912
Protocol Breakdown
![[protocol breakdown chart]](200904021215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19154276 (100.00%) 14203031745 (100.00%) 741.51
ip 19123883 ( 99.84%) 14195231762 ( 99.95%) 742.28
tcp 15681408 ( 81.87%) 12995512094 ( 91.50%) 828.72
http(s) 6223148 ( 32.49%) 8186246033 ( 57.64%) 1315.45
http(c) 3991135 ( 20.84%) 439778944 ( 3.10%) 110.19
squid 330752 ( 1.73%) 203669930 ( 1.43%) 615.78
smtp 363496 ( 1.90%) 210311286 ( 1.48%) 578.58
ftp 74279 ( 0.39%) 34867068 ( 0.25%) 469.41
pop3 12167 ( 0.06%) 5919799 ( 0.04%) 486.55
imap 21028 ( 0.11%) 18539670 ( 0.13%) 881.67
telnet 17380 ( 0.09%) 4238306 ( 0.03%) 243.86
ssh 195319 ( 1.02%) 26640257 ( 0.19%) 136.39
dns 14519 ( 0.08%) 1531637 ( 0.01%) 105.49
bgp 137 ( 0.00%) 37651 ( 0.00%) 274.82
napster 9 ( 0.00%) 1228 ( 0.00%) 136.44
realaud 12 ( 0.00%) 888 ( 0.00%) 74.00
rtsp 166160 ( 0.87%) 38799298 ( 0.27%) 233.51
icecast 12384 ( 0.06%) 8015128 ( 0.06%) 647.22
hotline 20 ( 0.00%) 2454 ( 0.00%) 122.70
other 4259456 ( 22.24%) 3816912097 ( 26.87%) 896.10
udp 2801916 ( 14.63%) 1112430280 ( 7.83%) 397.02
dns 955729 ( 4.99%) 227940025 ( 1.60%) 238.50
realaud 7304 ( 0.04%) 478899 ( 0.00%) 65.57
halflif 56 ( 0.00%) 4314 ( 0.00%) 77.04
starcra 29 ( 0.00%) 5373 ( 0.00%) 185.28
everque 42 ( 0.00%) 9038 ( 0.00%) 215.19
unreal 22 ( 0.00%) 3774 ( 0.00%) 171.55
quake 13 ( 0.00%) 1086 ( 0.00%) 83.54
cuseeme 9 ( 0.00%) 695 ( 0.00%) 77.22
other 1838574 ( 9.60%) 883858061 ( 6.22%) 480.73
icmp 489857 ( 2.56%) 43817467 ( 0.31%) 89.45
ipip 317 ( 0.00%) 40186 ( 0.00%) 126.77
ip6 28916 ( 0.15%) 5004720 ( 0.04%) 173.08
other 121469 ( 0.63%) 38427015 ( 0.27%) 316.35
frag 37509 ( 0.20%) 42318517 ( 0.30%) 1128.22
ip6 30393 ( 0.16%) 7799983 ( 0.05%) 256.64
tcp6 10196 ( 0.05%) 4581093 ( 0.03%) 449.30
http(s) 3040 ( 0.02%) 2059156 ( 0.01%) 677.35
http(c) 4410 ( 0.02%) 961919 ( 0.01%) 218.12
smtp 288 ( 0.00%) 119073 ( 0.00%) 413.45
imap 45 ( 0.00%) 10255 ( 0.00%) 227.89
bgp 369 ( 0.00%) 31424 ( 0.00%) 85.16
other 2044 ( 0.01%) 1399266 ( 0.01%) 684.57
udp6 14864 ( 0.08%) 2358207 ( 0.02%) 158.65
dns 13694 ( 0.07%) 2175325 ( 0.02%) 158.85
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1169 ( 0.01%) 182778 ( 0.00%) 156.35
icmp6 5068 ( 0.03%) 634857 ( 0.00%) 125.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 235 ( 0.00%) 221746 ( 0.00%) 943.60
tcpdump file: 200904021215.dump.gz (454.66 MB)