Traffic Trace Info
DumpFile: 200904021230.dump
FileSize: 1209.59MB
Id: 200904021230
StartTime: Thu Apr 2 12:30:01 2009
EndTime: Thu Apr 2 12:45:01 2009
TotalTime: 900.30 seconds
TotalCapSize: 940.79MB CapLen: 96 bytes
# of packets: 17612973 (12542.58MB)
AvgRate: 116.86Mbps stddev:13.41M
IP flow (unique src/dst pair) Information
# of flows: 736883 (avg. 23.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 3.3% 2.2% 1.9% 1.7% 1.4% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 408728
Top 10 bandwidth usage (bytes/total in %):
29.3% 16.2% 12.9% 4.9% 3.6% 3.6% 3.6% 2.2% 2.0% 2.0%
# of IPv6 addresses: 1791
Top 10 bandwidth usage (bytes/total in %):
30.9% 22.7% 16.0% 16.0% 9.9% 8.7% 8.2% 6.3% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021230.pktlen.png)
detailed numbers
[ 32- 63]: 3947923
[ 64- 127]: 3586741
[ 128- 255]: 635374
[ 256- 511]: 487474
[ 512- 1023]: 719783
[ 1024- 2047]: 8235678
Protocol Breakdown
![[protocol breakdown chart]](200904021230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17612973 (100.00%) 13151847203 (100.00%) 746.71
ip 17583612 ( 99.83%) 13143950751 ( 99.94%) 747.51
tcp 14362365 ( 81.54%) 12050700223 ( 91.63%) 839.05
http(s) 5909388 ( 33.55%) 7685843351 ( 58.44%) 1300.62
http(c) 3815366 ( 21.66%) 638049892 ( 4.85%) 167.23
squid 497278 ( 2.82%) 357838375 ( 2.72%) 719.59
smtp 319781 ( 1.82%) 165380055 ( 1.26%) 517.17
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 72031 ( 0.41%) 35465971 ( 0.27%) 492.37
pop3 15325 ( 0.09%) 6702962 ( 0.05%) 437.39
imap 4244 ( 0.02%) 658502 ( 0.01%) 155.16
telnet 16172 ( 0.09%) 3746808 ( 0.03%) 231.68
ssh 21612 ( 0.12%) 2988195 ( 0.02%) 138.27
dns 15195 ( 0.09%) 3581042 ( 0.03%) 235.67
bgp 150 ( 0.00%) 49079 ( 0.00%) 327.19
napster 25 ( 0.00%) 2872 ( 0.00%) 114.88
realaud 20 ( 0.00%) 2825 ( 0.00%) 141.25
rtsp 134448 ( 0.76%) 8303989 ( 0.06%) 61.76
icecast 10785 ( 0.06%) 7928979 ( 0.06%) 735.19
hotline 8 ( 0.00%) 534 ( 0.00%) 66.75
other 3530533 ( 20.05%) 3134156552 ( 23.83%) 887.73
udp 2593807 ( 14.73%) 1005987196 ( 7.65%) 387.84
dns 989453 ( 5.62%) 235325770 ( 1.79%) 237.83
realaud 2477 ( 0.01%) 150373 ( 0.00%) 60.71
halflif 20 ( 0.00%) 2959 ( 0.00%) 147.95
starcra 26 ( 0.00%) 5161 ( 0.00%) 198.50
everque 42 ( 0.00%) 8947 ( 0.00%) 213.02
unreal 11 ( 0.00%) 1854 ( 0.00%) 168.55
quake 21 ( 0.00%) 1855 ( 0.00%) 88.33
cuseeme 5 ( 0.00%) 424 ( 0.00%) 84.80
other 1601606 ( 9.09%) 770357201 ( 5.86%) 480.99
icmp 480318 ( 2.73%) 42487846 ( 0.32%) 88.46
ipip 332 ( 0.00%) 41972 ( 0.00%) 126.42
ip6 29113 ( 0.17%) 6268107 ( 0.05%) 215.30
other 117677 ( 0.67%) 38465407 ( 0.29%) 326.87
frag 35934 ( 0.20%) 40430115 ( 0.31%) 1125.12
ip6 29361 ( 0.17%) 7896452 ( 0.06%) 268.94
tcp6 9364 ( 0.05%) 4517944 ( 0.03%) 482.48
http(s) 2649 ( 0.02%) 2163939 ( 0.02%) 816.89
http(c) 4240 ( 0.02%) 826137 ( 0.01%) 194.84
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 304 ( 0.00%) 122295 ( 0.00%) 402.29
bgp 369 ( 0.00%) 31523 ( 0.00%) 85.43
other 1799 ( 0.01%) 1373796 ( 0.01%) 763.64
udp6 14907 ( 0.08%) 2423001 ( 0.02%) 162.54
dns 13114 ( 0.07%) 2025593 ( 0.02%) 154.46
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1792 ( 0.01%) 397305 ( 0.00%) 221.71
icmp6 4648 ( 0.03%) 568300 ( 0.00%) 122.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 412 ( 0.00%) 383127 ( 0.00%) 929.92
tcpdump file: 200904021230.dump.gz (421.09 MB)