Traffic Trace Info
DumpFile: 200904021245.dump
FileSize: 1321.67MB
Id: 200904021245
StartTime: Thu Apr 2 12:45:01 2009
EndTime: Thu Apr 2 13:00:00 2009
TotalTime: 899.39 seconds
TotalCapSize: 1028.42MB CapLen: 96 bytes
# of packets: 19216492 (13219.19MB)
AvgRate: 123.27Mbps stddev:14.10M
IP flow (unique src/dst pair) Information
# of flows: 674835 (avg. 28.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 3.9% 2.2% 2.2% 2.1% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 403092
Top 10 bandwidth usage (bytes/total in %):
21.3% 17.9% 9.6% 9.4% 4.2% 4.2% 3.3% 2.3% 2.3% 2.2%
# of IPv6 addresses: 1712
Top 10 bandwidth usage (bytes/total in %):
26.4% 25.1% 17.6% 13.3% 13.1% 7.4% 6.8% 5.3% 5.3% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021245.pktlen.png)
detailed numbers
[ 32- 63]: 4188665
[ 64- 127]: 4550123
[ 128- 255]: 575966
[ 256- 511]: 428688
[ 512- 1023]: 661631
[ 1024- 2047]: 8811419
Protocol Breakdown
![[protocol breakdown chart]](200904021245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19216492 (100.00%) 13861325699 (100.00%) 721.32
ip 19181895 ( 99.82%) 13851665135 ( 99.93%) 722.12
tcp 15130558 ( 78.74%) 12349154891 ( 89.09%) 816.17
http(s) 6388756 ( 33.25%) 8380550142 ( 60.46%) 1311.77
http(c) 4378564 ( 22.79%) 404841471 ( 2.92%) 92.46
squid 373462 ( 1.94%) 292607705 ( 2.11%) 783.50
smtp 297293 ( 1.55%) 116697299 ( 0.84%) 392.53
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 77780 ( 0.40%) 39701010 ( 0.29%) 510.43
pop3 12385 ( 0.06%) 6228148 ( 0.04%) 502.88
imap 7341 ( 0.04%) 3734140 ( 0.03%) 508.67
telnet 10429 ( 0.05%) 2120938 ( 0.02%) 203.37
ssh 22490 ( 0.12%) 6071767 ( 0.04%) 269.98
dns 22502 ( 0.12%) 7833704 ( 0.06%) 348.13
bgp 153 ( 0.00%) 57989 ( 0.00%) 379.01
napster 39 ( 0.00%) 3549 ( 0.00%) 91.00
realaud 45 ( 0.00%) 4404 ( 0.00%) 97.87
rtsp 60119 ( 0.31%) 3819015 ( 0.03%) 63.52
icecast 10294 ( 0.05%) 7901882 ( 0.06%) 767.62
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 3468904 ( 18.05%) 3076981602 ( 22.20%) 887.02
udp 3189186 ( 16.60%) 1397667583 ( 10.08%) 438.25
dns 972878 ( 5.06%) 231801263 ( 1.67%) 238.26
realaud 1816 ( 0.01%) 109228 ( 0.00%) 60.15
halflif 31 ( 0.00%) 2642 ( 0.00%) 85.23
starcra 36 ( 0.00%) 6373 ( 0.00%) 177.03
everque 72 ( 0.00%) 13462 ( 0.00%) 186.97
unreal 16 ( 0.00%) 2695 ( 0.00%) 168.44
quake 18 ( 0.00%) 1538 ( 0.00%) 85.44
cuseeme 6 ( 0.00%) 777 ( 0.00%) 129.50
other 2214145 ( 11.52%) 1165576057 ( 8.41%) 526.42
icmp 711158 ( 3.70%) 58852964 ( 0.42%) 82.76
ipip 339 ( 0.00%) 42032 ( 0.00%) 123.99
ip6 28065 ( 0.15%) 4980798 ( 0.04%) 177.47
other 122589 ( 0.64%) 40966867 ( 0.30%) 334.18
frag 35644 ( 0.19%) 40145890 ( 0.29%) 1126.30
ip6 34597 ( 0.18%) 9660564 ( 0.07%) 279.23
tcp6 15415 ( 0.08%) 6612477 ( 0.05%) 428.96
http(s) 2949 ( 0.02%) 2035526 ( 0.01%) 690.24
http(c) 8727 ( 0.05%) 1257588 ( 0.01%) 144.10
smtp 143 ( 0.00%) 37325 ( 0.00%) 261.01
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 377 ( 0.00%) 32373 ( 0.00%) 85.87
other 3211 ( 0.02%) 3248810 ( 0.02%) 1011.78
udp6 14520 ( 0.08%) 2388528 ( 0.02%) 164.50
dns 13257 ( 0.07%) 2094694 ( 0.02%) 158.01
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1262 ( 0.01%) 293731 ( 0.00%) 232.75
icmp6 4507 ( 0.02%) 540927 ( 0.00%) 120.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 124 ( 0.00%) 114416 ( 0.00%) 922.71
tcpdump file: 200904021245.dump.gz (448.62 MB)