Traffic Trace Info
DumpFile: 200904021330.dump
FileSize: 1175.51MB
Id: 200904021330
StartTime: Thu Apr 2 13:30:00 2009
EndTime: Thu Apr 2 13:45:00 2009
TotalTime: 899.55 seconds
TotalCapSize: 916.48MB CapLen: 96 bytes
# of packets: 16973676 (11325.84MB)
AvgRate: 105.62Mbps stddev:18.77M
IP flow (unique src/dst pair) Information
# of flows: 796562 (avg. 21.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.4% 1.8% 1.6% 1.5% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 489989
Top 10 bandwidth usage (bytes/total in %):
19.0% 13.6% 6.6% 6.6% 4.6% 4.6% 3.9% 2.5% 2.3% 1.9%
# of IPv6 addresses: 1586
Top 10 bandwidth usage (bytes/total in %):
34.7% 24.8% 16.8% 16.8% 9.9% 8.3% 7.1% 5.5% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021330.pktlen.png)
detailed numbers
[ 32- 63]: 4302561
[ 64- 127]: 3604571
[ 128- 255]: 639053
[ 256- 511]: 469684
[ 512- 1023]: 538465
[ 1024- 2047]: 7419342
Protocol Breakdown
![[protocol breakdown chart]](200904021330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16973676 (100.00%) 11876004072 (100.00%) 699.67
ip 16944396 ( 99.83%) 11868422344 ( 99.94%) 700.43
tcp 13849735 ( 81.60%) 10869319731 ( 91.52%) 784.80
http(s) 6557405 ( 38.63%) 8505721331 ( 71.62%) 1297.12
http(c) 4406200 ( 25.96%) 839851146 ( 7.07%) 190.61
squid 251185 ( 1.48%) 177031159 ( 1.49%) 704.78
smtp 367267 ( 2.16%) 119423978 ( 1.01%) 325.17
ftp 98266 ( 0.58%) 51188071 ( 0.43%) 520.91
pop3 20693 ( 0.12%) 14513122 ( 0.12%) 701.35
imap 4211 ( 0.02%) 598679 ( 0.01%) 142.17
telnet 55328 ( 0.33%) 4607041 ( 0.04%) 83.27
ssh 14469 ( 0.09%) 4450545 ( 0.04%) 307.59
dns 16109 ( 0.09%) 3641690 ( 0.03%) 226.07
bgp 135 ( 0.00%) 36856 ( 0.00%) 273.01
napster 46 ( 0.00%) 3214 ( 0.00%) 69.87
realaud 28 ( 0.00%) 2218 ( 0.00%) 79.21
rtsp 301768 ( 1.78%) 155602528 ( 1.31%) 515.64
icecast 10695 ( 0.06%) 7918090 ( 0.07%) 740.35
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 1745855 ( 10.29%) 984725557 ( 8.29%) 564.04
udp 2507775 ( 14.77%) 931850899 ( 7.85%) 371.58
dns 1036635 ( 6.11%) 237495422 ( 2.00%) 229.10
realaud 1827 ( 0.01%) 111057 ( 0.00%) 60.79
halflif 20 ( 0.00%) 1964 ( 0.00%) 98.20
starcra 55 ( 0.00%) 8791 ( 0.00%) 159.84
everque 77 ( 0.00%) 13727 ( 0.00%) 178.27
unreal 18 ( 0.00%) 2860 ( 0.00%) 158.89
quake 14 ( 0.00%) 1700 ( 0.00%) 121.43
cuseeme 8 ( 0.00%) 946 ( 0.00%) 118.25
other 1468977 ( 8.65%) 694091066 ( 5.84%) 472.50
icmp 492757 ( 2.90%) 43722540 ( 0.37%) 88.73
ipip 309 ( 0.00%) 38158 ( 0.00%) 123.49
ip6 24900 ( 0.15%) 3825629 ( 0.03%) 153.64
other 68920 ( 0.41%) 19665387 ( 0.17%) 285.34
frag 38430 ( 0.23%) 42784952 ( 0.36%) 1113.32
ip6 29280 ( 0.17%) 7581728 ( 0.06%) 258.94
tcp6 9864 ( 0.06%) 4477973 ( 0.04%) 453.97
http(s) 3096 ( 0.02%) 2107588 ( 0.02%) 680.75
http(c) 4409 ( 0.03%) 909127 ( 0.01%) 206.20
smtp 140 ( 0.00%) 43247 ( 0.00%) 308.91
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 378 ( 0.00%) 33678 ( 0.00%) 89.10
other 1839 ( 0.01%) 1384108 ( 0.01%) 752.64
udp6 14458 ( 0.09%) 2275369 ( 0.02%) 157.38
dns 13361 ( 0.08%) 2109802 ( 0.02%) 157.91
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1095 ( 0.01%) 165362 ( 0.00%) 151.02
icmp6 4649 ( 0.03%) 560624 ( 0.00%) 120.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 279 ( 0.00%) 263682 ( 0.00%) 945.10
tcpdump file: 200904021330.dump.gz (411.37 MB)