Traffic Trace Info
DumpFile: 200904021400.dump
FileSize: 1344.38MB
Id: 200904021400
StartTime: Thu Apr 2 14:00:01 2009
EndTime: Thu Apr 2 14:15:00 2009
TotalTime: 899.43 seconds
TotalCapSize: 1043.37MB CapLen: 96 bytes
# of packets: 19726255 (12836.94MB)
AvgRate: 119.75Mbps stddev:14.72M
IP flow (unique src/dst pair) Information
# of flows: 904151 (avg. 21.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.5% 1.5% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 516990
Top 10 bandwidth usage (bytes/total in %):
17.9% 15.1% 5.4% 4.6% 3.4% 3.4% 3.4% 3.4% 3.1% 2.7%
# of IPv6 addresses: 1818
Top 10 bandwidth usage (bytes/total in %):
27.4% 19.2% 13.8% 13.7% 13.7% 7.5% 5.7% 5.5% 5.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021400.pktlen.png)
detailed numbers
[ 32- 63]: 5525552
[ 64- 127]: 3859808
[ 128- 255]: 734225
[ 256- 511]: 506619
[ 512- 1023]: 599915
[ 1024- 2047]: 8500136
Protocol Breakdown
![[protocol breakdown chart]](200904021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19726255 (100.00%) 13460509202 (100.00%) 682.37
ip 19692590 ( 99.83%) 13451275566 ( 99.93%) 683.06
tcp 15372705 ( 77.93%) 11870996003 ( 88.19%) 772.21
http(s) 7193476 ( 36.47%) 9489499695 ( 70.50%) 1319.18
http(c) 4925393 ( 24.97%) 786342776 ( 5.84%) 159.65
squid 325097 ( 1.65%) 242348948 ( 1.80%) 745.47
smtp 407513 ( 2.07%) 134298531 ( 1.00%) 329.56
ftp 86745 ( 0.44%) 39776937 ( 0.30%) 458.55
pop3 12545 ( 0.06%) 6362879 ( 0.05%) 507.20
imap 3883 ( 0.02%) 701455 ( 0.01%) 180.65
telnet 13483 ( 0.07%) 2894022 ( 0.02%) 214.64
ssh 11700 ( 0.06%) 1847061 ( 0.01%) 157.87
dns 29748 ( 0.15%) 14050999 ( 0.10%) 472.33
bgp 132 ( 0.00%) 42580 ( 0.00%) 322.58
napster 726 ( 0.00%) 575181 ( 0.00%) 792.26
realaud 62 ( 0.00%) 4610 ( 0.00%) 74.35
rtsp 279912 ( 1.42%) 128865818 ( 0.96%) 460.38
icecast 10985 ( 0.06%) 7959797 ( 0.06%) 724.61
hotline 63 ( 0.00%) 4042 ( 0.00%) 64.16
other 2071241 ( 10.50%) 1015420612 ( 7.54%) 490.25
udp 3586361 ( 18.18%) 1492791883 ( 11.09%) 416.24
dns 1064184 ( 5.39%) 249603752 ( 1.85%) 234.55
realaud 1815 ( 0.01%) 109802 ( 0.00%) 60.50
halflif 25 ( 0.00%) 3878 ( 0.00%) 155.12
starcra 52 ( 0.00%) 7789 ( 0.00%) 149.79
everque 76 ( 0.00%) 13781 ( 0.00%) 181.33
unreal 11 ( 0.00%) 1728 ( 0.00%) 157.09
quake 19 ( 0.00%) 1960 ( 0.00%) 103.16
cuseeme 8 ( 0.00%) 944 ( 0.00%) 118.00
other 2519795 ( 12.77%) 1242889906 ( 9.23%) 493.25
icmp 597150 ( 3.03%) 51140836 ( 0.38%) 85.64
ipip 315 ( 0.00%) 38698 ( 0.00%) 122.85
ip6 26707 ( 0.14%) 4379616 ( 0.03%) 163.99
other 109352 ( 0.55%) 31928530 ( 0.24%) 291.98
frag 55920 ( 0.28%) 57672105 ( 0.43%) 1031.33
ip6 33665 ( 0.17%) 9233636 ( 0.07%) 274.28
tcp6 12527 ( 0.06%) 5788901 ( 0.04%) 462.11
http(s) 2514 ( 0.01%) 1840848 ( 0.01%) 732.24
http(c) 5760 ( 0.03%) 835163 ( 0.01%) 144.99
smtp 1164 ( 0.01%) 425108 ( 0.00%) 365.21
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 362 ( 0.00%) 30515 ( 0.00%) 84.30
other 2725 ( 0.01%) 2657095 ( 0.02%) 975.08
udp6 15879 ( 0.08%) 2665631 ( 0.02%) 167.87
dns 14422 ( 0.07%) 2326762 ( 0.02%) 161.33
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1456 ( 0.01%) 338757 ( 0.00%) 232.66
icmp6 5068 ( 0.03%) 626397 ( 0.00%) 123.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 160 ( 0.00%) 148491 ( 0.00%) 928.07
tcpdump file: 200904021400.dump.gz (469.29 MB)