Traffic Trace Info
DumpFile: 200904021500.dump
FileSize: 1395.13MB
Id: 200904021500
StartTime: Thu Apr 2 15:00:00 2009
EndTime: Thu Apr 2 15:15:00 2009
TotalTime: 900.34 seconds
TotalCapSize: 1093.02MB CapLen: 96 bytes
# of packets: 19794516 (12382.67MB)
AvgRate: 115.38Mbps stddev:20.97M
IP flow (unique src/dst pair) Information
# of flows: 712381 (avg. 27.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.8% 2.1% 1.8% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 433916
Top 10 bandwidth usage (bytes/total in %):
17.0% 15.9% 6.1% 4.9% 4.6% 3.6% 3.6% 2.9% 2.8% 2.1%
# of IPv6 addresses: 1762
Top 10 bandwidth usage (bytes/total in %):
67.4% 63.6% 7.6% 6.4% 6.4% 5.0% 4.6% 3.8% 3.4% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021500.pktlen.png)
detailed numbers
[ 32- 63]: 4693472
[ 64- 127]: 5307858
[ 128- 255]: 715993
[ 256- 511]: 344595
[ 512- 1023]: 628491
[ 1024- 2047]: 8104107
Protocol Breakdown
![[protocol breakdown chart]](200904021500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19794516 (100.00%) 12984165874 (100.00%) 655.95
ip 19520490 ( 98.62%) 12951039580 ( 99.74%) 663.46
tcp 15989022 ( 80.78%) 11817725723 ( 91.02%) 739.11
http(s) 6973030 ( 35.23%) 9058341993 ( 69.76%) 1299.05
http(c) 5243554 ( 26.49%) 1003035787 ( 7.73%) 191.29
squid 366341 ( 1.85%) 276322624 ( 2.13%) 754.28
smtp 327267 ( 1.65%) 122348901 ( 0.94%) 373.85
ftp 105259 ( 0.53%) 59992712 ( 0.46%) 569.95
pop3 24319 ( 0.12%) 16017415 ( 0.12%) 658.64
imap 10704 ( 0.05%) 10154174 ( 0.08%) 948.63
telnet 14893 ( 0.08%) 3578614 ( 0.03%) 240.29
ssh 485474 ( 2.45%) 86690085 ( 0.67%) 178.57
dns 22552 ( 0.11%) 7037858 ( 0.05%) 312.07
bgp 159 ( 0.00%) 57730 ( 0.00%) 363.08
napster 246 ( 0.00%) 17208 ( 0.00%) 69.95
realaud 158 ( 0.00%) 11048 ( 0.00%) 69.92
rtsp 171887 ( 0.87%) 10672218 ( 0.08%) 62.09
icecast 11152 ( 0.06%) 7977791 ( 0.06%) 715.37
hotline 1 ( 0.00%) 78 ( 0.00%) 78.00
other 2231963 ( 11.28%) 1155465707 ( 8.90%) 517.69
udp 2829707 ( 14.30%) 1062415498 ( 8.18%) 375.45
dns 1317298 ( 6.65%) 281810936 ( 2.17%) 213.93
realaud 1818 ( 0.01%) 109809 ( 0.00%) 60.40
halflif 33 ( 0.00%) 2369 ( 0.00%) 71.79
starcra 58 ( 0.00%) 11035 ( 0.00%) 190.26
everque 58 ( 0.00%) 12492 ( 0.00%) 215.38
unreal 16 ( 0.00%) 2540 ( 0.00%) 158.75
quake 13 ( 0.00%) 1060 ( 0.00%) 81.54
cuseeme 3 ( 0.00%) 276 ( 0.00%) 92.00
other 1510253 ( 7.63%) 780318555 ( 6.01%) 516.68
icmp 625448 ( 3.16%) 52770540 ( 0.41%) 84.37
ipip 331 ( 0.00%) 41918 ( 0.00%) 126.64
ip6 28875 ( 0.15%) 5471641 ( 0.04%) 189.49
other 47107 ( 0.24%) 12614260 ( 0.10%) 267.78
frag 43966 ( 0.22%) 49695313 ( 0.38%) 1130.31
ip6 274024 ( 1.38%) 33126174 ( 0.26%) 120.89
tcp6 252208 ( 1.27%) 28964090 ( 0.22%) 114.84
http(s) 3367 ( 0.02%) 3445341 ( 0.03%) 1023.27
http(c) 245337 ( 1.24%) 22644250 ( 0.17%) 92.30
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 446 ( 0.00%) 199096 ( 0.00%) 446.40
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 385 ( 0.00%) 34351 ( 0.00%) 89.22
other 2662 ( 0.01%) 2640118 ( 0.02%) 991.78
udp6 15879 ( 0.08%) 2585342 ( 0.02%) 162.82
dns 14547 ( 0.07%) 2315552 ( 0.02%) 159.18
halflif 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1329 ( 0.01%) 269455 ( 0.00%) 202.75
icmp6 5636 ( 0.03%) 1316670 ( 0.01%) 233.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 270 ( 0.00%) 255856 ( 0.00%) 947.61
tcpdump file: 200904021500.dump.gz (480.14 MB)