Traffic Trace Info
DumpFile: 200904021515.dump
FileSize: 1354.22MB
Id: 200904021515
StartTime: Thu Apr 2 15:15:00 2009
EndTime: Thu Apr 2 15:30:00 2009
TotalTime: 900.10 seconds
TotalCapSize: 1060.23MB CapLen: 96 bytes
# of packets: 19263250 (11890.27MB)
AvgRate: 110.83Mbps stddev:17.44M
IP flow (unique src/dst pair) Information
# of flows: 756625 (avg. 25.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.6% 1.4% 1.2% 1.1% 1.1% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 461075
Top 10 bandwidth usage (bytes/total in %):
18.7% 13.9% 6.9% 4.6% 3.4% 3.4% 2.5% 2.4% 2.3% 1.6%
# of IPv6 addresses: 1798
Top 10 bandwidth usage (bytes/total in %):
75.2% 75.2% 5.8% 4.7% 4.7% 3.9% 2.4% 1.9% 1.9% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021515.pktlen.png)
detailed numbers
[ 32- 63]: 4940562
[ 64- 127]: 4998048
[ 128- 255]: 629687
[ 256- 511]: 342988
[ 512- 1023]: 629865
[ 1024- 2047]: 7722100
Protocol Breakdown
![[protocol breakdown chart]](200904021515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19263250 (100.00%) 12467851479 (100.00%) 647.24
ip 19011445 ( 98.69%) 12440733902 ( 99.78%) 654.38
tcp 15931364 ( 82.70%) 11465343222 ( 91.96%) 719.67
http(s) 6879774 ( 35.71%) 9025322923 ( 72.39%) 1311.86
http(c) 5037770 ( 26.15%) 805835609 ( 6.46%) 159.96
squid 243378 ( 1.26%) 148610608 ( 1.19%) 610.62
smtp 318870 ( 1.66%) 129594033 ( 1.04%) 406.42
ftp 89261 ( 0.46%) 48121210 ( 0.39%) 539.11
pop3 92249 ( 0.48%) 98618780 ( 0.79%) 1069.05
imap 3199 ( 0.02%) 440425 ( 0.00%) 137.68
telnet 15002 ( 0.08%) 4137861 ( 0.03%) 275.82
ssh 401801 ( 2.09%) 68556492 ( 0.55%) 170.62
dns 15030 ( 0.08%) 1556583 ( 0.01%) 103.57
bgp 150 ( 0.00%) 50293 ( 0.00%) 335.29
napster 145 ( 0.00%) 45176 ( 0.00%) 311.56
realaud 65 ( 0.00%) 5498 ( 0.00%) 84.58
rtsp 278734 ( 1.45%) 17209277 ( 0.14%) 61.74
icecast 17221 ( 0.09%) 11574980 ( 0.09%) 672.14
hotline 9 ( 0.00%) 574 ( 0.00%) 63.78
other 2538705 ( 13.18%) 1105662840 ( 8.87%) 435.52
udp 2510255 ( 13.03%) 915770525 ( 7.35%) 364.81
dns 1186236 ( 6.16%) 258745878 ( 2.08%) 218.12
realaud 1819 ( 0.01%) 110194 ( 0.00%) 60.58
halflif 15 ( 0.00%) 1653 ( 0.00%) 110.20
starcra 64 ( 0.00%) 11801 ( 0.00%) 184.39
everque 90 ( 0.00%) 15892 ( 0.00%) 176.58
unreal 18 ( 0.00%) 2741 ( 0.00%) 152.28
quake 13 ( 0.00%) 1139 ( 0.00%) 87.62
cuseeme 6 ( 0.00%) 541 ( 0.00%) 90.17
other 1321798 ( 6.86%) 656708000 ( 5.27%) 496.83
icmp 487566 ( 2.53%) 43210438 ( 0.35%) 88.62
ipip 324 ( 0.00%) 39848 ( 0.00%) 122.99
ipsec 483 ( 0.00%) 91050 ( 0.00%) 188.51
ip6 31080 ( 0.16%) 7237295 ( 0.06%) 232.86
other 50373 ( 0.26%) 9041524 ( 0.07%) 179.49
frag 41145 ( 0.21%) 46318830 ( 0.37%) 1125.75
ip6 251805 ( 1.31%) 27117577 ( 0.22%) 107.69
tcp6 232047 ( 1.20%) 24083337 ( 0.19%) 103.79
http(s) 1993 ( 0.01%) 1271573 ( 0.01%) 638.02
http(c) 227121 ( 1.18%) 21061003 ( 0.17%) 92.73
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 527 ( 0.00%) 217840 ( 0.00%) 413.36
imap 195 ( 0.00%) 116008 ( 0.00%) 594.91
bgp 381 ( 0.00%) 33240 ( 0.00%) 87.24
other 1827 ( 0.01%) 1383419 ( 0.01%) 757.21
udp6 15205 ( 0.08%) 2472070 ( 0.02%) 162.58
dns 13419 ( 0.07%) 2111099 ( 0.02%) 157.32
other 1786 ( 0.01%) 360971 ( 0.00%) 202.11
icmp6 4523 ( 0.02%) 558090 ( 0.00%) 123.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200904021515.dump.gz (470.90 MB)