Traffic Trace Info
DumpFile: 200904021530.dump
FileSize: 1321.59MB
Id: 200904021530
StartTime: Thu Apr 2 15:30:00 2009
EndTime: Thu Apr 2 15:45:00 2009
TotalTime: 899.97 seconds
TotalCapSize: 1034.35MB CapLen: 96 bytes
# of packets: 18817513 (11737.60MB)
AvgRate: 109.40Mbps stddev:14.21M
IP flow (unique src/dst pair) Information
# of flows: 830883 (avg. 22.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.8% 1.4% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 490981
Top 10 bandwidth usage (bytes/total in %):
19.7% 18.7% 9.2% 5.5% 2.3% 2.2% 2.1% 2.1% 1.8% 1.5%
# of IPv6 addresses: 1660
Top 10 bandwidth usage (bytes/total in %):
69.0% 68.8% 6.0% 4.7% 4.5% 4.3% 3.4% 2.5% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021530.pktlen.png)
detailed numbers
[ 32- 63]: 4908333
[ 64- 127]: 4675798
[ 128- 255]: 717255
[ 256- 511]: 355271
[ 512- 1023]: 504026
[ 1024- 2047]: 7656830
Protocol Breakdown
![[protocol breakdown chart]](200904021530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18817513 (100.00%) 12307765077 (100.00%) 654.06
ip 18562479 ( 98.64%) 12279227548 ( 99.77%) 661.51
tcp 15346154 ( 81.55%) 11457183052 ( 93.09%) 746.58
http(s) 6917246 ( 36.76%) 9074429353 ( 73.73%) 1311.86
http(c) 4895284 ( 26.01%) 792753687 ( 6.44%) 161.94
squid 505135 ( 2.68%) 432844444 ( 3.52%) 856.89
smtp 276797 ( 1.47%) 91906188 ( 0.75%) 332.03
ftp 65523 ( 0.35%) 26794383 ( 0.22%) 408.93
pop3 22988 ( 0.12%) 10771234 ( 0.09%) 468.56
imap 3636 ( 0.02%) 419867 ( 0.00%) 115.47
telnet 15736 ( 0.08%) 4062675 ( 0.03%) 258.18
ssh 321423 ( 1.71%) 52159486 ( 0.42%) 162.28
dns 17068 ( 0.09%) 3755923 ( 0.03%) 220.06
bgp 155 ( 0.00%) 58381 ( 0.00%) 376.65
napster 1768 ( 0.01%) 1594761 ( 0.01%) 902.01
realaud 27 ( 0.00%) 2493 ( 0.00%) 92.33
rtsp 151296 ( 0.80%) 9598477 ( 0.08%) 63.44
icecast 11120 ( 0.06%) 7968807 ( 0.06%) 716.62
hotline 35 ( 0.00%) 4454 ( 0.00%) 127.26
other 2140915 ( 11.38%) 948058319 ( 7.70%) 442.83
udp 2353082 ( 12.50%) 744982219 ( 6.05%) 316.60
dns 1239966 ( 6.59%) 242775604 ( 1.97%) 195.79
realaud 1830 ( 0.01%) 112358 ( 0.00%) 61.40
halflif 24 ( 0.00%) 2979 ( 0.00%) 124.12
starcra 82 ( 0.00%) 16448 ( 0.00%) 200.59
everque 86 ( 0.00%) 16995 ( 0.00%) 197.62
unreal 16 ( 0.00%) 2984 ( 0.00%) 186.50
quake 18 ( 0.00%) 1747 ( 0.00%) 97.06
cuseeme 12 ( 0.00%) 2198 ( 0.00%) 183.17
other 1110889 ( 5.90%) 501911656 ( 4.08%) 451.81
icmp 788437 ( 4.19%) 63857081 ( 0.52%) 80.99
ipip 336 ( 0.00%) 41910 ( 0.00%) 124.73
ipsec 282 ( 0.00%) 48244 ( 0.00%) 171.08
ip6 28557 ( 0.15%) 4696715 ( 0.04%) 164.47
other 45631 ( 0.24%) 8418327 ( 0.07%) 184.49
frag 42378 ( 0.23%) 47573677 ( 0.39%) 1122.60
ip6 255034 ( 1.36%) 28537529 ( 0.23%) 111.90
tcp6 234716 ( 1.25%) 25054798 ( 0.20%) 106.75
http(s) 3687 ( 0.02%) 2088364 ( 0.02%) 566.41
http(c) 228115 ( 1.21%) 21091489 ( 0.17%) 92.46
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 298 ( 0.00%) 111129 ( 0.00%) 372.92
imap 250 ( 0.00%) 280930 ( 0.00%) 1123.72
dns 9 ( 0.00%) 1002 ( 0.00%) 111.33
bgp 381 ( 0.00%) 33292 ( 0.00%) 87.38
other 1973 ( 0.01%) 1448338 ( 0.01%) 734.08
udp6 14919 ( 0.08%) 2308701 ( 0.02%) 154.75
dns 13808 ( 0.07%) 2136831 ( 0.02%) 154.75
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1109 ( 0.01%) 171660 ( 0.00%) 154.79
icmp6 5119 ( 0.03%) 940970 ( 0.01%) 183.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 250 ( 0.00%) 228980 ( 0.00%) 915.92
tcpdump file: 200904021530.dump.gz (460.22 MB)