Traffic Trace Info
DumpFile: 200904021545.dump
FileSize: 1285.97MB
Id: 200904021545
StartTime: Thu Apr 2 15:45:00 2009
EndTime: Thu Apr 2 16:00:00 2009
TotalTime: 899.97 seconds
TotalCapSize: 1004.43MB CapLen: 96 bytes
# of packets: 18444117 (12101.68MB)
AvgRate: 112.81Mbps stddev:11.96M
IP flow (unique src/dst pair) Information
# of flows: 903111 (avg. 20.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.6% 2.8% 1.8% 1.6% 1.4% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 549461
Top 10 bandwidth usage (bytes/total in %):
16.9% 16.2% 11.5% 6.2% 4.2% 3.7% 2.9% 2.9% 2.4% 2.3%
# of IPv6 addresses: 2016
Top 10 bandwidth usage (bytes/total in %):
20.6% 20.5% 19.2% 13.2% 12.1% 12.1% 6.5% 6.3% 6.3% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021545.pktlen.png)
detailed numbers
[ 32- 63]: 4758557
[ 64- 127]: 4173105
[ 128- 255]: 754971
[ 256- 511]: 347343
[ 512- 1023]: 506477
[ 1024- 2047]: 7903664
Protocol Breakdown
![[protocol breakdown chart]](200904021545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18444117 (100.00%) 12689534909 (100.00%) 688.00
ip 18380216 ( 99.65%) 12678930241 ( 99.92%) 689.81
tcp 15631030 ( 84.75%) 11934619828 ( 94.05%) 763.52
http(s) 7213485 ( 39.11%) 9490922856 ( 74.79%) 1315.72
http(c) 5169658 ( 28.03%) 875901556 ( 6.90%) 169.43
squid 386122 ( 2.09%) 333834478 ( 2.63%) 864.58
smtp 310354 ( 1.68%) 99828100 ( 0.79%) 321.66
ftp 76589 ( 0.42%) 23016629 ( 0.18%) 300.52
pop3 9487 ( 0.05%) 5031154 ( 0.04%) 530.32
imap 6512 ( 0.04%) 4653815 ( 0.04%) 714.65
telnet 19414 ( 0.11%) 5150600 ( 0.04%) 265.30
ssh 508065 ( 2.75%) 63465900 ( 0.50%) 124.92
dns 15468 ( 0.08%) 1608239 ( 0.01%) 103.97
bgp 182 ( 0.00%) 77252 ( 0.00%) 424.46
napster 35 ( 0.00%) 4435 ( 0.00%) 126.71
realaud 28 ( 0.00%) 3260 ( 0.00%) 116.43
rtsp 32358 ( 0.18%) 2384677 ( 0.02%) 73.70
icecast 11298 ( 0.06%) 7991657 ( 0.06%) 707.35
hotline 6 ( 0.00%) 400 ( 0.00%) 66.67
other 1871963 ( 10.15%) 1020744460 ( 8.04%) 545.28
udp 2154239 ( 11.68%) 681234453 ( 5.37%) 316.23
dns 1087956 ( 5.90%) 221353468 ( 1.74%) 203.46
realaud 1818 ( 0.01%) 110072 ( 0.00%) 60.55
halflif 27 ( 0.00%) 2482 ( 0.00%) 91.93
starcra 60 ( 0.00%) 10740 ( 0.00%) 179.00
everque 66 ( 0.00%) 12512 ( 0.00%) 189.58
unreal 17 ( 0.00%) 2964 ( 0.00%) 174.35
quake 19 ( 0.00%) 1490 ( 0.00%) 78.42
cuseeme 7 ( 0.00%) 911 ( 0.00%) 130.14
other 1063313 ( 5.77%) 459543583 ( 3.62%) 432.18
icmp 506325 ( 2.75%) 44170132 ( 0.35%) 87.24
ipip 318 ( 0.00%) 39304 ( 0.00%) 123.60
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 28579 ( 0.15%) 6408610 ( 0.05%) 224.24
other 59453 ( 0.32%) 12411386 ( 0.10%) 208.76
frag 44856 ( 0.24%) 49591782 ( 0.39%) 1105.58
ip6 63901 ( 0.35%) 10604668 ( 0.08%) 165.95
tcp6 43998 ( 0.24%) 7258724 ( 0.06%) 164.98
http(s) 3058 ( 0.02%) 1960470 ( 0.02%) 641.10
http(c) 37920 ( 0.21%) 3605289 ( 0.03%) 95.08
smtp 460 ( 0.00%) 167800 ( 0.00%) 364.78
imap 118 ( 0.00%) 75971 ( 0.00%) 643.82
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 1004 ( 0.00%) 111.56
bgp 382 ( 0.00%) 34296 ( 0.00%) 89.78
other 2049 ( 0.01%) 1413722 ( 0.01%) 689.96
udp6 15281 ( 0.08%) 2599318 ( 0.02%) 170.10
dns 13636 ( 0.07%) 2136121 ( 0.02%) 156.65
quake 2 ( 0.00%) 205 ( 0.00%) 102.50
other 1643 ( 0.01%) 462992 ( 0.00%) 281.80
icmp6 4362 ( 0.02%) 528138 ( 0.00%) 121.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 230 ( 0.00%) 214408 ( 0.00%) 932.21
tcpdump file: 200904021545.dump.gz (460.97 MB)