Traffic Trace Info
DumpFile: 200904021600.dump
FileSize: 1389.94MB
Id: 200904021600
StartTime: Thu Apr 2 16:00:00 2009
EndTime: Thu Apr 2 16:15:01 2009
TotalTime: 900.33 seconds
TotalCapSize: 1085.30MB CapLen: 96 bytes
# of packets: 19953138 (13167.29MB)
AvgRate: 122.69Mbps stddev:13.14M
IP flow (unique src/dst pair) Information
# of flows: 952968 (avg. 20.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 2.1% 1.8% 1.5% 1.4% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 513566
Top 10 bandwidth usage (bytes/total in %):
17.2% 14.1% 11.2% 5.9% 3.6% 3.2% 2.9% 2.4% 2.3% 2.1%
# of IPv6 addresses: 1814
Top 10 bandwidth usage (bytes/total in %):
28.7% 17.8% 14.4% 14.4% 12.4% 7.7% 7.0% 7.0% 6.0% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021600.pktlen.png)
detailed numbers
[ 32- 63]: 5242985
[ 64- 127]: 4409267
[ 128- 255]: 762358
[ 256- 511]: 354868
[ 512- 1023]: 560875
[ 1024- 2047]: 8622785
Protocol Breakdown
![[protocol breakdown chart]](200904021600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19953138 (100.00%) 13806903844 (100.00%) 691.97
ip 19922380 ( 99.85%) 13797711630 ( 99.93%) 692.57
tcp 16776174 ( 84.08%) 12935335394 ( 93.69%) 771.05
http(s) 7736924 ( 38.78%) 10207137951 ( 73.93%) 1319.28
http(c) 5792156 ( 29.03%) 1116401460 ( 8.09%) 192.74
squid 383497 ( 1.92%) 309885653 ( 2.24%) 808.05
smtp 310024 ( 1.55%) 106782662 ( 0.77%) 344.43
ftp 63157 ( 0.32%) 24355982 ( 0.18%) 385.64
pop3 12145 ( 0.06%) 8610600 ( 0.06%) 708.98
imap 9659 ( 0.05%) 9258356 ( 0.07%) 958.52
telnet 16860 ( 0.08%) 3917573 ( 0.03%) 232.36
ssh 312122 ( 1.56%) 50171565 ( 0.36%) 160.74
dns 19557 ( 0.10%) 5510321 ( 0.04%) 281.76
bgp 150 ( 0.00%) 49502 ( 0.00%) 330.01
napster 30 ( 0.00%) 5126 ( 0.00%) 170.87
realaud 58 ( 0.00%) 9312 ( 0.00%) 160.55
rtsp 291721 ( 1.46%) 18068257 ( 0.13%) 61.94
icecast 11906 ( 0.06%) 8239455 ( 0.06%) 692.04
hotline 14 ( 0.00%) 1446 ( 0.00%) 103.29
other 1816187 ( 9.10%) 1066929753 ( 7.73%) 587.46
udp 2405761 ( 12.06%) 789918757 ( 5.72%) 328.34
dns 1210282 ( 6.07%) 265714097 ( 1.92%) 219.55
realaud 1839 ( 0.01%) 111753 ( 0.00%) 60.77
halflif 26 ( 0.00%) 2828 ( 0.00%) 108.77
starcra 62 ( 0.00%) 10923 ( 0.00%) 176.18
everque 62 ( 0.00%) 12056 ( 0.00%) 194.45
unreal 22 ( 0.00%) 3288 ( 0.00%) 149.45
quake 25 ( 0.00%) 2288 ( 0.00%) 91.52
cuseeme 5 ( 0.00%) 694 ( 0.00%) 138.80
other 1193165 ( 5.98%) 523923128 ( 3.79%) 439.10
icmp 638340 ( 3.20%) 53898502 ( 0.39%) 84.44
ipip 333 ( 0.00%) 41506 ( 0.00%) 124.64
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 26478 ( 0.13%) 4645208 ( 0.03%) 175.44
other 75022 ( 0.38%) 13825735 ( 0.10%) 184.29
frag 46248 ( 0.23%) 51360730 ( 0.37%) 1110.55
ip6 30758 ( 0.15%) 9192214 ( 0.07%) 298.86
tcp6 9694 ( 0.05%) 5865067 ( 0.04%) 605.02
http(s) 2514 ( 0.01%) 2236846 ( 0.02%) 889.76
http(c) 3401 ( 0.02%) 647824 ( 0.00%) 190.48
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 464 ( 0.00%) 171082 ( 0.00%) 368.71
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 542 ( 0.00%) 108.40
bgp 383 ( 0.00%) 33732 ( 0.00%) 88.07
other 2919 ( 0.01%) 2774361 ( 0.02%) 950.45
udp6 16376 ( 0.08%) 2712668 ( 0.02%) 165.65
dns 14789 ( 0.07%) 2401163 ( 0.02%) 162.36
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1585 ( 0.01%) 311293 ( 0.00%) 196.40
icmp6 4571 ( 0.02%) 529561 ( 0.00%) 115.85
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 86 ( 0.00%) 80702 ( 0.00%) 938.40
tcpdump file: 200904021600.dump.gz (488.83 MB)